last executing test programs: 2m11.913784937s ago: executing program 1 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800000001, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100000000003, 0x80, 0x40000000005, 0x61, 0x5, 0x3, 0x5], 0x0, 0x8144}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x13}, 0x20040840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m11.598793599s ago: executing program 1 (id=13): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000680)=@allocspi={0xf8, 0x16, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {}, {}, {0x0, 0x0, 0x9}, 0x70bd2b, 0x0, 0x0, 0x1}, 0x0, 0x8}}, 0xf8}}, 0x0) 2m11.504466176s ago: executing program 1 (id=14): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x32c881, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc356bf9b09d4372dada82178d12dd14c1ac862", 0xfffffcfa}], 0x1, 0x2) r5 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8b}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m9.933242804s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 2m9.714796179s ago: executing program 1 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) 2m8.510623732s ago: executing program 1 (id=21): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b558f", 0x5, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000740), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000780)="88fce2ca0b76fed5bdfb55cb08d888969f066276823237b5467bbc63ad984c7bae1b751127fa1fa9fb81e474eb9ebc7001", 0x5, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x4e26, @private=0xa010101}}, {{0x2, 0x2, @rand_addr=0x64010101}}}, 0x108) socket$netlink(0x10, 0x3, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000700)=[{0x5, 0x0, 0x0, 0x9}, {0x2, 0xff, 0x1, 0xe}, {0xacc, 0x6, 0x6, 0x3a6}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@data_journal}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@dioread_nolock}, {@delalloc}, {@nouser_xattr}]}, 0x1, 0xbcc, &(0x7f0000000bc0)="$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") r6 = socket$inet_udp(0x2, 0x2, 0x0) chmod(&(0x7f0000000000)='./file0/file0\x00', 0x0) fstat(r6, &(0x7f00000002c0)) 2m8.170976576s ago: executing program 32 (id=21): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b558f", 0x5, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000740), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000780)="88fce2ca0b76fed5bdfb55cb08d888969f066276823237b5467bbc63ad984c7bae1b751127fa1fa9fb81e474eb9ebc7001", 0x5, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x4e26, @private=0xa010101}}, {{0x2, 0x2, @rand_addr=0x64010101}}}, 0x108) socket$netlink(0x10, 0x3, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000700)=[{0x5, 0x0, 0x0, 0x9}, {0x2, 0xff, 0x1, 0xe}, {0xacc, 0x6, 0x6, 0x3a6}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@data_journal}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@dioread_nolock}, {@delalloc}, {@nouser_xattr}]}, 0x1, 0xbcc, &(0x7f0000000bc0)="$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") r6 = socket$inet_udp(0x2, 0x2, 0x0) chmod(&(0x7f0000000000)='./file0/file0\x00', 0x0) fstat(r6, &(0x7f00000002c0)) 1m52.757219451s ago: executing program 5 (id=72): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) 1m52.538682226s ago: executing program 5 (id=74): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@i_version}, {@jqfmt_vfsold}]}, 0x3, 0x553, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m50.942676256s ago: executing program 5 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$pptp(0x18, 0x1, 0x2) pipe2(&(0x7f0000000200), 0x80800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xffea, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2e2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_QUANTUM={0x7, 0x6, 0x7fffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x12101497}]}, 0x78}}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) sendfile(r7, r7, 0x0, 0x20000023896) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') 1m49.896400739s ago: executing program 5 (id=81): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 1m49.795680465s ago: executing program 5 (id=84): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) setuid(0xee01) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) 1m48.944305955s ago: executing program 5 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r1, 0x121, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x84) 1m48.601467158s ago: executing program 33 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r1, 0x121, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x84) 50.638793045s ago: executing program 3 (id=327): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x2a60, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 50.511474524s ago: executing program 3 (id=330): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 47.418618298s ago: executing program 3 (id=340): ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r7, 0xfffffe9c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x408, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv6=@mcast1, [], @ipv4=@local}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x50, 0xfc, 0x2, 0xfff00002}, {0x16, 0x0, 0x0, 0x8000000}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) 46.180405313s ago: executing program 3 (id=342): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@usrquota}, {@barrier}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xd, &(0x7f0000000200)}, 0x10) r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x4, 0xf01, 0x3, 0x5b5, 0x6, 0xfffffffffffffff9, 0x20002001000, 0x7, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) 45.605398484s ago: executing program 3 (id=344): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 44.990042456s ago: executing program 3 (id=348): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x63a, &(0x7f0000000640)="$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") 44.65632635s ago: executing program 34 (id=348): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x63a, &(0x7f0000000640)="$eJzs3c9rHNcdAPDv7GplyVYru5RSm5YKerChWNK6pm57qe0e6oOhhvpQSg8WluQKr39gyVCpBsvQQwsJhJBrCL7kH8g9+J5bCCS55RxwQnBIQhK8YWZnpdVqV5It7a6t+Xxgte+92d33vjv7dt7M6O0EUFgT6Z9SxNGIp1eSiPGWZWPRWDiRP+7JF/euprck6vW/fZ5Ekpc1H5/k94fyzEhEvH8+4iflzfUuLq9cn6nVG+5HTFVu3J5aXF45uXBj5trctbmb1VO/P31m+g/V09U9ifNQfn/h4l9/8ep///W7+Q9qJ5M4G5cr/5mNtjj2ykRMxNM8xNbyoYg4kyY6vC8vm30QQqGV889jJSJ+FuNRznIN47HwykAbB/RUvRxRBwoq0f+hoJrjgOa+/c72gy/3eFTSP4/PNXaANsc/1Dg2EiPZvtHBJ0nLntFQdmzj8B7Un9bx/b1jb6a32HAc4uu1tTO0B/V0s/ogIn7eKf4ka9vhLNI0/tKGdiQRMR0Rw3n7/ryLNiQt6V4ch9nK88Zfioiz+X1afv45659oy3eIv5erH4CCenQu35Cvprn17V869miOf2LT+Kdxbqh92/U8drD966nu47/m9n4kO0ZeatsQp2OWS51fstJe8Mn/L7zerf7W8V96S+tvjgX74fGDiGNt8f8vDTYf/6TxJx3Wf/qQK2d3VsdfPvzsQrdlg46//jDieMf9n/VRaZqaWtp4fnI0X1Y9XZ2aX6jNTTf+dqzj3ff++Xa3+ncQ//09CrWjdP0f7BJ/y/ovtT8vfU9u77COdy49vNFt2di28Zc+HU4a+5vDecm/Z5aW7lQjhpOL+UMaJ7Ky8lNbt6X5mOZrpPGf+HXn/r/h8/9g4+uMNr8yd+D2368/6bZsu/Vfbzt3nJWtJ59uWviM0vhnt1//m/p/WvbaWm7rj+hX/7j7y27Ltop/dJexAQAAAAAAQNGUsnOwSWlyLV0qTU425sv+NA6WarcWl34zf+vuzdmIE9n/Q1ZKzTPd4418kuar+f/DNvOn2vK/jYgjEfFGeTTLT169VZsddPAAAAAAAAAAAAAAAAAAAADwgjiUz/9vXqf6y3Jj/j9QEK4wBsWl/0NxZf1/0yWegCKw/Yfi0v+huPR/KC79H4pL/4fi0v+huPR/KC79HwAAAAD2pSO/evRxEhGrfxzNbqnhfJkZQbC/VQbdAGBgyoNuADAwa6f+DfahcHY0/v82/3HA3jcHGICkU2E2OKhv3fkfdXwmAAAAAAAAAAAAANADx492nv+fbDM3YKRvLQR6xbQ/KK5dzP/30wHwkvPT/1Bcfv8L2G4Wf9fjfeb/AwAAAAAAAAAAAEDfjGW3pDSZzwUei1JpcjLiRxFxOCrJ/EJtbjoifhwRH5UrB9J8de3ZZg8DAAAAAAAAAAAAAAAAAADAXlhcXrk+U6vN3WlNfLepZH8nmldB7UNdf4pnfFYk/X9bRiNiraQS8axt7l3iQP6x3c3rDC0uryTf1DMjEavx4gS4q7j2OLHtV8dwT7+YAAAAAAAAAAAAAAAAAACggFrmHnd27K0+twgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+m/9+v+9SVTm7iwOOkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OX0QwAAAP//nYtBGg==") 3.052504339s ago: executing program 6 (id=599): unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007756f516159298f43eb7862a404ee0da3d0dcd7366a222523b3d1d2bf34998fa6450c92067334f2320770c6d01f33fb48cc1a34418357ae086f78011b09e7e59cb3065463249da35ddecf86601ab0bf654219dcffb9f297ec6d4a51aa76c8780f83cc311cfecb6cb5b0743952ccaac0143"], 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 2.970614345s ago: executing program 6 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000240)) 2.856069823s ago: executing program 6 (id=604): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}, 0x5}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2.546877254s ago: executing program 6 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c064}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.152171831s ago: executing program 6 (id=615): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) 2.02320621s ago: executing program 4 (id=618): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.000806111s ago: executing program 6 (id=619): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0xb0, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.835296393s ago: executing program 2 (id=622): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r3, r1, 0x0, 0x80001d00c0d0) 1.727826311s ago: executing program 4 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcc84}, 0x20000000) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000000)=ANY=[], 0x8) 1.629222228s ago: executing program 2 (id=627): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001300010100000000000000000000000000000000000000000000000100000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000000042e34743ffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000000000000000044000500fe8000000000000000000000000000bb000000002b0000000a000000ac1414aa000000000000000000000040000003000000"], 0xfc}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.474674888s ago: executing program 4 (id=628): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rename(0x0, &(0x7f0000000200)='./file1\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='ext2\x00', 0x3200cd0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.398520603s ago: executing program 0 (id=629): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) 1.318917129s ago: executing program 0 (id=630): unshare(0x26000400) r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, 0x0, 0x0) 1.246650034s ago: executing program 0 (id=631): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x2c020400) socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=ANY=[@ANYBLOB="500000002700010000000000000000000a00010000000000000000000000005fac1a01010000000000000000000000000000000000000800000000002b000000df11fedf80f8506f901cae2b91f90b22bf200bca638078e77edddcbfc7c0f903bcc63c55e9a75d78291a0d348631f4f59aed21f2d0bbac95b12341d68202"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 1.148010831s ago: executing program 7 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000480)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2d, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x22, @random=0x6a8, 0x4500, @void, @val, @val={0x3, 0x1, 0x33}, @void, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) 1.01468392s ago: executing program 2 (id=634): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}], 0x40}, 0x20004000) 802.686384ms ago: executing program 7 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) 484.624986ms ago: executing program 2 (id=636): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x8800, 0x0, 0x26) 429.8913ms ago: executing program 4 (id=637): ftruncate(0xffffffffffffffff, 0x200002) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 366.606615ms ago: executing program 0 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0xcbe7b1f001613ed, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040) 366.356745ms ago: executing program 0 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) shutdown(r0, 0x0) 366.219195ms ago: executing program 7 (id=640): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) 240.514923ms ago: executing program 7 (id=641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000bc0)="317f34d7", 0x4}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 226.122225ms ago: executing program 2 (id=642): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x33, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 164.232338ms ago: executing program 4 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}}, 0x20}}, 0x0) 163.933489ms ago: executing program 0 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='hsr0\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) gettid() r3 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4000040) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, 0x0, &(0x7f00000004c0)=0x51) 50.689237ms ago: executing program 7 (id=645): r0 = socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x40005, 0x2}, 0x80, 0x0}}], 0x1, 0x4040004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffefff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 50.472787ms ago: executing program 2 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xec5f, 0xf9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b", 0x31}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734ca177959210a20ee", 0x3d}], 0x2}}], 0x1, 0x2090) 28.214728ms ago: executing program 4 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x85, '\x00', 0xfffff000, 0x9359, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 0s ago: executing program 7 (id=648): socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {0x0}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001280)={0x30000010}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007110b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 271] EXT4-fs (loop2): Remounting filesystem read-only [ 57.119148][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129978][ T4271] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 57.136248][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.174229][ T4271] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.7: inode #15: comm syz.2.7: iget: illegal inode # [ 57.181123][ T4197] device veth0_macvtap entered promiscuous mode [ 57.201499][ T4185] device veth0_macvtap entered promiscuous mode [ 57.213300][ T4271] EXT4-fs (loop2): Remounting filesystem read-only [ 57.218521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.233869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.249151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.258359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.267979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.277479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.287168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.295586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.306221][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.315746][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.324742][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.335968][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.368635][ T4197] device veth1_macvtap entered promiscuous mode [ 57.382470][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.394054][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.408677][ T4185] device veth1_macvtap entered promiscuous mode [ 57.416346][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 57.422477][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 57.443411][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 57.446318][ T4277] loop2: detected capacity change from 0 to 4096 [ 57.458001][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 57.464835][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 57.488904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.506633][ T4277] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.510022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.518412][ T4277] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 57.528012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.529789][ T4277] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 57.542696][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.556651][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.566832][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.577502][ T4277] EXT4-fs (loop2): DAX unsupported by block device. [ 57.592884][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.606254][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.617392][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.629030][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.659932][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.671711][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.698305][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.710955][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.712712][ T4280] xt_hashlimit: size too large, truncated to 1048576 [ 57.727682][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.727699][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.727707][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.727718][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.731977][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.802550][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.834343][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.856487][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.876942][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.893616][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.911686][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.928739][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.939383][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.954564][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.968717][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.983567][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.997321][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.017276][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.041574][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.052956][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.068613][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.079638][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.095393][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.109379][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.127353][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.140224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.192527][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.224080][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.241710][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.275982][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.290941][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.311690][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.314011][ T4288] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11'. [ 58.321306][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.346590][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.360679][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.369855][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.394199][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.507030][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.521883][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.563968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.635479][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.666572][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.698538][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.763297][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.771198][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.813817][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.821674][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.835287][ T4296] loop3: detected capacity change from 0 to 128 [ 58.863386][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.871225][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.889475][ T4296] ======================================================= [ 58.889475][ T4296] WARNING: The mand mount option has been deprecated and [ 58.889475][ T4296] and is ignored by this kernel. Remove the mand [ 58.889475][ T4296] option from the mount to silence this warning. [ 58.889475][ T4296] ======================================================= [ 58.961072][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.963105][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.975637][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.991255][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.058957][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.103588][ T4296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.150606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.163214][ T4296] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.719185][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 59.725903][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 59.732023][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 60.147105][ T4308] loop0: detected capacity change from 0 to 256 [ 60.421899][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 60.428490][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 60.469625][ T4308] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.480457][ T4308] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 60.528434][ T4308] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 60.570763][ T4315] loop3: detected capacity change from 0 to 128 [ 60.641152][ T4315] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.661270][ T4317] loop4: detected capacity change from 0 to 16 [ 60.862640][ T4315] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.361084][ T4309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.404769][ T4317] erofs: (device loop4): mounted with root inode @ nid 36. [ 61.434476][ T4316] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 61.537209][ T4320] loop0: detected capacity change from 0 to 1024 [ 61.643680][ T4320] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 61.651057][ T4320] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.818232][ T4320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 61.843339][ T4320] System zones: 0-1, 3-36 [ 61.873247][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 62.019365][ T4309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.212644][ T4309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.476412][ T4309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.041248][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 63.050656][ T4336] netlink: 'syz.4.24': attribute type 6 has an invalid length. [ 63.118327][ T4309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.252681][ T4345] loop4: detected capacity change from 0 to 256 [ 63.332574][ T4345] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.697276][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 63.969953][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.991978][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.024244][ T4343] device bridge_slave_0 entered promiscuous mode [ 64.082558][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.102431][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.124267][ T4343] device bridge_slave_1 entered promiscuous mode [ 64.180389][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.225701][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.286316][ T4357] loop2: detected capacity change from 0 to 4096 [ 64.313754][ T4343] team0: Port device team_slave_0 added [ 64.335253][ T4343] team0: Port device team_slave_1 added [ 64.420415][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.439470][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.617675][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.658761][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.681374][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.140860][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.315416][ T4365] loop2: detected capacity change from 0 to 128 [ 65.333183][ T4229] Bluetooth: hci0: command 0x0409 tx timeout [ 65.533941][ T4365] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodelalloc,,errors=continue. Quota mode: none. [ 65.627319][ T4373] loop3: detected capacity change from 0 to 256 [ 65.634492][ T4365] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.876973][ T4373] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.888010][ T4373] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 65.920043][ T4373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 65.921191][ T4343] device hsr_slave_0 entered promiscuous mode [ 66.543756][ T4343] device hsr_slave_1 entered promiscuous mode [ 66.562665][ T4343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.581763][ T4343] Cannot create hsr debugfs directory [ 67.110851][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 67.119934][ T4396] netlink: 'syz.3.34': attribute type 6 has an invalid length. [ 67.707094][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 67.903175][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.959989][ T4405] loop3: detected capacity change from 0 to 1024 [ 68.003533][ T4343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.016217][ T4343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.039173][ T4343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.046367][ T4405] EXT4-fs (loop3): Ignoring removed bh option [ 68.067187][ T4405] EXT4-fs (loop3): Ignoring removed bh option [ 68.074227][ T4405] EXT4-fs (loop3): Ignoring removed bh option [ 68.089973][ T4343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.183269][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 68.193623][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,bh,bh,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 68.323577][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.343569][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.361200][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.394473][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.428426][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.436010][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.477934][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.520571][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.539891][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.570007][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.577468][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.590884][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.604520][ T4231] usb 5-1: config 0 descriptor?? [ 68.614837][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.630033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.646466][ T4231] hub 5-1:0.0: USB hub found [ 69.002535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.011953][ T4231] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 69.272239][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.279391][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.465693][ T4231] usbhid 5-1:0.0: can't add hid device: -71 [ 69.471704][ T4231] usbhid: probe of 5-1:0.0 failed with error -71 [ 69.482232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.518094][ T4231] usb 5-1: USB disconnect, device number 2 [ 69.529754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.600042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.615218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.646215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.708638][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.724142][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.733173][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 69.768135][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.794472][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.877578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.907257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.935949][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.043328][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.295852][ T4309] device hsr_slave_0 left promiscuous mode [ 70.325291][ T4309] device hsr_slave_1 left promiscuous mode [ 70.361867][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.391123][ T4456] loop4: detected capacity change from 0 to 512 [ 70.391681][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.407245][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.414785][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.422529][ T4309] device bridge_slave_1 left promiscuous mode [ 70.429898][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.459283][ T4456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.478499][ T4309] device bridge_slave_0 left promiscuous mode [ 70.493455][ T1108] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 70.499983][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.501850][ T1108] usb 4-1: config 160 has no interface number 0 [ 70.517681][ T4456] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.553218][ T1108] usb 4-1: config 160 interface 200 has no altsetting 0 [ 70.570470][ T4309] device veth1_macvtap left promiscuous mode [ 70.577628][ T4456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.50: bg 0: block 104: invalid block bitmap [ 70.580537][ T4309] device veth0_macvtap left promiscuous mode [ 70.620609][ T4456] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 70.650577][ T4309] device veth1_vlan left promiscuous mode [ 70.663568][ T4456] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.50: invalid indirect mapped block 1 (level 1) [ 70.705542][ T4309] device veth0_vlan left promiscuous mode [ 70.730466][ T4456] EXT4-fs (loop4): 1 truncate cleaned up [ 70.746714][ T4456] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.778685][ T1108] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 70.833180][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.872082][ T1108] usb 4-1: Product: syz [ 70.880812][ T1108] usb 4-1: Manufacturer: syz [ 70.899766][ T1108] usb 4-1: SerialNumber: syz [ 71.256759][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.265361][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373588][ T1108] usb 4-1: MIDIStreaming interface descriptor not found [ 71.414053][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 71.470184][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 71.513134][ T1108] usb 4-1: USB disconnect, device number 2 [ 71.546768][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.651407][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.813289][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 71.862832][ T4469] loop3: detected capacity change from 0 to 512 [ 71.969484][ T4309] bond0 (unregistering): Released all slaves [ 72.062513][ T4469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.118372][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 72.127534][ T4451] netlink: 'syz.0.47': attribute type 6 has an invalid length. [ 72.158235][ T4469] EXT4-fs (loop3): resizing filesystem from 64 to 27 blocks [ 72.269629][ T4469] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 72.481226][ T4482] xt_hashlimit: size too large, truncated to 1048576 [ 72.502094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.539304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.540700][ T4489] loop3: detected capacity change from 0 to 512 [ 72.598390][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.774139][ T4489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.331768][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.363279][ T4459] loop2: detected capacity change from 0 to 131072 [ 73.365884][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.395613][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 73.442695][ T4343] device veth0_vlan entered promiscuous mode [ 73.516494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.540823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.559282][ T4459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.589854][ T4343] device veth1_vlan entered promiscuous mode [ 73.606418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.626692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.657286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.723403][ T4459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.729968][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.753260][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.756134][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.826505][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.866558][ T4343] device veth0_macvtap entered promiscuous mode [ 73.994693][ T4343] device veth1_macvtap entered promiscuous mode [ 74.057710][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.068709][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079376][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.095664][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.107370][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.119635][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.131233][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.305091][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.534113][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.708201][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 74.720346][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.743096][ T4229] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.752163][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.769183][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.778142][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.797412][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.905887][ T4229] usb 4-1: config 0 descriptor?? [ 74.925905][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.945835][ T4229] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 74.986278][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.008334][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.039606][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.080754][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.101120][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.142257][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.163071][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.193981][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.234579][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.245239][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.279743][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.309030][ T4343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.328703][ T4343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.353199][ T4343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.382334][ T4343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.556061][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.573098][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.610640][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.665310][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.678492][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.709613][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.870899][ T4551] loop5: detected capacity change from 0 to 128 [ 75.963823][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 75.972781][ T4553] netlink: 'syz.2.64': attribute type 6 has an invalid length. [ 76.399235][ T23] cfg80211: failed to load regulatory.db [ 76.531404][ T4551] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.569434][ T4551] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.760493][ T1108] usb 4-1: USB disconnect, device number 3 [ 77.205811][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.256354][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.298984][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.382959][ T4571] device bridge_slave_0 left promiscuous mode [ 77.444607][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.635537][ T4571] device bridge_slave_1 left promiscuous mode [ 77.673378][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.713732][ T4583] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 77.731542][ T4571] bond0: (slave bond_slave_0): Releasing backup interface [ 77.942689][ T4586] loop5: detected capacity change from 0 to 1024 [ 77.973979][ T4571] bond0: (slave bond_slave_1): Releasing backup interface [ 79.313929][ T4586] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 79.385750][ T4571] team0: Port device team_slave_0 removed [ 79.527708][ T4571] team0: Port device team_slave_1 removed [ 79.556422][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.570001][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.586817][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.597990][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.173381][ T4226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.318083][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.77'. [ 80.327194][ T4605] netlink: 'syz.5.77': attribute type 6 has an invalid length. [ 80.563342][ T4620] capability: warning: `syz.2.83' uses deprecated v2 capabilities in a way that may be insecure [ 80.652263][ T4625] loop4: detected capacity change from 0 to 256 [ 80.664007][ T4226] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 80.694838][ T4226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.736568][ T4625] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 80.798424][ T4226] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.806474][ T26] audit: type=1804 audit(1775812675.427:2): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.85" name="/newroot/11/file0/file1" dev="loop4" ino=1048593 res=1 errno=0 [ 80.820191][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.974873][ T4226] usb 4-1: config 0 descriptor?? [ 81.066312][ T4226] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 81.272575][ T4644] loop4: detected capacity change from 0 to 256 [ 81.335418][ T4644] exfat: Deprecated parameter 'namecase' [ 81.349382][ T4644] exfat: Deprecated parameter 'namecase' [ 81.373382][ T4644] exfat: Deprecated parameter 'namecase' [ 81.435592][ T4644] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 81.453697][ T3087] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.580114][ T3087] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.712682][ T3087] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.798507][ T4655] loop4: detected capacity change from 0 to 512 [ 81.823307][ T3087] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.023931][ T4655] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.93: inode #1: comm syz.4.93: iget: illegal inode # [ 82.152452][ T4655] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.93: error while reading EA inode 1 err=-117 [ 82.219139][ T4655] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.249319][ T4655] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.93: inode #1: comm syz.4.93: iget: illegal inode # [ 82.300638][ T4655] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.93: error while reading EA inode 1 err=-117 [ 82.339687][ T4655] EXT4-fs (loop4): 1 orphan inode deleted [ 82.373168][ T4655] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 82.508248][ T4232] usb 4-1: USB disconnect, device number 4 [ 82.808692][ T4665] chnl_net:caif_netlink_parms(): no params data found [ 83.129888][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.157389][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.207451][ T26] audit: type=1804 audit(1775812677.827:3): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.100" name="bus" dev="ramfs" ino=34901 res=1 errno=0 [ 83.230436][ T4665] device bridge_slave_0 entered promiscuous mode [ 83.280015][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.308440][ T26] audit: type=1804 audit(1775812677.877:4): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.100" name="bus" dev="ramfs" ino=34901 res=1 errno=0 [ 83.337647][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.356438][ T4665] device bridge_slave_1 entered promiscuous mode [ 83.453203][ T4665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.503593][ T4665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.585948][ T4665] team0: Port device team_slave_0 added [ 83.648045][ T4665] team0: Port device team_slave_1 added [ 83.717502][ T3087] device hsr_slave_0 left promiscuous mode [ 83.749465][ T3087] device hsr_slave_1 left promiscuous mode [ 83.770765][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.793152][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.808360][ T3087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.838504][ T3087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.872803][ T3087] device bridge_slave_1 left promiscuous mode [ 83.889389][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.910139][ T3087] device bridge_slave_0 left promiscuous mode [ 83.931023][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.943123][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.023808][ T3087] device veth1_macvtap left promiscuous mode [ 84.033374][ T3087] device veth0_macvtap left promiscuous mode [ 84.039505][ T3087] device veth1_vlan left promiscuous mode [ 84.065963][ T3087] device veth0_vlan left promiscuous mode [ 84.293176][ T4230] Bluetooth: hci0: command 0x0409 tx timeout [ 84.313340][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 84.344629][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.383114][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.413309][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.451444][ T4232] usb 5-1: config 0 descriptor?? [ 84.505354][ T4232] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 84.727141][ T3087] team0 (unregistering): Port device team_slave_1 removed [ 84.751656][ T3087] team0 (unregistering): Port device team_slave_0 removed [ 84.794059][ T3087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.827963][ T3087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.926660][ T4687] loop3: detected capacity change from 0 to 131072 [ 84.972235][ T3087] bond0 (unregistering): Released all slaves [ 84.977474][ T4687] F2FS-fs (loop3): invalid crc value [ 85.022398][ T4687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.047079][ T4692] loop2: detected capacity change from 0 to 131072 [ 85.062388][ T4692] F2FS-fs (loop2): Unrecognized mount option "uqfmt=vfsv0" or missing value [ 85.152169][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.176332][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.217236][ T4687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 85.371806][ T4665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.389181][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.396234][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.423925][ T4665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.681278][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.988782][ T4665] device hsr_slave_0 entered promiscuous mode [ 86.054046][ T4665] device hsr_slave_1 entered promiscuous mode [ 86.155091][ T4232] usb 5-1: USB disconnect, device number 3 [ 86.273331][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.344523][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.373118][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 87.065089][ T23] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 87.074740][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.096676][ T23] usb 3-1: config 0 descriptor?? [ 87.383244][ T4758] loop4: detected capacity change from 0 to 1024 [ 87.391874][ T4665] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 87.453834][ T4665] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.495568][ T4665] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.516989][ T4665] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.569027][ T4758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.585079][ T23] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 87.777324][ T1108] usb 3-1: USB disconnect, device number 2 [ 87.828729][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.831991][ T4768] ipt_CLUSTERIP: Please specify destination IP [ 87.868494][ T4770] fido_id[4770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.916268][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.934465][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.975696][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.030612][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.056042][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.094560][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.101746][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.190448][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.211803][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.236629][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.258158][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.265323][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.306282][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.310073][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.338159][ T4780] loop3: detected capacity change from 0 to 256 [ 88.370760][ T4781] loop2: detected capacity change from 0 to 512 [ 88.371377][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.451398][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.453378][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 88.472724][ T4780] FAT-fs (loop3): Directory bread(block 64) failed [ 88.486272][ T4781] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.117: Directory hole found for htree index block 0 [ 88.494852][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.503173][ T4780] FAT-fs (loop3): Directory bread(block 65) failed [ 88.508513][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.523798][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.533055][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.541536][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.556842][ T4780] FAT-fs (loop3): Directory bread(block 66) failed [ 88.559443][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.571774][ T4780] FAT-fs (loop3): Directory bread(block 67) failed [ 88.578565][ T4780] FAT-fs (loop3): Directory bread(block 68) failed [ 88.585297][ T4780] FAT-fs (loop3): Directory bread(block 69) failed [ 88.585760][ T4781] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 88.591916][ T4780] FAT-fs (loop3): Directory bread(block 70) failed [ 88.607065][ T4780] FAT-fs (loop3): Directory bread(block 71) failed [ 88.613841][ T4780] FAT-fs (loop3): Directory bread(block 72) failed [ 88.620497][ T4780] FAT-fs (loop3): Directory bread(block 73) failed [ 88.636462][ T4781] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 88.666274][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.683250][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.719400][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.734137][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.745449][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.878321][ T4230] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.898575][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.927723][ T4230] usb 5-1: SerialNumber: syz [ 89.013235][ T1108] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 89.034960][ T4791] loop3: detected capacity change from 0 to 512 [ 89.165490][ T4791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.185931][ T4665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.235551][ T4230] usb 5-1: 0:2 : does not exist [ 89.263175][ T4230] usb 5-1: USB disconnect, device number 4 [ 89.304633][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.312202][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.544070][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.548189][ T1108] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 89.599666][ T1108] usb 3-1: config 0 has no interface number 0 [ 89.633415][ T1108] usb 3-1: config 0 interface 210 altsetting 227 endpoint 0xF is Bulk; changing to Interrupt [ 89.657331][ T1108] usb 3-1: config 0 interface 210 has no altsetting 0 [ 89.754591][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.774026][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.828810][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.848335][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.910003][ T4665] device veth0_vlan entered promiscuous mode [ 89.920499][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.929935][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.953249][ T1108] usb 3-1: string descriptor 0 read error: -22 [ 89.959943][ T1108] usb 3-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=99.e1 [ 90.007107][ T4665] device veth1_vlan entered promiscuous mode [ 90.023342][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.251287][ T4665] device veth0_macvtap entered promiscuous mode [ 90.439646][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.533503][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 90.589922][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.746102][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.774179][ T1108] usb 3-1: config 0 descriptor?? [ 90.782701][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.803436][ T4781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.821267][ T4665] device veth1_macvtap entered promiscuous mode [ 90.837174][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.840395][ T1108] appledisplay 3-1:0.210: Could not find int-in endpoint [ 90.854216][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.881611][ T4822] loop4: detected capacity change from 0 to 512 [ 90.891699][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.916173][ T1108] usbhid 3-1:0.210: couldn't find an input interrupt endpoint [ 90.958828][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.013047][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.043200][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.060675][ T4781] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.117: Directory hole found for htree index block 0 [ 91.073063][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.105020][ T4232] usb 3-1: USB disconnect, device number 3 [ 91.125529][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.174749][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.223694][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.237697][ T4822] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.121: inode #1: comm syz.4.121: iget: illegal inode # [ 91.264942][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.273580][ T4822] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.121: error while reading EA inode 1 err=-117 [ 91.318429][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.355355][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.383410][ T4822] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.121: inode #1: comm syz.4.121: iget: illegal inode # [ 91.413571][ T4822] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.121: error while reading EA inode 1 err=-117 [ 91.423123][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.458769][ T4822] EXT4-fs (loop4): 1 orphan inode deleted [ 91.464591][ T4822] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 91.484632][ T4765] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 91.509834][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.539513][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.600860][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.611647][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.663638][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.707813][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.744262][ T4665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768761][ T4665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799663][ T4665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.836130][ T4665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.249653][ T4833] loop2: detected capacity change from 0 to 4096 [ 92.310400][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.410234][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.653444][ T4833] EXT4-fs (loop2): inline encryption not supported [ 92.787584][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.084541][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.092494][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.211290][ T4847] loop3: detected capacity change from 0 to 1024 [ 93.227504][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.287120][ T4833] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.301791][ T4847] EXT4-fs (loop3): Ignoring removed bh option [ 93.308530][ T4833] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 93.308530][ T4833] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 93.308530][ T4833] [ 93.319872][ T4847] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 93.319872][ T4847] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 93.319872][ T4847] [ 93.429796][ T4833] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8428018, mo2=0003] [ 93.454110][ T4833] System zones: 0-5 [ 93.459719][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nouser_xattr,,errors=continue. Quota mode: writeback. [ 93.518118][ T4847] EXT4-fs (loop3): Ignoring removed nobh option [ 93.622143][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.92'. [ 93.631384][ T4865] netlink: 'syz.6.92': attribute type 6 has an invalid length. [ 94.038501][ T4847] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,nobh,,errors=continue. Quota mode: writeback. [ 94.387957][ T4833] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 94.617703][ T26] audit: type=1326 audit(1775812689.237:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29247e5819 code=0x0 [ 95.179778][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 95.238953][ T4846] loop4: detected capacity change from 0 to 40427 [ 95.377074][ T4846] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 95.390592][ T4846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.449306][ T4846] F2FS-fs (loop4): invalid crc value [ 95.531541][ T4846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.727030][ T4846] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.754321][ T4846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.123724][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.123775][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.131748][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.148381][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.186807][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.229924][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.238110][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 96.273137][ T4185] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 96.275343][ T4937] loop3: detected capacity change from 0 to 128 [ 96.673271][ T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.813115][ T4228] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 96.880241][ T4953] loop4: detected capacity change from 0 to 256 [ 96.888396][ T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.903055][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.941275][ T23] usb 7-1: Product: syz [ 96.952852][ T23] usb 7-1: Manufacturer: syz [ 96.968059][ T23] usb 7-1: SerialNumber: syz [ 97.010197][ T4953] FAT-fs (loop4): Directory bread(block 64) failed [ 97.031262][ T4953] FAT-fs (loop4): Directory bread(block 65) failed [ 97.058423][ T4953] FAT-fs (loop4): Directory bread(block 66) failed [ 97.071918][ T4953] FAT-fs (loop4): Directory bread(block 67) failed [ 97.092593][ T4953] FAT-fs (loop4): Directory bread(block 68) failed [ 97.101247][ T4953] FAT-fs (loop4): Directory bread(block 69) failed [ 97.133250][ T4953] FAT-fs (loop4): Directory bread(block 70) failed [ 97.151980][ T4953] FAT-fs (loop4): Directory bread(block 71) failed [ 97.159268][ T4953] FAT-fs (loop4): Directory bread(block 72) failed [ 97.188441][ T4953] FAT-fs (loop4): Directory bread(block 73) failed [ 97.263652][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.308610][ T4228] usb 4-1: not running at top speed; connect to a high speed hub [ 97.331597][ T26] audit: type=1800 audit(1775812691.947:6): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.140" name="file2" dev="loop4" ino=1048602 res=0 errno=0 [ 97.419501][ T4228] usb 4-1: config 207 has an invalid interface number: 14 but max is 0 [ 97.438128][ T4228] usb 4-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 97.479571][ T4228] usb 4-1: config 207 has no interface number 0 [ 97.491557][ T4228] usb 4-1: config 207 interface 14 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 97.518644][ T4228] usb 4-1: config 207 interface 14 altsetting 6 endpoint 0x2 has invalid maxpacket 1632, setting to 64 [ 97.537770][ T4228] usb 4-1: config 207 interface 14 altsetting 6 has 8 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.567895][ T4228] usb 4-1: config 207 interface 14 has no altsetting 0 [ 97.773586][ T4228] usb 4-1: New USB device found, idVendor=07b8, idProduct=4002, bcdDevice=10.9b [ 97.798500][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.822323][ T4228] usb 4-1: Product: syz [ 97.847998][ T4228] usb 4-1: Manufacturer: syz [ 97.852637][ T4228] usb 4-1: SerialNumber: syz [ 98.113650][ T23] cdc_ncm 7-1:1.0: failed to get mac address [ 98.135666][ T23] cdc_ncm 7-1:1.0: bind() failure [ 98.193463][ T23] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 98.228547][ T23] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 98.235676][ T4228] pegasus 4-1:207.14: Missing or invalid endpoints [ 98.277877][ T4228] usb 4-1: USB disconnect, device number 5 [ 98.284194][ T23] usbtest: probe of 7-1:1.1 failed with error -71 [ 98.304379][ T23] usb 7-1: USB disconnect, device number 2 [ 98.455411][ T4973] loop4: detected capacity change from 0 to 40427 [ 98.548849][ T4973] F2FS-fs (loop4): invalid crc value [ 98.628301][ T4973] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 98.754423][ T5000] loop3: detected capacity change from 0 to 256 [ 98.813513][ T5001] loop2: detected capacity change from 0 to 1024 [ 98.895841][ T4973] F2FS-fs (loop4): Start checkpoint disabled! [ 98.935261][ T5001] EXT4-fs (loop2): Ignoring removed bh option [ 98.953135][ T5001] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 98.953135][ T5001] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 98.953135][ T5001] [ 98.983432][ T4973] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7 [ 99.013240][ T5001] EXT4-fs (loop2): Ignoring removed nobh option [ 99.112358][ T26] audit: type=1326 audit(1775812693.727:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.4.146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2dc976819 code=0x0 [ 99.160200][ T5001] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,nobh,,errors=continue. Quota mode: writeback. [ 100.433314][ T5023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 100.506311][ T5025] loop3: detected capacity change from 0 to 256 [ 100.603152][ T5025] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.650961][ T5025] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 100.675722][ T4995] loop6: detected capacity change from 0 to 40427 [ 100.704309][ T5025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.769489][ T4995] F2FS-fs (loop6): invalid crc value [ 100.804302][ T4995] F2FS-fs (loop6): Found nat_bits in checkpoint [ 100.864820][ T5038] loop4: detected capacity change from 0 to 1024 [ 100.935193][ T4995] F2FS-fs (loop6): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 100.956003][ T5038] EXT4-fs (loop4): Ignoring removed bh option [ 101.013305][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.023989][ T5038] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 101.253684][ T5053] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.153: Invalid inode table block 18320473405771217551 in block_group 0 [ 101.263187][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 101.295295][ T5053] EXT4-fs (loop4): Remounting filesystem read-only [ 101.396272][ T4185] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 18320473405771217551 in block_group 0 [ 101.413330][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.439865][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.460544][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 101.467703][ T4185] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 101.482968][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 101.490389][ T4185] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #15: comm syz-executor: mark_inode_dirty error [ 101.500168][ T4232] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 101.512512][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 101.521969][ T4240] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:5: Invalid inode table block 18320473405771217551 in block_group 0 [ 101.557898][ T4240] EXT4-fs (loop4): Remounting filesystem read-only [ 101.560880][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.602388][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 101.627958][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.678121][ T4232] usb 3-1: config 0 descriptor?? [ 101.787207][ T5069] loop4: detected capacity change from 0 to 256 [ 101.920474][ T5069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 102.020933][ T26] audit: type=1804 audit(1775812696.637:8): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.161" name="/newroot/31/file1/file1" dev="loop4" ino=1048605 res=1 errno=0 [ 102.401375][ T4232] usb 3-1: USB disconnect, device number 4 [ 103.000133][ T5105] netlink: 232 bytes leftover after parsing attributes in process `syz.2.172'. [ 103.035776][ T5105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.172'. [ 103.443227][ T23] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 103.846015][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.871671][ T23] usb 3-1: config 0 has no interfaces? [ 103.886895][ T23] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 103.927656][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.969712][ T23] usb 3-1: config 0 descriptor?? [ 104.032988][ T5122] ipt_CLUSTERIP: Please specify destination IP [ 104.245059][ T23] usb 3-1: USB disconnect, device number 5 [ 104.771582][ T5151] tipc: Can't bind to reserved service type 2 [ 104.835108][ T5143] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.864817][ T5153] loop2: detected capacity change from 0 to 16 [ 104.883614][ T5143] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.924856][ T5153] erofs: (device loop2): mounted with root inode @ nid 36. [ 105.235494][ T5162] loop2: detected capacity change from 0 to 512 [ 105.349622][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.232049][ T5182] loop3: detected capacity change from 0 to 256 [ 107.034285][ T5182] exfat: Deprecated parameter 'utf8' [ 107.039620][ T5182] exfat: Deprecated parameter 'utf8' [ 107.063092][ T5182] exfat: Deprecated parameter 'utf8' [ 107.068710][ T5182] exfat: Bad value for 'time_offset' [ 107.187902][ T5194] loop4: detected capacity change from 0 to 512 [ 107.242624][ T5194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.294702][ T5194] EXT4-fs (loop4): orphan file too big: 2147483646 [ 107.339998][ T5194] EXT4-fs (loop4): mount failed [ 107.621835][ T5201] mmap: syz.4.192 (5201) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 107.867783][ T5188] loop2: detected capacity change from 0 to 40427 [ 107.880024][ T5199] loop3: detected capacity change from 0 to 40427 [ 107.910124][ T5188] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 107.930286][ T5188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.948854][ T5188] F2FS-fs (loop2): invalid crc value [ 108.027316][ T5199] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 108.071886][ T5209] overlayfs: failed to clone upperpath [ 108.073992][ T5188] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 108.085585][ T5199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 108.203229][ T5199] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 108.211356][ T5199] F2FS-fs (loop3): Unrecognized mount option "memory=low" or missing value [ 108.239994][ T5214] loop4: detected capacity change from 0 to 1024 [ 108.299016][ T5214] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 108.351969][ T5188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.365922][ T5188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.365971][ T5214] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 108.444411][ T5214] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.481543][ T5214] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.199: Inode bitmap for bg 0 marked uninitialized [ 108.530353][ T5222] tmpfs: Too small a size for current use [ 108.533381][ T5214] EXT4-fs (loop4): Remounting filesystem read-only [ 108.583505][ T5214] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000400000,lazytime,. Quota mode: writeback. [ 109.197743][ T5236] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 109.385888][ T5247] loop4: detected capacity change from 0 to 256 [ 109.468637][ T5247] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.481987][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.771966][ T5265] loop6: detected capacity change from 0 to 512 [ 109.778481][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 109.976530][ T5274] loop4: detected capacity change from 0 to 1024 [ 109.990177][ T4231] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 110.055715][ T5274] EXT4-fs (loop4): Ignoring removed bh option [ 110.146101][ T4231] usb 3-1: config 0 has no interface number 0 [ 110.277564][ T5274] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 110.345877][ T5265] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.833297][ T4231] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 110.852578][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.885725][ T5284] loop3: detected capacity change from 0 to 256 [ 110.906011][ T4231] usb 3-1: Product: syz [ 110.910215][ T4231] usb 3-1: Manufacturer: syz [ 110.959422][ T4231] usb 3-1: SerialNumber: syz [ 111.015299][ T4231] usb 3-1: config 0 descriptor?? [ 111.058279][ T5284] FAT-fs (loop3): Directory bread(block 64) failed [ 111.084174][ T4231] smsc95xx v2.0.0 [ 111.107027][ T5284] FAT-fs (loop3): Directory bread(block 65) failed [ 111.135556][ T5284] FAT-fs (loop3): Directory bread(block 66) failed [ 111.159174][ T5284] FAT-fs (loop3): Directory bread(block 67) failed [ 111.187478][ T5284] FAT-fs (loop3): Directory bread(block 68) failed [ 111.214551][ T5284] FAT-fs (loop3): Directory bread(block 69) failed [ 111.233183][ T5284] FAT-fs (loop3): Directory bread(block 70) failed [ 111.239748][ T5284] FAT-fs (loop3): Directory bread(block 71) failed [ 111.262617][ T5284] FAT-fs (loop3): Directory bread(block 72) failed [ 111.273175][ T5284] FAT-fs (loop3): Directory bread(block 73) failed [ 111.379728][ T26] audit: type=1800 audit(1775812705.997:9): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name=7B92 dev="loop3" ino=1048606 res=0 errno=0 [ 111.579081][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 111.589923][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.820942][ T5288] loop4: detected capacity change from 0 to 40427 [ 111.860474][ T5288] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 111.884863][ T5288] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.932206][ T5288] F2FS-fs (loop4): invalid crc value [ 112.047101][ T5288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.123222][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 113.153929][ T5288] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.181700][ T4231] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 113.191769][ T5288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.254352][ T4231] usb 3-1: USB disconnect, device number 6 [ 113.476602][ T5288] attempt to access beyond end of device [ 113.476602][ T5288] loop4: rw=2049, want=45112, limit=40427 [ 113.755278][ T5322] loop2: detected capacity change from 0 to 256 [ 113.766315][ T536] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.790536][ T536] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 113.889656][ T5322] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 114.003131][ T4231] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 114.149766][ T536] attempt to access beyond end of device [ 114.149766][ T536] loop4: rw=1, want=53264, limit=40427 [ 114.428766][ T5342] loop2: detected capacity change from 0 to 256 [ 114.624628][ T4231] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 114.640500][ T5350] xt_hashlimit: size too large, truncated to 1048576 [ 114.647398][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.673747][ T4231] usb 7-1: Product: syz [ 114.685103][ T5352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.230'. [ 114.698382][ T4231] usb 7-1: Manufacturer: syz [ 114.709600][ T4231] usb 7-1: SerialNumber: syz [ 114.727576][ T4231] usb 7-1: config 0 descriptor?? [ 114.791091][ T4231] ftdi_sio 7-1:0.0: Ignoring interface reserved for JTAG [ 114.993577][ T4231] usb 7-1: USB disconnect, device number 3 [ 116.859486][ T5416] loop6: detected capacity change from 0 to 256 [ 116.947474][ T5416] FAT-fs (loop6): Directory bread(block 64) failed [ 116.973430][ T5416] FAT-fs (loop6): Directory bread(block 65) failed [ 116.980075][ T5416] FAT-fs (loop6): Directory bread(block 66) failed [ 117.033143][ T5416] FAT-fs (loop6): Directory bread(block 67) failed [ 117.068180][ T5416] FAT-fs (loop6): Directory bread(block 68) failed [ 117.088166][ T5416] FAT-fs (loop6): Directory bread(block 69) failed [ 117.133447][ T5416] FAT-fs (loop6): Directory bread(block 70) failed [ 117.140019][ T5416] FAT-fs (loop6): Directory bread(block 71) failed [ 117.178330][ T5416] FAT-fs (loop6): Directory bread(block 72) failed [ 117.203624][ T5416] FAT-fs (loop6): Directory bread(block 73) failed [ 117.289369][ T5427] loop3: detected capacity change from 0 to 512 [ 117.418816][ T5427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.471010][ T5427] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.738713][ T5454] loop3: detected capacity change from 0 to 4096 [ 118.773152][ T4228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 118.880679][ T5454] EXT4-fs (loop3): inline encryption not supported [ 118.914072][ T5454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.985933][ T5454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003] [ 119.038266][ T5454] System zones: 0-5 [ 119.075395][ T5454] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,bsdgroups,nombcache,minixdf,,errors=continue. Quota mode: writeback. [ 119.208325][ T4228] usb 7-1: unable to get BOS descriptor or descriptor too short [ 119.318568][ T4228] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 119.335395][ T4228] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 119.787177][ T4228] usb 7-1: string descriptor 0 read error: -22 [ 119.794359][ T4228] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 119.804663][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.873143][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.323927][ T4231] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 120.371614][ T4231] usb 3-1: config 0 has no interface number 0 [ 120.693557][ T4228] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 120.703450][ T4231] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 120.718204][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.736604][ T4228] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 120.753222][ T4231] usb 3-1: Product: syz [ 120.763479][ T4231] usb 3-1: Manufacturer: syz [ 120.779385][ T4231] usb 3-1: SerialNumber: syz [ 120.813461][ T4228] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 120.823956][ T4231] usb 3-1: config 0 descriptor?? [ 120.834026][ T4228] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 120.863228][ T4228] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 120.883892][ T4228] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 120.930272][ T4228] usb 7-1: USB disconnect, device number 4 [ 121.277971][ T5486] loop3: detected capacity change from 0 to 40427 [ 121.326471][ T5486] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.339538][ T5486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.369554][ T5486] F2FS-fs (loop3): invalid crc value [ 121.414425][ T5486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.567217][ T5486] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.588730][ T5486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.824593][ T4231] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 121.831698][ T4231] usb 3-1: No valid video chain found. [ 121.866663][ T5521] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 122.176592][ T4231] usb 3-1: USB disconnect, device number 7 [ 122.428660][ T5531] Zero length message leads to an empty skb [ 122.763107][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.136416][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.166586][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.649304][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.662929][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.683079][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.700674][ T5565] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 123.709664][ T7] usb 5-1: config 0 descriptor?? [ 125.043083][ T5579] x_tables: duplicate underflow at hook 1 [ 125.924307][ T5591] loop3: detected capacity change from 0 to 256 [ 125.953421][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 125.959448][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 126.005712][ T7] usb 5-1: USB disconnect, device number 5 [ 126.040593][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 126.049628][ T5598] netlink: 'syz.2.266': attribute type 6 has an invalid length. [ 126.544062][ T5600] ODEBUG: Out of memory. ODEBUG disabled [ 126.762825][ T5591] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.093249][ T1108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.373261][ T1108] usb 7-1: Using ep0 maxpacket: 32 [ 127.564642][ T1108] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.635537][ T1108] usb 7-1: config 0 has no interface number 0 [ 127.801925][ T1108] usb 7-1: config 0 interface 184 has no altsetting 0 [ 127.903900][ T5629] netlink: 'syz.4.273': attribute type 3 has an invalid length. [ 128.012001][ T5629] netlink: 'syz.4.273': attribute type 3 has an invalid length. [ 128.053403][ T1108] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.094844][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.179519][ T1108] usb 7-1: Product: syz [ 128.228907][ T1108] usb 7-1: Manufacturer: syz [ 128.274599][ T1108] usb 7-1: SerialNumber: syz [ 128.333436][ T1108] usb 7-1: config 0 descriptor?? [ 128.434069][ T1108] smsc75xx v1.0.0 [ 128.956221][ T5609] loop3: detected capacity change from 0 to 40427 [ 129.224741][ T5609] loop3: detected capacity change from 0 to 128 [ 129.255663][ T5609] EXT4-fs (loop3): quotafile must be on filesystem root [ 129.513279][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 129.534666][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.583960][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 129.598580][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 129.631931][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 129.693248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 129.696019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 129.711432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 129.720429][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.723019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 129.729482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.738550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 129.747376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.756705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 129.765610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.774688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 129.803670][ T1108] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 129.820879][ T1108] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 129.884412][ T1108] usb 7-1: USB disconnect, device number 5 [ 130.604931][ T5687] loop6: detected capacity change from 0 to 128 [ 130.615398][ T5681] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 130.633159][ T5681] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 130.678103][ T5687] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,nodelalloc,,errors=continue. Quota mode: none. [ 130.786327][ T5691] ipt_CLUSTERIP: Please specify destination IP [ 130.788180][ T5687] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.332060][ T5715] cgroup: noprefix used incorrectly [ 132.694895][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.701376][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.348248][ T5719] loop4: detected capacity change from 0 to 40427 [ 133.383461][ T5719] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 133.738232][ T4230] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.909041][ T5729] loop3: detected capacity change from 0 to 256 [ 133.993098][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 134.123427][ T4230] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 134.138666][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.197779][ T4230] usb 5-1: config 0 has no interface number 0 [ 134.383318][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 134.392397][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.447021][ T4230] usb 5-1: Product: syz [ 134.451257][ T4230] usb 5-1: Manufacturer: syz [ 134.479344][ T5713] loop6: detected capacity change from 0 to 131072 [ 134.503095][ T4230] usb 5-1: SerialNumber: syz [ 134.567367][ T5713] F2FS-fs (loop6): invalid crc value [ 134.584095][ T4230] usb 5-1: config 0 descriptor?? [ 134.627184][ T5713] F2FS-fs (loop6): Found nat_bits in checkpoint [ 134.645128][ T4230] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 134.662531][ T4230] usb 5-1: No valid video chain found. [ 134.738825][ T5746] xt_hashlimit: size too large, truncated to 1048576 [ 134.765852][ T5713] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 134.892966][ T4230] usb 5-1: USB disconnect, device number 6 [ 136.099349][ T5759] loop6: detected capacity change from 0 to 512 [ 136.295145][ T5759] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,barrier,quota,quota,,errors=continue. Quota mode: writeback. [ 136.387508][ T5759] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.423223][ T5770] 9pnet: Could not find request transport: f [ 138.886291][ T5780] loop4: detected capacity change from 0 to 40427 [ 138.923959][ T5780] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 138.963059][ T5780] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.981652][ T5780] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 139.011903][ T5780] F2FS-fs (loop4): Unrecognized mount option "memory=low" or missing value [ 139.170075][ T5784] loop6: detected capacity change from 0 to 40427 [ 139.243764][ T5784] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 139.252537][ T5784] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 139.304865][ T5784] F2FS-fs (loop6): invalid crc value [ 139.329200][ T5797] loop4: detected capacity change from 0 to 512 [ 139.362693][ T5784] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 139.467557][ T5797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.481010][ T5784] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 139.483415][ T5797] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.489553][ T5784] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 139.615548][ T26] audit: type=1800 audit(2000000003.190:10): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.321" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 139.712207][ T26] audit: type=1800 audit(2000000003.200:11): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.321" name="file2" dev="loop6" ino=14 res=0 errno=0 [ 139.757285][ T4665] attempt to access beyond end of device [ 139.757285][ T4665] loop6: rw=2049, want=45112, limit=40427 [ 140.267362][ T5811] loop4: detected capacity change from 0 to 512 [ 140.599423][ T5811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 140.607928][ T5811] System zones: 0-2, 18-18, 34-34 [ 140.627129][ T5811] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 140.636243][ T5811] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 140.652536][ T5811] EXT4-fs (loop4): mount failed [ 140.917854][ T5817] loop4: detected capacity change from 0 to 512 [ 140.968288][ T4228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.033439][ T5817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.104588][ T5817] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.283495][ T1111] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 141.364358][ T4228] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.590967][ T4228] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.607297][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.616899][ T4228] usb 4-1: Product: syz [ 141.621114][ T4228] usb 4-1: Manufacturer: syz [ 141.630390][ T4228] usb 4-1: SerialNumber: syz [ 141.653375][ T1111] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.673067][ T1111] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 141.863262][ T1111] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.879754][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.897152][ T1111] usb 7-1: Product: syz [ 141.911557][ T1111] usb 7-1: Manufacturer: syz [ 141.920967][ T1111] usb 7-1: SerialNumber: syz [ 141.921483][ T5835] loop4: detected capacity change from 0 to 40427 [ 141.961141][ T5835] F2FS-fs (loop4): inline encryption not supported [ 141.968297][ T5835] F2FS-fs (loop4): project quota file already specified [ 141.984696][ T1111] cdc_mbim 7-1:1.0: skipping garbage [ 142.003163][ T26] audit: type=1326 audit(2000000005.570:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.4.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc976819 code=0x0 [ 142.198648][ T5821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.368136][ T4228] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 142.378502][ T4228] cdc_ncm 4-1:1.0: bind() failure [ 142.405711][ T4228] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 142.428173][ T4228] cdc_ncm 4-1:1.1: bind() failure [ 142.461273][ T4228] usb 4-1: USB disconnect, device number 6 [ 142.834354][ T5821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.853201][ T1111] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 142.860973][ T1111] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 143.086098][ T1111] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 143.177131][ T5844] loop4: detected capacity change from 0 to 40427 [ 143.177632][ T1111] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 143.305397][ T5844] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 143.337653][ T5844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.756116][ T5844] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 143.869680][ T1111] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 16:05:d9:86:16:6e [ 143.890416][ T1111] usb 7-1: USB disconnect, device number 6 [ 143.896952][ T1111] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 143.934676][ T5844] F2FS-fs (loop4): invalid crc value [ 143.952456][ T5844] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 144.272389][ T5857] loop3: detected capacity change from 0 to 512 [ 144.318411][ T5844] F2FS-fs (loop4): Start checkpoint disabled! [ 144.352096][ T5844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.372134][ T5844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 144.423057][ T5857] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,barrier,quota,,errors=continue. Quota mode: writeback. [ 144.499696][ T5857] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.768121][ T4184] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 144.841347][ T4184] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 144.949960][ T5867] loop4: detected capacity change from 0 to 128 [ 145.289767][ T536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.470033][ T536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.596341][ T536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.697808][ T536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.768835][ T5882] loop4: detected capacity change from 0 to 256 [ 145.975768][ T5882] FAT-fs (loop4): Directory bread(block 64) failed [ 145.982428][ T5882] FAT-fs (loop4): Directory bread(block 65) failed [ 146.159877][ T5882] FAT-fs (loop4): Directory bread(block 66) failed [ 146.212150][ T5882] FAT-fs (loop4): Directory bread(block 67) failed [ 146.233284][ T5882] FAT-fs (loop4): Directory bread(block 68) failed [ 146.261858][ T5882] FAT-fs (loop4): Directory bread(block 69) failed [ 146.295120][ T5882] FAT-fs (loop4): Directory bread(block 70) failed [ 146.349706][ T5882] FAT-fs (loop4): Directory bread(block 71) failed [ 146.406574][ T5882] FAT-fs (loop4): Directory bread(block 72) failed [ 146.463455][ T5882] FAT-fs (loop4): Directory bread(block 73) failed [ 146.742260][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 146.984160][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.019967][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.061835][ T5892] device bridge_slave_0 entered promiscuous mode [ 147.129571][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.154383][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.172120][ T5892] device bridge_slave_1 entered promiscuous mode [ 147.274968][ T536] device hsr_slave_0 left promiscuous mode [ 147.293348][ T536] device hsr_slave_1 left promiscuous mode [ 147.312432][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.330321][ T536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.385908][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.404495][ T536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.420437][ T536] device bridge_slave_1 left promiscuous mode [ 147.426799][ T536] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.446820][ T536] device bridge_slave_0 left promiscuous mode [ 147.459659][ T536] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.478908][ T536] device veth1_macvtap left promiscuous mode [ 147.488040][ T536] device veth0_macvtap left promiscuous mode [ 147.499893][ T536] device veth1_vlan left promiscuous mode [ 147.506871][ T536] device veth0_vlan left promiscuous mode [ 147.924641][ T536] team0 (unregistering): Port device team_slave_1 removed [ 147.949146][ T536] team0 (unregistering): Port device team_slave_0 removed [ 147.970390][ T536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.997917][ T536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.083108][ T4228] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 148.127700][ T536] bond0 (unregistering): Released all slaves [ 148.228580][ T5917] device veth0 entered promiscuous mode [ 148.246001][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.276029][ T5917] device veth0 left promiscuous mode [ 148.301892][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.357736][ T5892] team0: Port device team_slave_0 added [ 148.367553][ T4228] usb 7-1: Using ep0 maxpacket: 8 [ 148.373376][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 148.391894][ T5892] team0: Port device team_slave_1 added [ 148.463540][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.487214][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.513949][ T4228] usb 7-1: config 10 has an invalid interface number: 58 but max is 0 [ 148.525904][ T4228] usb 7-1: config 10 has no interface number 0 [ 148.555261][ T4228] usb 7-1: config 10 interface 58 altsetting 3 endpoint 0xF has an invalid bInterval 150, changing to 7 [ 148.596695][ T4228] usb 7-1: config 10 interface 58 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 148.613854][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.633078][ T4228] usb 7-1: config 10 interface 58 altsetting 3 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 148.656755][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.669075][ T4228] usb 7-1: config 10 interface 58 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 148.683403][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.720191][ T4228] usb 7-1: config 10 interface 58 has no altsetting 0 [ 148.751355][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.874936][ T5892] device hsr_slave_0 entered promiscuous mode [ 148.895330][ T5892] device hsr_slave_1 entered promiscuous mode [ 148.909802][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.927617][ T5892] Cannot create hsr debugfs directory [ 148.933439][ T4228] usb 7-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=fa.75 [ 148.951019][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.984896][ T4228] usb 7-1: Product: syz [ 148.994376][ T4228] usb 7-1: Manufacturer: syz [ 149.003915][ T4228] usb 7-1: SerialNumber: syz [ 149.350165][ T5892] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.362067][ T4228] gspca_main: spca500-2.14.0 probing 084d:0003 [ 149.404795][ T4228] usb 7-1: USB disconnect, device number 7 [ 149.438172][ T5892] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.461969][ T5892] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.508303][ T5892] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 149.714618][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.756386][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.783692][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.823643][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.883385][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.904533][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.963244][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.970359][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.145280][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.247109][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.285576][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.292657][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.694771][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.879957][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 150.888135][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.898460][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.018965][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.054652][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.146299][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.193789][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.236395][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.273055][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.293487][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.326982][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.357647][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.386780][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.828274][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.858995][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.891095][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.162211][ T5982] loop6: detected capacity change from 0 to 40427 [ 152.250863][ T5982] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 152.271641][ T5982] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 152.324275][ T5982] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 152.428287][ T5982] F2FS-fs (loop6): Found nat_bits in checkpoint [ 152.439916][ T6017] loop4: detected capacity change from 0 to 256 [ 152.537333][ T6017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xfc6d8930, utbl_chksum : 0xe619d30d) [ 152.628097][ T5982] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 152.653066][ T5982] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 152.732379][ T5892] device veth0_vlan entered promiscuous mode [ 152.785415][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.801391][ T26] audit: type=1804 audit(2000000016.370:13): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.373" name="/newroot/46/file1/bus" dev="loop6" ino=10 res=1 errno=0 [ 152.836943][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.919328][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.117641][ T26] audit: type=1800 audit(2000000016.370:14): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.373" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 153.146039][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.213566][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.257147][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.347958][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 154.351674][ T5892] device veth1_vlan entered promiscuous mode [ 154.549513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.561119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.605601][ T5892] device veth0_macvtap entered promiscuous mode [ 154.636966][ T5892] device veth1_macvtap entered promiscuous mode [ 154.735051][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.771790][ T6032] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.781114][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.809677][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.830428][ T6032] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.839190][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.898827][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.963336][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.015553][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.040109][ T6047] loop6: detected capacity change from 0 to 256 [ 155.081563][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.127404][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.148212][ T6053] loop4: detected capacity change from 0 to 512 [ 155.162834][ T6047] FAT-fs (loop6): Directory bread(block 64) failed [ 155.168378][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.195625][ T6047] FAT-fs (loop6): Directory bread(block 65) failed [ 155.205683][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.233171][ T6047] FAT-fs (loop6): Directory bread(block 66) failed [ 155.239923][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.250613][ T6047] FAT-fs (loop6): Directory bread(block 67) failed [ 155.268396][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.281522][ T6047] FAT-fs (loop6): Directory bread(block 68) failed [ 155.288429][ T6047] FAT-fs (loop6): Directory bread(block 69) failed [ 155.295758][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.306070][ T6047] FAT-fs (loop6): Directory bread(block 70) failed [ 155.314005][ T6047] FAT-fs (loop6): Directory bread(block 71) failed [ 155.320796][ T6047] FAT-fs (loop6): Directory bread(block 72) failed [ 155.328760][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.347510][ T6047] FAT-fs (loop6): Directory bread(block 73) failed [ 155.357564][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.377556][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.398610][ T6047] attempt to access beyond end of device [ 155.398610][ T6047] loop6: rw=524288, want=1196, limit=256 [ 155.424698][ T6053] EXT4-fs (loop4): Ignoring removed bh option [ 155.434229][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.446334][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.455703][ T6053] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 155.468670][ T6047] attempt to access beyond end of device [ 155.468670][ T6047] loop6: rw=0, want=1196, limit=256 [ 155.483301][ T26] audit: type=1800 audit(2000000019.060:15): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.384" name="file1" dev="loop6" ino=1048610 res=0 errno=0 [ 155.520243][ T5892] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.539746][ T5892] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.548521][ T5892] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.558382][ T5892] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.578550][ T6053] EXT4-fs (loop4): 1 truncate cleaned up [ 155.617098][ T6053] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 155.682525][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.696751][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.716930][ T26] audit: type=1800 audit(2000000019.290:16): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 155.741650][ T6053] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.386: bg 0: block 465: padding at end of block bitmap is not set [ 155.773476][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.849014][ T6053] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 155.915742][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.939203][ T6053] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.939203][ T6053] [ 155.949053][ T6053] EXT4-fs (loop4): Total free blocks count 0 [ 155.955117][ T6053] EXT4-fs (loop4): Free/Dirty block details [ 155.961070][ T6053] EXT4-fs (loop4): free_blocks=0 [ 155.979960][ T6053] EXT4-fs (loop4): dirty_blocks=4 [ 155.992161][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.005281][ T6053] EXT4-fs (loop4): Block reservation details [ 156.083297][ T6053] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 156.114559][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.373827][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 157.998551][ T6106] loop6: detected capacity change from 0 to 2048 [ 158.063194][ T6106] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 158.122940][ T6106] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 158.221444][ T6106] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.306501][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 159.462091][ T6141] netlink: 'syz.0.399': attribute type 6 has an invalid length. [ 160.215482][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 160.701621][ T6174] overlayfs: failed to resolve './bus': -2 [ 160.734249][ T6177] loop6: detected capacity change from 0 to 512 [ 160.819618][ T6177] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,stripe=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 160.983179][ T6177] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.259984][ T6194] ipt_CLUSTERIP: Please specify destination IP [ 161.307597][ T4232] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 161.376523][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.415'. [ 162.212344][ T6212] loop6: detected capacity change from 0 to 256 [ 162.434001][ T6212] FAT-fs (loop6): Directory bread(block 64) failed [ 162.441220][ T6212] FAT-fs (loop6): Directory bread(block 65) failed [ 162.463979][ T4232] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 162.481535][ T6212] FAT-fs (loop6): Directory bread(block 66) failed [ 162.491414][ T4232] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.508917][ T6212] FAT-fs (loop6): Directory bread(block 67) failed [ 162.522012][ T4232] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.535210][ T6212] FAT-fs (loop6): Directory bread(block 68) failed [ 162.551048][ T4232] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 162.571735][ T6212] FAT-fs (loop6): Directory bread(block 69) failed [ 162.589140][ T6212] FAT-fs (loop6): Directory bread(block 70) failed [ 162.605389][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.621676][ T6212] FAT-fs (loop6): Directory bread(block 71) failed [ 162.632834][ T4232] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 162.653273][ T6212] FAT-fs (loop6): Directory bread(block 72) failed [ 162.674893][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.684677][ T6212] FAT-fs (loop6): Directory bread(block 73) failed [ 162.709391][ T4232] usb 3-1: config 0 descriptor?? [ 163.433437][ T4232] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 163.635707][ T4232] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 163.790496][ T4232] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 163.902997][ C1] sched: RT throttling activated [ 163.931137][ T4232] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 163.998098][ T4232] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 164.332379][ T4232] ryos 0003:1E7D:3138.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 164.898464][ T4232] usb 3-1: USB disconnect, device number 8 [ 166.142904][ T6235] fido_id[6235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.305105][ T6307] loop6: detected capacity change from 0 to 16 [ 166.340442][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.426'. [ 166.380209][ T6301] netlink: 'syz.7.426': attribute type 6 has an invalid length. [ 166.418309][ T6307] erofs: (device loop6): mounted with root inode @ nid 36. [ 166.631185][ T6318] fuse: Bad value for 'fd' [ 168.144570][ T6338] loop6: detected capacity change from 0 to 4096 [ 168.243692][ T6338] EXT4-fs (loop6): Ignoring removed bh option [ 168.314517][ T6338] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 168.349254][ T6338] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz.6.441: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 168.458522][ T6338] EXT4-fs (loop6): Remounting filesystem read-only [ 168.514225][ T6338] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz.6.441: directory missing '..' [ 168.560814][ T6345] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.441: corrupted inode contents [ 168.640642][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.658119][ T6345] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #15: comm syz.6.441: mark_inode_dirty error [ 168.711940][ T6352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3336423915 (3336423915 ns) > initial count (3292794877 ns). Using initial count to start timer. [ 168.730018][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.743823][ T6345] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.441: corrupted inode contents [ 168.789023][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.793190][ T4228] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 168.810332][ T6345] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.441: mark_inode_dirty error [ 168.860543][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.877988][ T6345] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.441: corrupted inode contents [ 168.918100][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.937772][ T6345] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.441: mark_inode_dirty error [ 168.968172][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 168.993091][ T6345] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.441: corrupted inode contents [ 169.035712][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 169.052514][ T6345] EXT4-fs error (device loop6): ext4_truncate:4279: inode #15: comm syz.6.441: mark_inode_dirty error [ 169.090713][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 169.105331][ T6345] EXT4-fs error (device loop6) in ext4_setattr:5626: Corrupt filesystem [ 169.123453][ T6345] EXT4-fs (loop6): Remounting filesystem read-only [ 169.174006][ T4228] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 169.213141][ T4228] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.237694][ T6364] loop4: detected capacity change from 0 to 1024 [ 169.249706][ T4228] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.286988][ T4228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.292857][ T6366] loop6: detected capacity change from 0 to 128 [ 169.312651][ T4228] usb 8-1: config 0 descriptor?? [ 169.375162][ T4228] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 169.375840][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000007,noquota,journal_ioprio=0x0000000000000003,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 169.488172][ T26] audit: type=1326 audit(2000000033.060:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19a3b819 code=0x7ffc0000 [ 169.525279][ T6364] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.585392][ T26] audit: type=1326 audit(2000000033.090:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19a3b819 code=0x7ffc0000 [ 169.658244][ T6364] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.451: lblock 0 mapped to illegal pblock 0 (length 1) [ 169.659854][ T26] audit: type=1326 audit(2000000033.090:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e19a3b819 code=0x7ffc0000 [ 169.713377][ T6364] EXT4-fs (loop4): Remounting filesystem read-only [ 169.715205][ T26] audit: type=1326 audit(2000000033.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e19a3b582 code=0x7ffc0000 [ 169.751015][ T26] audit: type=1326 audit(2000000033.120:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e199fc04e code=0x7ffc0000 [ 169.764750][ T6371] mip6: mip6_destopt_init_state: spi is not 0: 2 [ 169.782243][ T26] audit: type=1326 audit(2000000033.140:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e19a3b647 code=0x7ffc0000 [ 169.831089][ T26] audit: type=1326 audit(2000000033.140:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e199fc04e code=0x7ffc0000 [ 169.866366][ T26] audit: type=1326 audit(2000000033.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e19a3b4ab code=0x7ffc0000 [ 169.916642][ T26] audit: type=1326 audit(2000000033.140:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e19a3b4ab code=0x7ffc0000 [ 169.953748][ T26] audit: type=1326 audit(2000000033.140:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e199fc04e code=0x7ffc0000 [ 170.164910][ T6385] syz.2.452 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.616307][ T4228] usb 8-1: USB disconnect, device number 2 [ 172.023988][ T6431] device syzkaller0 entered promiscuous mode [ 172.084941][ T4228] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 172.275915][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.474'. [ 172.285169][ T6442] netlink: 'syz.6.474': attribute type 6 has an invalid length. [ 172.493282][ T4228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.588025][ T4228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.854131][ T4228] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 172.913334][ T4228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.939217][ T4228] usb 8-1: SerialNumber: syz [ 173.001702][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.079489][ T6453] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.259168][ T4228] usb 8-1: 0:2 : does not exist [ 173.294713][ T4228] usb 8-1: USB disconnect, device number 3 [ 173.433360][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 173.444265][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.457709][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.467271][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.495292][ T4232] usb 5-1: config 0 descriptor?? [ 173.511302][ T6471] loop6: detected capacity change from 0 to 1024 [ 173.545649][ T4232] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 173.576138][ T6471] EXT4-fs (loop6): Ignoring removed bh option [ 173.600583][ T6471] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 173.600583][ T6471] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 173.600583][ T6471] [ 173.669375][ T6471] EXT4-fs (loop6): Ignoring removed nobh option [ 173.708813][ T6471] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,nobh,,errors=continue. Quota mode: writeback. [ 174.767196][ T6502] xt_CT: No such helper "snmp_trap" [ 174.786644][ T6507] sctp: [Deprecated]: syz.0.495 (pid 6507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.786644][ T6507] Use struct sctp_sack_info instead [ 174.877209][ T6507] netlink: 364 bytes leftover after parsing attributes in process `syz.0.495'. [ 174.973307][ T6512] loop7: detected capacity change from 0 to 16 [ 175.029284][ T6512] erofs: (device loop7): mounted with root inode @ nid 36. [ 175.040125][ T6512] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 175.051519][ T6512] attempt to access beyond end of device [ 175.051519][ T6512] loop7: rw=524288, want=524304, limit=16 [ 175.068929][ T4196] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 175.112113][ T4232] usb 5-1: USB disconnect, device number 7 [ 175.121867][ T6512] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 175.143796][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 175.143807][ T26] audit: type=1800 audit(2000000038.720:84): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.490" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 175.370521][ T6529] netlink: 7 bytes leftover after parsing attributes in process `syz.2.500'. [ 175.445266][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 175.454251][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 175.743446][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 175.756100][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 175.769017][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 180.578933][ T6665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.607278][ T6665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.659237][ T6665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.712596][ T6665] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.745795][ C0] Illegal XDP return value 16128, expect packet loss! [ 181.523827][ T6701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.314594][ T6706] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 182.388279][ T6711] device dummy0 entered promiscuous mode [ 182.444586][ T6711] device syz_tun entered promiscuous mode [ 182.462591][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 182.667923][ T6730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.962469][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.556'. [ 184.251412][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 184.424953][ T6794] netlink: 'syz.4.568': attribute type 6 has an invalid length. [ 184.512307][ T6809] IPv4: Oversized IP packet from 127.202.26.0 [ 185.786017][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.584'. [ 185.877068][ T6847] netlink: 'syz.6.584': attribute type 2 has an invalid length. [ 185.881915][ T6851] loop7: detected capacity change from 0 to 1024 [ 186.073461][ T6851] EXT4-fs (loop7): Ignoring removed bh option [ 186.090338][ T6851] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 186.090338][ T6851] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 186.090338][ T6851] [ 186.164040][ T6851] EXT4-fs (loop7): Ignoring removed nobh option [ 186.279328][ T6851] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,nobh,,errors=continue. Quota mode: writeback. [ 186.893163][ T26] audit: type=1800 audit(2000000050.430:85): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.586" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 187.134437][ T6894] sctp: [Deprecated]: syz.2.596 (pid 6894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.134437][ T6894] Use struct sctp_sack_info instead [ 187.867339][ T6942] tipc: Started in network mode [ 187.872740][ T6942] tipc: Node identity 9e74e733cb5e, cluster identity 4711 [ 187.901661][ T6942] tipc: Enabled bearer , priority 0 [ 187.932664][ T6949] device syzkaller0 entered promiscuous mode [ 187.987613][ T6942] tipc: Resetting bearer [ 188.069919][ T6940] tipc: Resetting bearer [ 188.107758][ T6940] tipc: Disabling bearer [ 188.113852][ T6959] netlink: set zone limit has 8 unknown bytes [ 188.135139][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 188.424360][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 188.467365][ T6980] device netdevsim0 entered promiscuous mode [ 188.881684][ T7004] loop4: detected capacity change from 0 to 512 [ 188.912469][ T6978] infiniband syz0: set active [ 188.917850][ T6978] infiniband syz0: added bond_slave_0 [ 189.027714][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.094001][ T6978] RDS/IB: syz0: added [ 189.221499][ T6978] smc: adding ib device syz0 with port count 1 [ 189.232489][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.631'. [ 189.253675][ T6978] smc: ib device syz0 port 1 has pnetid [ 189.292500][ T7018] unsupported nlmsg_type 40 [ 190.177114][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 190.384172][ T7055] [ 190.386978][ T7055] ============================= [ 190.398751][ T7055] WARNING: suspicious RCU usage [ 190.404446][ T7055] syzkaller #0 Not tainted [ 190.409067][ T7055] ----------------------------- [ 190.414557][ T7055] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 190.424292][ T7055] [ 190.424292][ T7055] other info that might help us debug this: [ 190.424292][ T7055] [ 190.435665][ T7055] [ 190.435665][ T7055] rcu_scheduler_active = 2, debug_locks = 1 [ 190.444333][ T7055] 1 lock held by syz.7.648/7055: [ 190.449421][ T7055] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 190.461284][ T7055] [ 190.461284][ T7055] stack backtrace: [ 190.467303][ T7055] CPU: 1 PID: 7055 Comm: syz.7.648 Not tainted syzkaller #0 [ 190.474752][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.485137][ T7055] Call Trace: [ 190.488448][ T7055] [ 190.491384][ T7055] dump_stack_lvl+0x188/0x250 [ 190.496074][ T7055] ? load_image+0x400/0x400 [ 190.500570][ T7055] ? show_regs_print_info+0x20/0x20 [ 190.505856][ T7055] ? lockdep_rcu_suspicious+0x110/0x180 [ 190.511427][ T7055] ? local_bh_enable+0x20/0x20 [ 190.516276][ T7055] rhltable_lookup+0x7a9/0x7c0 [ 190.521046][ T7055] ? local_bh_enable+0x20/0x20 [ 190.525812][ T7055] ? mr_mfc_find_parent+0x190/0x190 [ 190.531107][ T7055] ? mark_lock+0x94/0x320 [ 190.535425][ T7055] ? local_bh_enable+0x20/0x20 [ 190.540176][ T7055] ? mark_lock+0x94/0x320 [ 190.544497][ T7055] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.550478][ T7055] ? lock_chain_count+0x20/0x20 [ 190.555347][ T7055] mr_mfc_find_any_parent+0xb6/0x1e0 [ 190.560653][ T7055] ? local_bh_enable+0x20/0x20 [ 190.565625][ T7055] ip_mr_forward+0x24c/0xf90 [ 190.570233][ T7055] ipmr_mfc_add+0x23cc/0x2d40 [ 190.574928][ T7055] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 190.579922][ T7055] ? __lock_acquire+0x7d10/0x7d10 [ 190.584983][ T7055] ip_mroute_setsockopt+0xeaf/0x1250 [ 190.590266][ T7055] ? ipmr_rule_default+0x70/0x70 [ 190.595218][ T7055] ? __might_sleep+0xf0/0xf0 [ 190.599804][ T7055] ip_setsockopt+0x568/0x3130 [ 190.604486][ T7055] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 190.609963][ T7055] ? aa_sk_perm+0x7dc/0x910 [ 190.614456][ T7055] ? aa_af_perm+0x340/0x340 [ 190.618952][ T7055] ? __fget_files+0x40f/0x480 [ 190.623625][ T7055] ? aa_sock_opt_perm+0x74/0x100 [ 190.628574][ T7055] ? sock_common_setsockopt+0x32/0xb0 [ 190.633933][ T7055] ? raw_setsockopt+0xc5/0x180 [ 190.638717][ T7055] ? sock_common_recvmsg+0x1c0/0x1c0 [ 190.643997][ T7055] __sys_setsockopt+0x2bf/0x3d0 [ 190.648970][ T7055] __x64_sys_setsockopt+0xb1/0xc0 [ 190.654225][ T7055] do_syscall_64+0x4c/0xa0 [ 190.658643][ T7055] ? clear_bhb_loop+0x30/0x80 [ 190.663554][ T7055] ? clear_bhb_loop+0x30/0x80 [ 190.668342][ T7055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.674353][ T7055] RIP: 0033:0x7f691928a819 [ 190.678788][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.698509][ T7055] RSP: 002b:00007f69174e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.707375][ T7055] RAX: ffffffffffffffda RBX: 00007f6919503fa0 RCX: 00007f691928a819 [ 190.715444][ T7055] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 190.723430][ T7055] RBP: 00007f6919320c91 R08: 000000000000003c R09: 0000000000000000 [ 190.731441][ T7055] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 190.739531][ T7055] R13: 00007f6919504038 R14: 00007f6919503fa0 R15: 00007fff66eea188 [ 190.747608][ T7055] [ 190.754949][ T7055] [ 190.757310][ T7055] ============================= [ 190.762296][ T7055] WARNING: suspicious RCU usage [ 190.767318][ T7055] syzkaller #0 Not tainted [ 190.771738][ T7055] ----------------------------- [ 190.777005][ T7055] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 190.785774][ T7055] [ 190.785774][ T7055] other info that might help us debug this: [ 190.785774][ T7055] [ 190.796454][ T7055] [ 190.796454][ T7055] rcu_scheduler_active = 2, debug_locks = 1 [ 190.804590][ T7055] 1 lock held by syz.7.648/7055: [ 190.809554][ T7055] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 190.819473][ T7055] [ 190.819473][ T7055] stack backtrace: [ 190.825887][ T7055] CPU: 1 PID: 7055 Comm: syz.7.648 Not tainted syzkaller #0 [ 190.833204][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.843269][ T7055] Call Trace: [ 190.846543][ T7055] [ 190.849494][ T7055] dump_stack_lvl+0x188/0x250 [ 190.854346][ T7055] ? load_image+0x400/0x400 [ 190.858979][ T7055] ? show_regs_print_info+0x20/0x20 [ 190.864176][ T7055] ? lockdep_rcu_suspicious+0x110/0x180 [ 190.869720][ T7055] ? local_bh_enable+0x20/0x20 [ 190.874574][ T7055] rhltable_lookup+0x52a/0x7c0 [ 190.879328][ T7055] ? local_bh_enable+0x20/0x20 [ 190.884091][ T7055] ? mr_mfc_find_parent+0x190/0x190 [ 190.889304][ T7055] ? mark_lock+0x94/0x320 [ 190.893636][ T7055] ? local_bh_enable+0x20/0x20 [ 190.898403][ T7055] ? mark_lock+0x94/0x320 [ 190.902830][ T7055] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.908835][ T7055] ? lock_chain_count+0x20/0x20 [ 190.913722][ T7055] mr_mfc_find_any_parent+0xb6/0x1e0 [ 190.919125][ T7055] ? local_bh_enable+0x20/0x20 [ 190.924020][ T7055] ip_mr_forward+0x24c/0xf90 [ 190.928637][ T7055] ipmr_mfc_add+0x23cc/0x2d40 [ 190.933328][ T7055] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 190.938366][ T7055] ? __lock_acquire+0x7d10/0x7d10 [ 190.943513][ T7055] ip_mroute_setsockopt+0xeaf/0x1250 [ 190.948844][ T7055] ? ipmr_rule_default+0x70/0x70 [ 190.953801][ T7055] ? __might_sleep+0xf0/0xf0 [ 190.958395][ T7055] ip_setsockopt+0x568/0x3130 [ 190.963072][ T7055] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 190.968488][ T7055] ? aa_sk_perm+0x7dc/0x910 [ 190.972988][ T7055] ? aa_af_perm+0x340/0x340 [ 190.977485][ T7055] ? __fget_files+0x40f/0x480 [ 190.982153][ T7055] ? aa_sock_opt_perm+0x74/0x100 [ 190.987181][ T7055] ? sock_common_setsockopt+0x32/0xb0 [ 190.992560][ T7055] ? raw_setsockopt+0xc5/0x180 [ 190.997314][ T7055] ? sock_common_recvmsg+0x1c0/0x1c0 [ 191.002587][ T7055] __sys_setsockopt+0x2bf/0x3d0 [ 191.007429][ T7055] __x64_sys_setsockopt+0xb1/0xc0 [ 191.012453][ T7055] do_syscall_64+0x4c/0xa0 [ 191.016877][ T7055] ? clear_bhb_loop+0x30/0x80 [ 191.021571][ T7055] ? clear_bhb_loop+0x30/0x80 [ 191.026330][ T7055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.032212][ T7055] RIP: 0033:0x7f691928a819 [ 191.036635][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.056351][ T7055] RSP: 002b:00007f69174e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.064847][ T7055] RAX: ffffffffffffffda RBX: 00007f6919503fa0 RCX: 00007f691928a819 [ 191.072905][ T7055] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 191.080896][ T7055] RBP: 00007f6919320c91 R08: 000000000000003c R09: 0000000000000000 [ 191.088887][ T7055] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 191.096923][ T7055] R13: 00007f6919504038 R14: 00007f6919503fa0 R15: 00007fff66eea188 [ 191.105075][ T7055] [ 191.111906][ T7055] [ 191.114328][ T7055] ============================= [ 191.119176][ T7055] WARNING: suspicious RCU usage [ 191.124109][ T7055] syzkaller #0 Not tainted [ 191.128542][ T7055] ----------------------------- [ 191.133795][ T7055] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 191.142574][ T7055] [ 191.142574][ T7055] other info that might help us debug this: [ 191.142574][ T7055] [ 191.152876][ T7055] [ 191.152876][ T7055] rcu_scheduler_active = 2, debug_locks = 1 [ 191.160973][ T7055] 1 lock held by syz.7.648/7055: [ 191.166003][ T7055] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 191.175828][ T7055] [ 191.175828][ T7055] stack backtrace: [ 191.193064][ T7055] CPU: 1 PID: 7055 Comm: syz.7.648 Not tainted syzkaller #0 [ 191.200406][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.210794][ T7055] Call Trace: [ 191.214075][ T7055] [ 191.216996][ T7055] dump_stack_lvl+0x188/0x250 [ 191.221656][ T7055] ? load_image+0x400/0x400 [ 191.226150][ T7055] ? show_regs_print_info+0x20/0x20 [ 191.231376][ T7055] ? lockdep_rcu_suspicious+0x110/0x180 [ 191.237015][ T7055] ? local_bh_enable+0x20/0x20 [ 191.241834][ T7055] rhltable_lookup+0x61e/0x7c0 [ 191.246602][ T7055] ? local_bh_enable+0x20/0x20 [ 191.251437][ T7055] ? mr_mfc_find_parent+0x190/0x190 [ 191.256623][ T7055] ? mark_lock+0x94/0x320 [ 191.260938][ T7055] ? local_bh_enable+0x20/0x20 [ 191.265695][ T7055] ? mark_lock+0x94/0x320 [ 191.270072][ T7055] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.276295][ T7055] ? lock_chain_count+0x20/0x20 [ 191.281146][ T7055] mr_mfc_find_any_parent+0xb6/0x1e0 [ 191.286531][ T7055] ? local_bh_enable+0x20/0x20 [ 191.291430][ T7055] ip_mr_forward+0x24c/0xf90 [ 191.296034][ T7055] ipmr_mfc_add+0x23cc/0x2d40 [ 191.300729][ T7055] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 191.305675][ T7055] ? __lock_acquire+0x7d10/0x7d10 [ 191.310705][ T7055] ip_mroute_setsockopt+0xeaf/0x1250 [ 191.316110][ T7055] ? ipmr_rule_default+0x70/0x70 [ 191.321059][ T7055] ? __might_sleep+0xf0/0xf0 [ 191.325637][ T7055] ip_setsockopt+0x568/0x3130 [ 191.330313][ T7055] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 191.335676][ T7055] ? aa_sk_perm+0x7dc/0x910 [ 191.340262][ T7055] ? aa_af_perm+0x340/0x340 [ 191.344755][ T7055] ? __fget_files+0x40f/0x480 [ 191.349450][ T7055] ? aa_sock_opt_perm+0x74/0x100 [ 191.354397][ T7055] ? sock_common_setsockopt+0x32/0xb0 [ 191.359766][ T7055] ? raw_setsockopt+0xc5/0x180 [ 191.364521][ T7055] ? sock_common_recvmsg+0x1c0/0x1c0 [ 191.369893][ T7055] __sys_setsockopt+0x2bf/0x3d0 [ 191.374737][ T7055] __x64_sys_setsockopt+0xb1/0xc0 [ 191.379750][ T7055] do_syscall_64+0x4c/0xa0 [ 191.384152][ T7055] ? clear_bhb_loop+0x30/0x80 [ 191.388811][ T7055] ? clear_bhb_loop+0x30/0x80 [ 191.393475][ T7055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.399485][ T7055] RIP: 0033:0x7f691928a819 [ 191.403889][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.423802][ T7055] RSP: 002b:00007f69174e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.432204][ T7055] RAX: ffffffffffffffda RBX: 00007f6919503fa0 RCX: 00007f691928a819 [ 191.440253][ T7055] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 191.448692][ T7055] RBP: 00007f6919320c91 R08: 000000000000003c R09: 0000000000000000 [ 191.456739][ T7055] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 191.464702][ T7055] R13: 00007f6919504038 R14: 00007f6919503fa0 R15: 00007fff66eea188 [ 191.472671][ T7055] [ 194.135293][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142139][ T1420] ieee802154 phy1 wpan1: encryption failed: -22