last executing test programs: 55.807700278s ago: executing program 0 (id=235): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x7) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="a568c14719210631c4cb449655740cc28b13d1ca0d58e11a950594af54602162cbed1b4737f3f8a5fa67c91b3a45de8f24474e752526a75ffa1e1ad6fdb38b1aaa01be9c5db58f3181edbb0aa263639e0f4e16b324dcc513e15f988b3e69ee08453c4bbe575f8d", 0x67}], 0x1) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) 55.635753107s ago: executing program 0 (id=238): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000)=[{0x0, 0xfe00, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 55.549158671s ago: executing program 0 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @initial, {0x3, 0x7}}, 0x41, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) 54.909283183s ago: executing program 0 (id=245): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r1, r0, 0x2) write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 54.527719102s ago: executing program 0 (id=248): sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x4090) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 53.673918125s ago: executing program 0 (id=255): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2cd, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x297, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdb7525017c0000040042800c00018006000600800a00000c000280080017"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r1) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000000)={'wlan1\x00', @ifru_flags=0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r5, 0xb1d, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="21180000000000001c0012800b0001006d616373656300000c000280050009000000000008000500", @ANYRES32, @ANYBLOB="ce8f2b09fe497119d90816f366b8633e18fd85efda8d15d8d860e2d130f81158e1ca07"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x2, 0x4, 0x1, 0x81, {0x0, 0xea60}, {0x1, 0x2, 0x8, 0x9, 0x29, 0x9, "0adb3fb8"}, 0x7}) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000003c0)={0xc70, 0xa0b4, 0xfff, 0x8}) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) poll(&(0x7f0000000300), 0x0, 0x5d6fb72d) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 53.452881946s ago: executing program 32 (id=255): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2cd, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x297, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdb7525017c0000040042800c00018006000600800a00000c000280080017"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r1) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000000)={'wlan1\x00', @ifru_flags=0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r5, 0xb1d, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="21180000000000001c0012800b0001006d616373656300000c000280050009000000000008000500", @ANYRES32, @ANYBLOB="ce8f2b09fe497119d90816f366b8633e18fd85efda8d15d8d860e2d130f81158e1ca07"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)=@mmap={0x1, 0x2, 0x4, 0x1, 0x81, {0x0, 0xea60}, {0x1, 0x2, 0x8, 0x9, 0x29, 0x9, "0adb3fb8"}, 0x7}) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000003c0)={0xc70, 0xa0b4, 0xfff, 0x8}) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) poll(&(0x7f0000000300), 0x0, 0x5d6fb72d) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 6.97619275s ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d000000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000490ae50018310000010000041600000000000000bf91000000000000b702000004000000e500000085000000b70000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) 5.623583467s ago: executing program 2 (id=580): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x40002) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000480)=[0xf], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5.348700531s ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x29c7d62d2a8014d5, 0x0, 0x0, 0x0, 0x0) 5.036327767s ago: executing program 2 (id=584): r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/46) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/33) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/202) r1 = semget$private(0x0, 0x0, 0x280) semctl$IPC_RMID(r1, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000b340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/180) get_mempolicy(0x0, &(0x7f000000b480), 0x6, &(0x7f0000ffa000/0x4000)=nil, 0x7) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x222a40) syz_genetlink_get_family_id$mptcp(&(0x7f000000b4c0), r3) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f000000b540), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f000000b600), r3) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f000000b6c0)={0x0, 0x0, &(0x7f000000b680)={&(0x7f000000b640)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbf8, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f000000b840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x4004044) link(0x0, &(0x7f000000b8c0)='./file0\x00') bind$inet(r3, &(0x7f000000b900)={0x2, 0x4e23, @empty}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000000bb40)={0xffffffffffffffff, 0xc, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) shmctl$IPC_INFO(r0, 0x3, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f000000bd80)=""/47) dup3(r7, r3, 0x80000) 4.929982182s ago: executing program 2 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.851677666s ago: executing program 2 (id=587): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x350, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x1, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x1a}}}}}}, 0x0) 3.103248164s ago: executing program 4 (id=597): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000008000000000000000004000085200000b5530100"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.947627911s ago: executing program 4 (id=599): pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0xbdc, &(0x7f0000000200)={0x0, 0x9c97, 0x400, 0x1, 0x35d, 0x0, r0}, &(0x7f00000006c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56a, &(0x7f0000000800)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0xf) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x81, 0x4, 0x9, 0x2, 0x3, 0x0, 0x4, 0xf5, 0x9}}, 0x43) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x2f063d1f26a5c208, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getpriority(0x1, 0x0) tkill(0x0, 0x1b) close_range(r4, 0xffffffffffffffff, 0x0) 2.301323854s ago: executing program 3 (id=602): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r1, r0, 0x2) write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.067685106s ago: executing program 4 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x5, 0xe792) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x209, &(0x7f0000000340)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x7f, 0x2f000000}) 1.938652252s ago: executing program 5 (id=604): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x40002) syz_open_dev$evdev(&(0x7f0000000180), 0x1ff, 0xc0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000480)=[0xf], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.881247605s ago: executing program 1 (id=605): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$cgroup(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 1.643388907s ago: executing program 3 (id=606): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b9ff033189442602000000f086dd6600000080283bbf6692e03e6fab161b1190cd3444823f88acceb84a9800"/54, 0x0, 0x64, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.640306447s ago: executing program 5 (id=607): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10) lseek(r2, 0xfffffffffffffffd, 0x4) 1.557665742s ago: executing program 1 (id=608): r0 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/46) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/33) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/202) r1 = semget$private(0x0, 0x0, 0x280) semctl$IPC_RMID(r1, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000b340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/180) get_mempolicy(0x0, &(0x7f000000b480), 0x6, &(0x7f0000ffa000/0x4000)=nil, 0x7) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x222a40) syz_genetlink_get_family_id$mptcp(&(0x7f000000b4c0), r3) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f000000b540), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f000000b600), r3) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f000000b6c0)={0x0, 0x0, &(0x7f000000b680)={&(0x7f000000b640)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbf8, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f000000b840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x4004044) link(0x0, &(0x7f000000b8c0)='./file0\x00') bind$inet(r3, &(0x7f000000b900)={0x2, 0x4e23, @empty}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000000bb40)={0xffffffffffffffff, 0xc, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) shmctl$IPC_INFO(r0, 0x3, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f000000bd80)=""/47) dup3(r7, r3, 0x80000) 1.337304383s ago: executing program 5 (id=609): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000004000085200000b553010095"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x8c) 1.282881275s ago: executing program 3 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = socket(0x11, 0x80802, 0x0) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x4008001) 1.282321165s ago: executing program 1 (id=611): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a5", 0x19}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 1.143701373s ago: executing program 5 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x77ff, 0x75ea, 0x800004, 0x1}) 1.133577163s ago: executing program 3 (id=613): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 970.206711ms ago: executing program 3 (id=614): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file2\x00'}) fchown(r2, r3, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r8 = dup(r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000100)={0x0, 0x2710}, 0x10) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x4, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000f00)={0xf0f003, 0x6}) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 838.278008ms ago: executing program 1 (id=615): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 837.990447ms ago: executing program 4 (id=616): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x153b5}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 627.400928ms ago: executing program 4 (id=617): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r1, r0, 0x2) write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, &(0x7f0000000040)="09000000010001", 0x7) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 568.114951ms ago: executing program 3 (id=618): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 400.985229ms ago: executing program 1 (id=619): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 267.869156ms ago: executing program 5 (id=620): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000200)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000380)={0xa, 0xfffd, 0xc9, @local}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 178.938821ms ago: executing program 1 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x8, 0x1, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "0660c5d4c033f532a98a4d82b7d7cc7757d841771f717464a5ac26ccb9a7ed36d6eea60fa5f4279ec9656947b71918d00dd7c92cd07b2925b7717fffe1de95996ce1994e0292b9e1828e7f1388e2c9541eca8b42a9c48df95c562e87e568f6d1ee8c0045f0a09ab36b1100be934d1173c1978d473ccb0356fdaa8741341a970571e548a46ddf2654830c18f158749860beb92f74b1aa1e4d2847e9402baf0dcafad69f4d6a34663e7ae6498df3cbe0ee4e2de58b23d819fd3eb72b7f99912a45e8d1e114d57a5eda2fa7f910750f78f9c5041658cb000244088ef6306eb5699cf2f3e271938abe0087260db31b2aea61cdb16c09f31d3900"}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x4, 0xb, 0xd15, 0x54, 0x6, 0x0, 0x4, 0x8, 0xff, 0x5, 0x2, 0x7, 0xc51a, 0x7fff}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x8000, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0xdc, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000780)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0x11, r6, 0x1, 0x5, 0x6, @random="34f51e8e0a5a"}, 0x14) 3.69718ms ago: executing program 5 (id=622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000200000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 0s ago: executing program 4 (id=623): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 45.199252][ T3855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.210211][ T3855] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. syzkaller login: [ 67.599449][ T4173] cgroup: Unknown subsys name 'net' [ 67.725086][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.330670][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.824556][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 70.936025][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 70.984828][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.993369][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.002288][ T4195] device bridge_slave_0 entered promiscuous mode [ 71.015026][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.022544][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.031644][ T4195] device bridge_slave_1 entered promiscuous mode [ 71.056047][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 71.081577][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 71.115582][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.128065][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.210736][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 71.231686][ T4195] team0: Port device team_slave_0 added [ 71.262357][ T4195] team0: Port device team_slave_1 added [ 71.276980][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.284615][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.292973][ T4191] device bridge_slave_0 entered promiscuous mode [ 71.306774][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.314072][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.322450][ T4191] device bridge_slave_1 entered promiscuous mode [ 71.344136][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.352600][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.361041][ T4186] device bridge_slave_0 entered promiscuous mode [ 71.384058][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.391574][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.418981][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.445917][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.455536][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.464658][ T4186] device bridge_slave_1 entered promiscuous mode [ 71.472983][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.480910][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.508893][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.535966][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.546843][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.554883][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.563490][ T4185] device bridge_slave_0 entered promiscuous mode [ 71.598717][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.610776][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.620845][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.628511][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.630889][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.635691][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646408][ T4185] device bridge_slave_1 entered promiscuous mode [ 71.686206][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.698320][ T4191] team0: Port device team_slave_0 added [ 71.732289][ T4191] team0: Port device team_slave_1 added [ 71.748419][ T4195] device hsr_slave_0 entered promiscuous mode [ 71.757563][ T4195] device hsr_slave_1 entered promiscuous mode [ 71.787876][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.806968][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.814260][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.822684][ T4187] device bridge_slave_0 entered promiscuous mode [ 71.833058][ T4186] team0: Port device team_slave_0 added [ 71.856220][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.876430][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.884162][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.892715][ T4187] device bridge_slave_1 entered promiscuous mode [ 71.909121][ T4186] team0: Port device team_slave_1 added [ 71.915444][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.923091][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.951251][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.996201][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.008493][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.018991][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.026060][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.054680][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.077720][ T4185] team0: Port device team_slave_0 added [ 72.103034][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.110809][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.137775][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.151708][ T4185] team0: Port device team_slave_1 added [ 72.185360][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.193127][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.220203][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.238985][ T4187] team0: Port device team_slave_0 added [ 72.249835][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.257061][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.284707][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.303736][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.311062][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.337774][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.360373][ T4187] team0: Port device team_slave_1 added [ 72.418589][ T4186] device hsr_slave_0 entered promiscuous mode [ 72.425730][ T4186] device hsr_slave_1 entered promiscuous mode [ 72.432977][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.441310][ T4186] Cannot create hsr debugfs directory [ 72.450647][ T4191] device hsr_slave_0 entered promiscuous mode [ 72.459030][ T4191] device hsr_slave_1 entered promiscuous mode [ 72.465782][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.474356][ T4191] Cannot create hsr debugfs directory [ 72.488892][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.496238][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.501008][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 72.525957][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 72.537785][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.550292][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 72.578103][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 72.581846][ T4185] device hsr_slave_0 entered promiscuous mode [ 72.591728][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 72.599367][ T4185] device hsr_slave_1 entered promiscuous mode [ 72.606384][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.614461][ T4185] Cannot create hsr debugfs directory [ 72.620644][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.628178][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.655175][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.775687][ T4187] device hsr_slave_0 entered promiscuous mode [ 72.783816][ T4187] device hsr_slave_1 entered promiscuous mode [ 72.792123][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.800724][ T4187] Cannot create hsr debugfs directory [ 73.039411][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.064168][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.083950][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.093872][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.150798][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.175816][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.187399][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.218272][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.259776][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.273042][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.286342][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.304720][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.317602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.326889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.342702][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.363512][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.391801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.401814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.412508][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.419928][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.433998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.470913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.482141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.492929][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.500540][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.509764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.519806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.529156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.539245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.548412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.560279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.570996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.588527][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.602531][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.612313][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.640236][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.656048][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.670656][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.684406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.693986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.708965][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.741706][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.785240][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.816591][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.840379][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.849263][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.860169][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.879120][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.900319][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.953955][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.963484][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.974125][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.981672][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.990423][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.000223][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.009566][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.017010][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.026735][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.042166][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.051767][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.062875][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.072456][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.081755][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.090725][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.110562][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.146931][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.158931][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.193438][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.203937][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.213194][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.223132][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.233678][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.242651][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.255190][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.273016][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.298584][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.312143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.320684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.340739][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.373070][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.386469][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.399577][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.407302][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.422264][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.433965][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.446492][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.470403][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.479735][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.489697][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.500429][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.508212][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.516950][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.538810][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.559928][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.569335][ T3096] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.576821][ T3096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.585000][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 74.591584][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 74.598625][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.607642][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 74.615316][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.624905][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.632155][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.642982][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.655473][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.668211][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 74.681610][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.690362][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 74.700682][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.716452][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.740542][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.749770][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.760128][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.770457][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.780398][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.790103][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.827951][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.836969][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.850061][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.860606][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.870139][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.879794][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.889494][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.905661][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.924101][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.937315][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.954930][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.971486][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.984787][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.997018][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.013063][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.027379][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.046841][ T4195] device veth0_vlan entered promiscuous mode [ 75.087454][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.095760][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.111430][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.124224][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.139405][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.154976][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.164682][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.179659][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.194414][ T4195] device veth1_vlan entered promiscuous mode [ 75.210679][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.223636][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.234569][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.282419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.294814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.307152][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.314532][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.329876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.343016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.355101][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.362730][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.379178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.387903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.396015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.432327][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.456620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.467406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.495207][ T4195] device veth0_macvtap entered promiscuous mode [ 75.545044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.554639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.572586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.585970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.598237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.608075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.618102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.627305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.646079][ T4191] device veth0_vlan entered promiscuous mode [ 75.657090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.671293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.688766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.696668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.715821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.724885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.749870][ T4195] device veth1_macvtap entered promiscuous mode [ 75.759942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.772254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.782875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.798464][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.808651][ T4191] device veth1_vlan entered promiscuous mode [ 75.821710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.831744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.842135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.906188][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.916485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.932561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.942375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.951774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.962413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.981905][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.004608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.019439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.040138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.051813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.064890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.079031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.098453][ T4191] device veth0_macvtap entered promiscuous mode [ 76.129537][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.143151][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.152681][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.162479][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.192427][ T4191] device veth1_macvtap entered promiscuous mode [ 76.201966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.216704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.229692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.241643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.284420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.295281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.317305][ T4186] device veth0_vlan entered promiscuous mode [ 76.330026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.345322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.364952][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.383124][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.396076][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.438527][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.455527][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.470478][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.480732][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.491706][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.500622][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.515114][ T4186] device veth1_vlan entered promiscuous mode [ 76.525196][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.537459][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.550849][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.564203][ T4187] device veth0_vlan entered promiscuous mode [ 76.593577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.603648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.617372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.628548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.638171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.646293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.658516][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 76.661034][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.678661][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 76.680901][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.689322][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 76.698228][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.713208][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748171][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 76.755635][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 76.765420][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.776604][ T4187] device veth1_vlan entered promiscuous mode [ 76.812736][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.827361][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855945][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.867021][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.877263][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.886060][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.896094][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.909161][ T4186] device veth0_macvtap entered promiscuous mode [ 76.955613][ T4186] device veth1_macvtap entered promiscuous mode [ 76.963645][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.972454][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.982063][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.991712][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.019497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.029121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.044967][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.053620][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.064007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.074656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.102455][ T4185] device veth0_vlan entered promiscuous mode [ 77.111179][ T4187] device veth0_macvtap entered promiscuous mode [ 77.119984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.129285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.140839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.150314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.160153][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.184797][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.197011][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.205572][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.215896][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.227515][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.240452][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.254719][ T4185] device veth1_vlan entered promiscuous mode [ 77.265465][ T4187] device veth1_macvtap entered promiscuous mode [ 77.295243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.306526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.315782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.325039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.334991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.346938][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.358459][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.368998][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.380065][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.392882][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.432022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.444652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.455422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.471645][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482287][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.492193][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.501403][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.527203][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.541243][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.551921][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.556401][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.570752][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.581730][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.593451][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.604689][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.616349][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.634198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.647436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.663320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.696612][ T4270] loop3: detected capacity change from 0 to 1024 [ 77.713982][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.723196][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.752915][ T4270] EXT4-fs (loop3): Ignoring removed orlov option [ 77.788553][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.809311][ T4270] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 77.840340][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.854508][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.873245][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.883850][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.901541][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.915448][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.959420][ T4185] device veth0_macvtap entered promiscuous mode [ 77.992645][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.004347][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.033768][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.050558][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.063226][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.076657][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085948][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.110277][ T4185] device veth1_macvtap entered promiscuous mode [ 78.134619][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.216589][ T4278] loop3: detected capacity change from 0 to 512 [ 78.258578][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.276742][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.291748][ T4278] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.6: inode has both inline data and extents flags [ 78.313991][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.324704][ T4278] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.6: couldn't read orphan inode 15 (err -117) [ 78.324945][ T4278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.354722][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.373254][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.385243][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.396099][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.407092][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.417268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.429229][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.440955][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.456119][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.467158][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.476421][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.495458][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.512096][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.522245][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.533417][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.544905][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.561547][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.574846][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.596458][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.615597][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.643706][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.663670][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.679244][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.690519][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.699983][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.710277][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.731049][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.740385][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 78.763714][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.763904][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 78.779474][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 78.805162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.828124][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 78.837938][ T1325] Bluetooth: hci4: command 0x0419 tx timeout [ 78.897217][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.925486][ T4282] loop3: detected capacity change from 0 to 2048 [ 78.933205][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.946639][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.008290][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.016791][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.058878][ T4282] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,init_itable,noblock_validity,,errors=continue. Quota mode: none. [ 79.074559][ T4282] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.123329][ T4288] loop2: detected capacity change from 0 to 512 [ 79.134933][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.141439][ T3096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.158618][ T3096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.168588][ T4288] ======================================================= [ 79.168588][ T4288] WARNING: The mand mount option has been deprecated and [ 79.168588][ T4288] and is ignored by this kernel. Remove the mand [ 79.168588][ T4288] option from the mount to silence this warning. [ 79.168588][ T4288] ======================================================= [ 79.217423][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.226067][ T4282] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 79.245450][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.249456][ T4288] EXT4-fs (loop2): inline encryption not supported [ 79.283965][ T4288] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.360706][ T4288] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 79.421525][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.431759][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.442294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.660699][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.701106][ T4295] loop4: detected capacity change from 0 to 4096 [ 79.803786][ T4295] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 79.851479][ T4304] loop3: detected capacity change from 0 to 512 [ 79.926668][ T4308] loop0: detected capacity change from 0 to 1024 [ 79.974139][ T26] audit: type=1800 audit(1774289396.147:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 80.014801][ T4304] EXT4-fs (loop3): 1 truncate cleaned up [ 80.022633][ T4304] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,journal_dev=0x0000000000000101,usrjquota=,,errors=continue. Quota mode: none. [ 80.110977][ T4308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.130618][ T26] audit: type=1800 audit(1774289396.307:3): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 80.163998][ T4313] device syzkaller0 entered promiscuous mode [ 80.185940][ T4308] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.13: Allocating blocks 497-513 which overlap fs metadata [ 80.365749][ T4325] loop4: detected capacity change from 0 to 256 [ 80.442164][ T4325] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.455384][ T4323] EXT4-fs (loop0): pa ffff888074080e00: logic 0, phys. 113, len 25 [ 80.464007][ T4323] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 80.555917][ T26] audit: type=1800 audit(1774289396.727:4): pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 80.627430][ T26] audit: type=1800 audit(1774289396.757:5): pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 80.661628][ T4332] tipc: Failed to remove unknown binding: 66,0,0/0:3030223781/3030223782 [ 80.699158][ T4331] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 80.776511][ T4331] FAT-fs (loop4): Filesystem has been set read-only [ 80.832632][ T4331] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 80.925992][ T4331] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 80.963703][ T4331] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 80.984878][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.038077][ T4331] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 81.227295][ T4347] loop2: detected capacity change from 0 to 1024 [ 81.257441][ T4347] EXT4-fs (loop2): Ignoring removed orlov option [ 81.390396][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,nodioread_nolock,data_err=ignore,norecovery,init_itable=0x0000000000000008,orlov,usrquota,journal_dev=0x0000000000000007,usrjquota=,,errors=continue. Quota mode: writeback. [ 81.462356][ T26] audit: type=1800 audit(1774289397.637:6): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 81.592983][ T4358] loop3: detected capacity change from 0 to 2048 [ 81.665043][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noblock_validity,abort,nojournal_checksum,abort,i_version,,errors=continue. Quota mode: writeback. [ 81.823222][ T4179] loop0: p1 p3 < > [ 81.875118][ T4351] loop0: p1 p3 < > [ 82.387033][ T155] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.482351][ T155] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 258 with error 28 [ 82.516067][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 82.519019][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.539066][ T155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.539066][ T155] [ 82.565084][ T155] EXT4-fs (loop3): Total free blocks count 0 [ 82.592054][ T155] EXT4-fs (loop3): Free/Dirty block details [ 82.616215][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 82.628076][ T155] EXT4-fs (loop3): free_blocks=2415919504 [ 82.633917][ T155] EXT4-fs (loop3): dirty_blocks=544 [ 82.640787][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.655428][ T155] EXT4-fs (loop3): Block reservation details [ 82.675924][ T155] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 82.701381][ T155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 258 with error 28 [ 82.745822][ T155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.745822][ T155] [ 82.828090][ T4389] set_capacity_and_notify: 2 callbacks suppressed [ 82.828106][ T4389] loop0: detected capacity change from 0 to 8192 [ 83.089858][ T4396] device hsr0 entered promiscuous mode [ 83.136188][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 83.211498][ T4396] device hsr_slave_0 left promiscuous mode [ 83.220298][ T4396] device hsr_slave_1 left promiscuous mode [ 83.271279][ T4398] process 'syz.2.41' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 83.841027][ T4396] device hsr0 left promiscuous mode [ 83.870366][ T4409] loop1: detected capacity change from 0 to 512 [ 83.948433][ T4409] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.44: invalid indirect mapped block 4294967295 (level 1) [ 84.068711][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.080060][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.097738][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 84.111859][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.116368][ T4409] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.44: invalid indirect mapped block 4294967295 (level 1) [ 84.151541][ T4414] device bridge_slave_0 left promiscuous mode [ 84.169029][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.231888][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 84.244527][ T4414] device bridge_slave_1 left promiscuous mode [ 84.269310][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.299168][ T4409] EXT4-fs (loop1): 2 truncates cleaned up [ 84.305059][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 84.334800][ T4414] bond0: (slave bond_slave_0): Releasing backup interface [ 84.406377][ T4414] bond0: (slave bond_slave_1): Releasing backup interface [ 84.572692][ T4414] team0: Port device team_slave_0 removed [ 84.632157][ T4414] team0: Port device team_slave_1 removed [ 84.676951][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.700438][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.721426][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.739663][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.490643][ T4458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 85.576417][ T4462] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 85.673747][ T4462] team0: Port device netdevsim0 added [ 86.554995][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fda1400: rx timeout, send abort [ 86.583660][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fda1400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 86.797836][ T4481] capability: warning: `syz.2.75' uses 32-bit capabilities (legacy support in use) [ 86.983209][ T13] cfg80211: failed to load regulatory.db [ 87.014726][ T4492] loop2: detected capacity change from 0 to 256 [ 87.127414][ T4492] FAT-fs (loop2): Directory bread(block 64) failed [ 87.182833][ T4492] FAT-fs (loop2): Directory bread(block 65) failed [ 87.227607][ T4492] FAT-fs (loop2): Directory bread(block 66) failed [ 87.235051][ T4492] FAT-fs (loop2): Directory bread(block 67) failed [ 87.357648][ T4492] FAT-fs (loop2): Directory bread(block 68) failed [ 87.414948][ T4492] FAT-fs (loop2): Directory bread(block 69) failed [ 87.485922][ T4492] FAT-fs (loop2): Directory bread(block 70) failed [ 87.527668][ T4492] FAT-fs (loop2): Directory bread(block 71) failed [ 87.555166][ T4492] FAT-fs (loop2): Directory bread(block 72) failed [ 87.589799][ T4492] FAT-fs (loop2): Directory bread(block 73) failed [ 88.098737][ T4524] tipc: Started in network mode [ 88.104458][ T4524] tipc: Node identity aa762f085b86, cluster identity 4711 [ 88.163466][ T4524] tipc: Enabled bearer , priority 0 [ 88.234375][ T4527] tipc: Resetting bearer [ 88.271555][ T4523] device syzkaller0 entered promiscuous mode [ 88.317756][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 88.381799][ T4532] loop4: detected capacity change from 0 to 512 [ 88.406067][ T4518] tipc: Resetting bearer [ 88.453022][ T4518] tipc: Disabling bearer [ 88.490652][ T4532] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.566723][ T4532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.92: bg 0: block 104: invalid block bitmap [ 88.597981][ T4532] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 88.678125][ T4532] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.92: invalid indirect mapped block 1 (level 1) [ 88.779306][ T4532] EXT4-fs (loop4): 1 truncate cleaned up [ 88.785102][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.802321][ T4540] loop1: detected capacity change from 0 to 512 [ 88.846797][ T4540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.965475][ T4540] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.014137][ T4540] EXT4-fs (loop1): 1 truncate cleaned up [ 89.023674][ T4540] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,grpid,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000047,dioread_lock,,errors=continue. Quota mode: none. [ 89.605274][ T1108] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.700602][ T1108] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.826359][ T4575] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.878944][ T4576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.998274][ T4581] loop3: detected capacity change from 0 to 512 [ 90.045231][ T4581] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 90.084386][ T4583] loop2: detected capacity change from 0 to 128 [ 90.128783][ T4581] EXT4-fs (loop3): 1 truncate cleaned up [ 90.151599][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,bsdgroups,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 90.320011][ T26] audit: type=1800 audit(1774289406.497:7): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.108" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 91.042762][ T4595] loop4: detected capacity change from 0 to 512 [ 91.328176][ T4595] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.114: bg 0: block 248: padding at end of block bitmap is not set [ 91.386546][ T4595] Quota error (device loop4): write_blk: dquota write failed [ 91.487999][ T4595] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.505802][ T4595] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.114: Failed to acquire dquot type 1 [ 91.567036][ T4595] EXT4-fs (loop4): 1 truncate cleaned up [ 91.610041][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.667908][ T4595] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.889354][ T4197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.188021][ T4197] usb 4-1: device descriptor read/64, error -71 [ 92.487811][ T4197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.777729][ T4197] usb 4-1: device descriptor read/64, error -71 [ 92.903462][ T4197] usb usb4-port1: attempt power cycle [ 92.943968][ T4631] capability: warning: `syz.4.122' uses deprecated v2 capabilities in a way that may be insecure [ 93.011049][ T4633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.061867][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.069804][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.131115][ T4637] loop0: detected capacity change from 0 to 1024 [ 93.153650][ T4637] EXT4-fs (loop0): Ignoring removed bh option [ 93.165668][ T4635] syz.4.125 uses obsolete (PF_INET,SOCK_PACKET) [ 93.185147][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 93.195999][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 93.215993][ T4635] device syz_tun entered promiscuous mode [ 93.224012][ T4637] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,usrquota,bh,,errors=continue. Quota mode: writeback. [ 93.225550][ T4635] device erspan0 entered promiscuous mode [ 93.261632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 93.327825][ T4197] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.338860][ T4637] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.427819][ T4197] usb 4-1: device descriptor read/8, error -71 [ 93.533421][ T4646] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.124: lblock 0 mapped to illegal pblock 0 (length 6) [ 93.595063][ T4646] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 93.641961][ T4646] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.641961][ T4646] [ 93.656209][ T4643] loop2: detected capacity change from 0 to 8192 [ 93.687269][ T4649] loop1: detected capacity change from 0 to 512 [ 93.705726][ T4649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.728943][ T4643] FAT-fs (loop2): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 93.752391][ T4649] EXT4-fs (loop1): 1 orphan inode deleted [ 93.760675][ T4649] EXT4-fs (loop1): 1 truncate cleaned up [ 93.767231][ T4649] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,dax=inode,nombcache,stripe=0x0000000000008005,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 93.807728][ T4197] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.938119][ T4197] usb 4-1: device descriptor read/8, error -71 [ 94.069051][ T4197] usb usb4-port1: unable to enumerate USB device [ 94.182091][ T154] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.184385][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 94.214144][ T4658] netlink: 184 bytes leftover after parsing attributes in process `syz.2.132'. [ 94.241435][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 94.257646][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.267012][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.267012][ T154] [ 94.399441][ T154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 94.440306][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 548 with error 28 [ 94.475442][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.475442][ T154] [ 94.506899][ T154] EXT4-fs (loop0): Total free blocks count 0 [ 94.527726][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 94.535375][ T154] EXT4-fs (loop0): Free/Dirty block details [ 94.555677][ T154] EXT4-fs (loop0): free_blocks=0 [ 94.569913][ T154] EXT4-fs (loop0): dirty_blocks=560 [ 94.613297][ T4664] loop3: detected capacity change from 0 to 512 [ 94.668218][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.698303][ T4664] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.136: inode has both inline data and extents flags [ 94.735513][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.756138][ T4664] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.136: couldn't read orphan inode 15 (err -117) [ 94.775899][ T1108] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 94.776680][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.818092][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.831705][ T26] audit: type=1800 audit(1774289411.007:8): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.136" name="file0" dev="loop3" ino=18 res=0 errno=0 [ 94.876768][ T1108] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 94.980994][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.418555][ T1108] usb 2-1: config 0 descriptor?? [ 96.099370][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.198649][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.332225][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.418025][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.538682][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.824712][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.834986][ T1108] acrux 0003:1A34:F705.0002: unknown main item tag 0x0 [ 96.844724][ T1108] acrux 0003:1A34:F705.0002: item fetching failed at offset 14/41 [ 96.855184][ T1108] acrux 0003:1A34:F705.0002: parse failed [ 96.862476][ T1108] acrux: probe of 0003:1A34:F705.0002 failed with error -22 [ 96.885069][ T1108] usb 2-1: USB disconnect, device number 2 [ 97.028773][ T4701] loop0: detected capacity change from 0 to 512 [ 97.092017][ T4701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.203408][ T4701] EXT4-fs (loop0): 1 truncate cleaned up [ 97.221895][ T4701] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 97.258107][ T4710] device syzkaller0 entered promiscuous mode [ 97.845002][ T4724] device syzkaller0 entered promiscuous mode [ 97.876528][ T4725] loop3: detected capacity change from 0 to 8192 [ 97.908432][ T4734] loop4: detected capacity change from 0 to 2048 [ 98.014663][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.437837][ T4740] loop1: detected capacity change from 0 to 128 [ 98.730100][ T4749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'. [ 98.744648][ T26] audit: type=1800 audit(98.688:9): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.157" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 98.977204][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 99.130502][ T4763] loop3: detected capacity change from 0 to 512 [ 99.205732][ T4763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.243238][ T4770] loop2: detected capacity change from 0 to 1024 [ 99.286412][ T4763] EXT4-fs (loop3): 1 truncate cleaned up [ 99.388045][ T4763] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 99.448490][ T4764] loop1: detected capacity change from 0 to 8192 [ 99.476014][ T4770] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 99.612723][ T4770] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 99.911921][ T4777] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 100.531447][ T4681] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.071528][ T4791] device syzkaller0 entered promiscuous mode [ 101.167450][ T4791] Zero length message leads to an empty skb [ 101.436778][ T4802] netlink: 240 bytes leftover after parsing attributes in process `syz.1.182'. [ 101.518489][ T4802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.182'. [ 101.689353][ T4813] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 101.828666][ T4820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.914132][ T4818] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 101.937242][ T4817] loop1: detected capacity change from 0 to 1024 [ 102.237591][ T4817] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 102.385134][ T4817] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 102.550709][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 102.557554][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 102.575674][ T4833] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 103.806851][ T4843] loop1: detected capacity change from 0 to 8192 [ 104.577649][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 104.584809][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 104.927321][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.097724][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.475520][ T4821] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.487272][ T4821] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.498214][ T4821] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.509499][ T4821] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.668651][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 106.963481][ T4821] syz.2.185 (4821) used greatest stack depth: 19696 bytes left [ 107.466849][ T4941] loop3: detected capacity change from 0 to 512 [ 107.513242][ T4941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.587401][ T4941] EXT4-fs (loop3): 1 truncate cleaned up [ 107.610430][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 108.191340][ T4969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.327602][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.432795][ T4976] loop1: detected capacity change from 0 to 1024 [ 108.477880][ T4976] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.550925][ T26] audit: type=1800 audit(108.498:10): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 108.588426][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 108.641231][ T4976] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3885: comm syz.1.243: Allocating blocks 497-513 which overlap fs metadata [ 108.750221][ T1108] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.769335][ T1108] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.780147][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.788554][ T1108] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.798789][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.821204][ T1108] usb 4-1: config 0 descriptor?? [ 108.832078][ T4985] loop0: detected capacity change from 0 to 1024 [ 108.888827][ T4982] block device autoloading is deprecated and will be removed. [ 108.903973][ T4982] md: md2 stopped. [ 108.957689][ T4985] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 109.047666][ T4985] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 109.125140][ T4991] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.164603][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.179945][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.196730][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.215305][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.230075][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.268477][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.287094][ T4975] EXT4-fs (loop1): pa ffff8880742b72a0: logic 48, phys. 177, len 21 [ 109.295595][ T4975] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 109.308127][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.329676][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.345390][ T1108] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 109.360646][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.372071][ T1108] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 109.379772][ T4185] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 109.400149][ T1108] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 109.412021][ T1108] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 109.422203][ T1108] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 109.435631][ T1108] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 109.557726][ T1108] usb 4-1: USB disconnect, device number 6 [ 110.047295][ T4475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.184714][ T4475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.315522][ T4475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.523820][ T4475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.751601][ T5020] loop1: detected capacity change from 0 to 1024 [ 110.901188][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.945733][ T26] audit: type=1800 audit(110.888:11): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.260" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 110.972273][ T5020] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3885: comm syz.1.260: Allocating blocks 497-513 which overlap fs metadata [ 111.087838][ T23] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 111.321860][ T5017] chnl_net:caif_netlink_parms(): no params data found [ 111.489178][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.501008][ T23] usb 5-1: config 0 has no interface number 0 [ 111.507279][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.519419][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.538058][ T5019] EXT4-fs (loop1): pa ffff8880742b7460: logic 0, phys. 113, len 25 [ 111.541684][ T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.546324][ T5019] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 111.556502][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.575909][ T23] usb 5-1: config 0 descriptor?? [ 111.597968][ T5024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.639596][ T23] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.785573][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.803820][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.858744][ T5017] device bridge_slave_0 entered promiscuous mode [ 111.860636][ T1108] usb 5-1: USB disconnect, device number 2 [ 111.887532][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 111.978327][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.985735][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.027440][ T5017] device bridge_slave_1 entered promiscuous mode [ 112.141721][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.170244][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.293986][ T5017] team0: Port device team_slave_0 added [ 112.312836][ T4202] Bluetooth: hci3: hcon ffff88807a0f4000 sent 1 < count 6121 [ 112.321983][ T4202] Bluetooth: hci3: hcon ffff88807a0f4000 sent 0 < count 12 [ 112.330531][ T4202] Bluetooth: hci3: hcon ffff88801b1a8000 sent 1 < count 510 [ 112.445702][ T5017] team0: Port device team_slave_1 added [ 112.547625][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.592306][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.633197][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.659199][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 112.765018][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.918606][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.474346][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.700912][ T5089] loop4: detected capacity change from 0 to 1024 [ 113.719061][ T4475] device hsr_slave_0 left promiscuous mode [ 113.763059][ T4475] device hsr_slave_1 left promiscuous mode [ 113.814288][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.848507][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.857313][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.865511][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.874147][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.896070][ T26] audit: type=1800 audit(113.838:12): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.278" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 113.920362][ T5089] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.278: Allocating blocks 497-513 which overlap fs metadata [ 113.940554][ T4475] device bridge_slave_1 left promiscuous mode [ 113.952949][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.034954][ T4475] device bridge_slave_0 left promiscuous mode [ 114.053043][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.068338][ T5106] EXT4-fs (loop4): pa ffff8880742b7540: logic 0, phys. 113, len 25 [ 114.078044][ T5106] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 114.272003][ T4475] device veth1_macvtap left promiscuous mode [ 114.310427][ T4475] device veth0_macvtap left promiscuous mode [ 114.361459][ T4475] device veth1_vlan left promiscuous mode [ 114.390884][ T4475] device veth0_vlan left promiscuous mode [ 114.594142][ T5127] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.630369][ T5127] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.737911][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 115.910143][ T4475] team0 (unregistering): Port device team_slave_1 removed [ 115.943290][ T4475] team0 (unregistering): Port device team_slave_0 removed [ 115.967139][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.990058][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.073519][ T4475] bond0 (unregistering): Released all slaves [ 116.149021][ T5017] device hsr_slave_0 entered promiscuous mode [ 116.156800][ T5017] device hsr_slave_1 entered promiscuous mode [ 116.318562][ T5149] loop4: detected capacity change from 0 to 1024 [ 116.450302][ T5149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.476890][ T26] audit: type=1800 audit(116.418:13): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.291" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 116.507641][ T5149] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.291: Allocating blocks 497-513 which overlap fs metadata [ 116.779893][ T5149] EXT4-fs (loop4): pa ffff8880742b7620: logic 0, phys. 113, len 25 [ 116.788113][ T5149] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 116.843063][ T5017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.860994][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 116.862730][ T5017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.960704][ T5017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.034959][ T5017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.055900][ T5170] device virt_wifi0 entered promiscuous mode [ 118.244912][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.327078][ T5017] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.419803][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.441285][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.471584][ T5195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 118.533320][ T5195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 118.563523][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.588081][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.602684][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.610129][ T4622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.656725][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.681065][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.713865][ T5212] loop2: detected capacity change from 0 to 1024 [ 118.736798][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.743989][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.841662][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.884629][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.893713][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.897995][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 118.905774][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.917166][ T5212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.928273][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.937071][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.989292][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.023913][ T26] audit: type=1800 audit(118.968:14): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 119.098484][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.112599][ T5212] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.307: Allocating blocks 497-513 which overlap fs metadata [ 119.135789][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.174029][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.245552][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.285308][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.347870][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.417301][ T5233] device syzkaller0 entered promiscuous mode [ 119.536714][ T5211] EXT4-fs (loop2): pa ffff888074080b60: logic 0, phys. 113, len 25 [ 119.544966][ T5211] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 119.820670][ T5247] netlink: 788 bytes leftover after parsing attributes in process `syz.1.316'. [ 119.891495][ T5254] block device autoloading is deprecated and will be removed. [ 119.983239][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.005436][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.039869][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.047116][ T5260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.318'. [ 120.071618][ T5256] device syzkaller0 entered promiscuous mode [ 120.228492][ T5266] loop3: detected capacity change from 0 to 1024 [ 120.422048][ T5266] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 120.555164][ T5266] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 120.577892][ T5275] 9pnet_virtio: no channels available for device syz [ 120.689106][ T5282] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 120.980142][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.000766][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.132991][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.198339][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.239585][ T5296] loop3: detected capacity change from 0 to 1024 [ 121.251252][ T5017] device veth0_vlan entered promiscuous mode [ 121.276792][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.323386][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.342613][ T5017] device veth1_vlan entered promiscuous mode [ 121.365562][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.414162][ T26] audit: type=1800 audit(121.358:15): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.324" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 121.435589][ T5296] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.324: Allocating blocks 497-513 which overlap fs metadata [ 121.596079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.624114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.640320][ T5313] EXT4-fs (loop3): pa ffff888074080c40: logic 0, phys. 113, len 25 [ 121.649566][ T5313] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 121.674343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.752962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.796587][ T5017] device veth0_macvtap entered promiscuous mode [ 121.851585][ T5305] device syzkaller0 entered promiscuous mode [ 121.904927][ T5017] device veth1_macvtap entered promiscuous mode [ 121.996523][ T5324] device syzkaller0 entered promiscuous mode [ 122.055990][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.126754][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.142361][ T5333] comedi comedi4: bad chanlist[0]=0x0000000a chan=10 range length=2 [ 122.175731][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.237649][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.255813][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.364165][ T5340] loop3: detected capacity change from 0 to 1024 [ 122.408213][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.436728][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.484436][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 122.494382][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.532557][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.545055][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.556483][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.570252][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.583430][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.597996][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.642464][ T5340] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 122.662761][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.703892][ T5017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.737552][ T5017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.789204][ T5017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.833675][ T5017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.851218][ T5340] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 123.179274][ T4678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.198698][ T4678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.246686][ T5361] loop3: detected capacity change from 0 to 1024 [ 123.288368][ T5364] device syzkaller1 entered promiscuous mode [ 123.309145][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.362811][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.539541][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.566596][ T5372] loop1: detected capacity change from 0 to 512 [ 123.574303][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.628210][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.670816][ T26] audit: type=1800 audit(123.618:16): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.342" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 123.681924][ T5372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.733366][ T5372] EXT4-fs (loop1): 1 truncate cleaned up [ 123.745771][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 124.287670][ T4197] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.557760][ T4197] usb 5-1: Using ep0 maxpacket: 8 [ 124.707715][ T4197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.733262][ T5404] loop2: detected capacity change from 0 to 1024 [ 124.756518][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.788854][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.827515][ T4197] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.875606][ T4197] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.920103][ T4197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.934193][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 125.086173][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 125.186468][ T5404] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 125.245373][ T5428] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 125.257724][ T4197] usb 5-1: GET_CAPABILITIES returned 0 [ 125.263850][ T4197] usbtmc 5-1:16.0: can't read capabilities [ 125.592307][ T4197] usb 5-1: USB disconnect, device number 3 [ 125.777716][ T4232] Bluetooth: hci0: command 0x0405 tx timeout [ 126.187783][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.198794][ T5450] loop3: detected capacity change from 0 to 512 [ 126.335122][ T5450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.423669][ T5450] EXT4-fs (loop3): 1 truncate cleaned up [ 126.463250][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 127.007807][ T5476] loop4: detected capacity change from 0 to 1024 [ 127.242541][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 127.283411][ T1108] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 127.292284][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.304118][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.314825][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.329244][ T1108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.338684][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.349508][ T1108] usb 3-1: config 0 descriptor?? [ 127.366108][ T5476] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 127.497692][ T5476] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 127.839961][ T1108] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 127.889705][ T1108] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 127.906585][ T5507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.982325][ T1108] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.047763][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.194787][ T4228] usb 3-1: USB disconnect, device number 2 [ 128.317705][ T5511] fido_id[5511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.407930][ T13] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.459236][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.647803][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.677111][ T13] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.745699][ T13] usb 5-1: Product: syz [ 128.764818][ T13] usb 5-1: Manufacturer: syz [ 128.791044][ T13] usb 5-1: SerialNumber: syz [ 128.835897][ T13] usb 5-1: config 0 descriptor?? [ 128.913411][ T13] usb 5-1: selecting invalid altsetting 0 [ 129.061079][ T5526] loop2: detected capacity change from 0 to 1024 [ 129.703018][ T5526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.827548][ T26] audit: type=1800 audit(129.768:17): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 129.847741][ T13] usb 5-1: USB disconnect, device number 4 [ 129.855901][ T5526] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.380: Allocating blocks 497-513 which overlap fs metadata [ 130.017035][ T5539] EXT4-fs (loop2): pa ffff888074080ee0: logic 0, phys. 113, len 25 [ 130.027645][ T5539] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 130.283069][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.381960][ T5544] loop3: detected capacity change from 0 to 1024 [ 130.534980][ T5544] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 130.698338][ T5544] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 130.827827][ T5553] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 131.089302][ T5563] device syzkaller0 entered promiscuous mode [ 133.073886][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081015][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204797][ T5595] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.214440][ T5595] overlayfs: failed to set xattr on upper [ 133.235268][ T5595] overlayfs: ...falling back to index=off,metacopy=off. [ 133.276206][ T5598] loop2: detected capacity change from 0 to 1024 [ 133.409844][ T5598] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 133.438544][ T5598] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 133.497024][ T5598] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 134.084236][ T26] audit: type=1326 audit(134.028:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.5.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5f32b799 code=0x0 [ 134.112601][ T5627] device syzkaller0 entered promiscuous mode [ 135.265141][ T5651] overlayfs: unrecognized mount option "verity=on" or missing value [ 135.836005][ T5675] option changes via remount are deprecated (pid=5673 comm=syz.4.409) [ 135.966395][ T5682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.422'. [ 136.117616][ T5687] loop4: detected capacity change from 0 to 512 [ 136.179442][ T5687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.108891][ T5687] EXT4-fs (loop4): 1 truncate cleaned up [ 137.125051][ T5687] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 137.210176][ T5697] device syzkaller0 entered promiscuous mode [ 137.335570][ T5699] loop5: detected capacity change from 0 to 164 [ 137.698833][ T5714] loop2: detected capacity change from 0 to 128 [ 138.835331][ T5724] loop1: detected capacity change from 0 to 512 [ 139.580541][ T5724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.660700][ T5724] EXT4-fs (loop1): 1 truncate cleaned up [ 139.695924][ T5729] device syzkaller0 entered promiscuous mode [ 139.713994][ T5724] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 140.637332][ T5771] loop3: detected capacity change from 0 to 16 [ 140.737032][ T5771] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.101078][ T5776] loop5: detected capacity change from 0 to 512 [ 141.179968][ T5781] loop3: detected capacity change from 0 to 512 [ 141.187084][ T5776] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.216423][ T5778] loop2: detected capacity change from 0 to 1024 [ 141.258104][ T5781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.258148][ T5776] EXT4-fs (loop5): 1 truncate cleaned up [ 141.285781][ T5776] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 141.313499][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.323692][ T5778] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 141.344961][ T5778] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 141.365709][ T5781] EXT4-fs (loop3): 1 truncate cleaned up [ 141.372982][ T5778] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 141.407550][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 141.435185][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.626622][ T5795] device syzkaller0 entered promiscuous mode [ 142.380195][ T5815] netlink: 'syz.5.458': attribute type 3 has an invalid length. [ 143.135643][ T5849] loop5: detected capacity change from 0 to 16 [ 143.178531][ T5851] loop4: detected capacity change from 0 to 512 [ 143.186205][ T5849] erofs: (device loop5): mounted with root inode @ nid 36. [ 143.275196][ T5849] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 143.320867][ T4202] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 143.390529][ T5851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.424745][ T5849] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 143.492370][ T26] audit: type=1800 audit(143.431:19): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.470" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 143.583260][ T5851] EXT4-fs (loop4): 1 truncate cleaned up [ 143.595505][ T5867] device syzkaller0 entered promiscuous mode [ 143.639039][ T5851] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 144.068040][ T5877] loop3: detected capacity change from 0 to 256 [ 144.407944][ T5877] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.502853][ T5877] FAT-fs (loop3): Filesystem has been set read-only [ 144.608629][ T5877] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.663482][ T5877] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.683015][ T26] audit: type=1800 audit(144.624:20): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.477" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 144.976972][ T5910] loop3: detected capacity change from 0 to 16 [ 145.023708][ T5910] erofs: (device loop3): mounted with root inode @ nid 36. [ 145.298930][ T5924] loop4: detected capacity change from 0 to 512 [ 145.333691][ T5923] loop3: detected capacity change from 0 to 2048 [ 145.409129][ T5923] loop3: p1 < > p4 [ 145.415651][ T5923] loop3: p4 size 722688 extends beyond EOD, truncated [ 145.425798][ T5924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.512816][ T5924] EXT4-fs (loop4): 1 truncate cleaned up [ 145.550935][ T5924] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 145.577636][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.764228][ T5933] loop5: detected capacity change from 0 to 128 [ 145.910996][ T5933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.494'. [ 146.084606][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 146.101324][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 147.782124][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.852201][ T5974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.417296][ T6004] 9pnet: Insufficient options for proto=fd [ 148.625147][ T6013] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.654834][ T6017] netlink: 'syz.4.518': attribute type 3 has an invalid length. [ 150.016248][ T6049] VFS: Lookup of 'cpuset.cpus' in fuse fuse would have caused loop [ 150.382034][ T6065] loop5: detected capacity change from 0 to 1024 [ 150.396714][ T6066] 9pnet: Insufficient options for proto=fd [ 150.539989][ T6065] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.575401][ T26] audit: type=1800 audit(150.512:21): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.530" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 150.606696][ T6065] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3885: comm syz.5.530: Allocating blocks 497-513 which overlap fs metadata [ 150.760218][ T6065] EXT4-fs (loop5): pa ffff888074080ee0: logic 0, phys. 113, len 25 [ 150.769153][ T6065] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 152.960834][ T6122] loop2: detected capacity change from 0 to 1024 [ 152.971554][ T6127] loop3: detected capacity change from 0 to 128 [ 153.011503][ T6126] loop4: detected capacity change from 0 to 1024 [ 153.030404][ T6127] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 153.079048][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 153.173496][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.195148][ T6122] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 153.249215][ T26] audit: type=1800 audit(153.199:22): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.548" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 153.345187][ T6143] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.548: Allocating blocks 497-513 which overlap fs metadata [ 153.366673][ T6137] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 153.583168][ T6147] EXT4-fs (loop4): pa ffff888074080d20: logic 0, phys. 113, len 25 [ 153.591622][ T6147] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 153.629682][ T6146] ipt_CLUSTERIP: Please specify destination IP [ 153.769391][ T6152] loop2: detected capacity change from 0 to 16 [ 153.907044][ T6152] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature f8, please upgrade kernel version [ 154.921891][ T6154] loop4: detected capacity change from 0 to 8192 [ 155.168009][ T6175] overlayfs: unrecognized mount option "verity=on" or missing value [ 156.192616][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 156.293254][ T6185] loop4: detected capacity change from 0 to 1024 [ 156.455651][ T6185] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.499413][ T26] audit: type=1800 audit(156.448:23): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.563" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 156.529355][ T6185] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.563: Allocating blocks 497-513 which overlap fs metadata [ 156.549243][ T6197] loop3: detected capacity change from 0 to 1024 [ 156.632674][ T6197] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 156.679384][ T6197] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 156.823184][ T6204] EXT4-fs (loop4): pa ffff888074080e00: logic 0, phys. 113, len 25 [ 156.831738][ T6204] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 156.850435][ T6197] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 157.241438][ T6212] loop3: detected capacity change from 0 to 512 [ 157.904766][ T6231] loop1: detected capacity change from 0 to 128 [ 158.196491][ T6236] loop1: detected capacity change from 0 to 1024 [ 158.268265][ T6236] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.360619][ T26] audit: type=1800 audit(158.302:24): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.581" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 158.403241][ T6236] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3885: comm syz.1.581: Allocating blocks 497-513 which overlap fs metadata [ 158.467734][ T6240] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.481948][ T6240] overlayfs: failed to set xattr on upper [ 158.499980][ T6240] overlayfs: ...falling back to index=off,metacopy=off. [ 158.617066][ T6244] loop3: detected capacity change from 0 to 1024 [ 158.650785][ T6245] EXT4-fs (loop1): pa ffff8880742b70e0: logic 0, phys. 113, len 25 [ 158.659651][ T6245] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 158.861477][ T6253] ipt_CLUSTERIP: Please specify destination IP [ 158.924955][ T6244] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 159.062136][ T6244] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 159.160607][ T6244] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 160.782645][ T6294] loop4: detected capacity change from 0 to 1024 [ 160.869752][ T6296] loop3: detected capacity change from 0 to 512 [ 160.920536][ T6299] netlink: 'syz.1.601': attribute type 12 has an invalid length. [ 160.942088][ T6294] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.998031][ T6296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.028842][ T26] audit: type=1800 audit(160.970:25): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.599" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 161.129770][ T6296] EXT4-fs (loop3): 1 truncate cleaned up [ 161.135672][ T6296] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 161.136928][ T6294] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.599: Allocating blocks 497-513 which overlap fs metadata [ 161.163072][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.386961][ T6294] EXT4-fs (loop4): pa ffff8880740807e0: logic 48, phys. 177, len 21 [ 161.395443][ T6294] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 161.522241][ T6306] loop3: detected capacity change from 0 to 1024 [ 161.639571][ T6306] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 161.778691][ T6306] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 161.867420][ T6306] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 161.944450][ T6316] loop4: detected capacity change from 0 to 16 [ 162.075875][ T6316] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature f8, please upgrade kernel version [ 162.505063][ T6331] loop2: detected capacity change from 0 to 7 [ 162.562833][ T6333] loop5: detected capacity change from 0 to 512 [ 162.608869][ T6331] loop2: [ 162.623036][ T6331] loop2: partition table partially beyond EOD, truncated [ 162.692073][ T6333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.775996][ T6333] EXT4-fs (loop5): 1 truncate cleaned up [ 162.898791][ T6333] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 163.014739][ T6342] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 163.166039][ T6344] loop4: detected capacity change from 0 to 1024 [ 163.327903][ T6344] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 163.452054][ T6344] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 163.509666][ T6344] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 163.715750][ T6355] device syzkaller0 entered promiscuous mode [ 163.738451][ T6357] ------------[ cut here ]------------ [ 163.744282][ T6357] trace type BPF program uses run-time allocation [ 163.792404][ T6357] WARNING: CPU: 1 PID: 6357 at kernel/bpf/verifier.c:11746 check_map_prog_compatibility+0x6cf/0x870 [ 163.826854][ T6357] Modules linked in: [ 163.839277][ T6357] CPU: 1 PID: 6357 Comm: syz.5.622 Not tainted syzkaller #0 [ 163.900986][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.939360][ T6357] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 163.957157][ T6357] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 82 d0 ec 0b 01 48 c7 c7 80 3e 31 8a e8 01 0f 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 164.002292][ T6357] RSP: 0018:ffffc9000316f450 EFLAGS: 00010246 [ 164.022365][ T6357] RAX: 2f9f0c344aed1a00 RBX: 0000000000000001 RCX: 0000000000080000 [ 164.042360][ T6357] RDX: ffffc90016010000 RSI: 0000000000002ae3 RDI: 0000000000002ae4 [ 164.083495][ T6357] RBP: ffff888060dd8000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 164.107535][ T6357] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffc9000113e038 [ 164.142015][ T6357] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000227c07 [ 164.187575][ T6357] FS: 00007f8c5d5856c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 164.219716][ T6357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.251196][ T6357] CR2: 00007ffd8bd8abf0 CR3: 00000000520d0000 CR4: 00000000003506f0 [ 164.282960][ T6357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.308272][ T6357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.335476][ T6357] Call Trace: [ 164.347404][ T6357] [ 164.356761][ T6357] resolve_pseudo_ldimm64+0x681/0x1040 [ 164.371567][ T6357] ? check_attach_btf_id+0xe70/0xe70 [ 164.386335][ T6357] ? __mark_reg_known+0x1a0/0x1a0 [ 164.401317][ T6357] bpf_check+0x4e00/0xf270 [ 164.414001][ T6357] ? mark_lock+0x94/0x320 [ 164.428909][ T6357] ? __lock_acquire+0x13bc/0x7d10 [ 164.443540][ T6357] ? bpf_get_btf_vmlinux+0x10/0x10 [ 164.458391][ T6357] ? mark_lock+0x94/0x320 [ 164.472189][ T6357] ? verify_lock_unused+0x140/0x140 [ 164.486897][ T6357] ? __mutex_trylock_common+0x155/0x260 [ 164.504213][ T6357] ? verify_lock_unused+0x140/0x140 [ 164.521231][ T6357] ? rcu_lock_release+0x5/0x20 [ 164.534415][ T6357] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 164.551298][ T6357] ? lock_chain_count+0x20/0x20 [ 164.563320][ T6357] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 164.579061][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 164.593108][ T6357] ? ktime_get_with_offset+0xff/0x320 [ 164.606311][ T6357] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 164.623580][ T6357] ? ktime_get_real_ts64+0x440/0x440 [ 164.646887][ T6357] ? pcpu_alloc+0x1121/0x1770 [ 164.666956][ T6357] ? __might_fault+0xb3/0x110 [ 164.687715][ T6357] ? memset+0x1e/0x40 [ 164.697852][ T6357] ? bpf_obj_name_cpy+0x190/0x1d0 [ 164.710613][ T6357] bpf_prog_load+0xfec/0x1510 [ 164.722479][ T6357] ? map_freeze+0x350/0x350 [ 164.734931][ T6357] ? __might_fault+0xb7/0x110 [ 164.754491][ T6357] ? __might_fault+0xb3/0x110 [ 164.765322][ T6357] ? bpf_lsm_bpf+0x5/0x10 [ 164.776903][ T6357] ? security_bpf+0x7a/0xa0 [ 164.784898][ T6357] __sys_bpf+0x532/0x6f0 [ 164.797667][ T6357] ? bpf_link_show_fdinfo+0x380/0x380 [ 164.809652][ T6357] ? vtime_user_exit+0x2c8/0x3e0 [ 164.820573][ T6357] __x64_sys_bpf+0x78/0x90 [ 164.831130][ T6357] do_syscall_64+0x4c/0xa0 [ 164.841522][ T6357] ? clear_bhb_loop+0x30/0x80 [ 164.849804][ T6357] ? clear_bhb_loop+0x30/0x80 [ 164.855318][ T6357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.877619][ T6357] RIP: 0033:0x7f8c5f32b799 [ 164.882132][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.915484][ T6357] RSP: 002b:00007f8c5d585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.924598][ T6357] RAX: ffffffffffffffda RBX: 00007f8c5f5a4fa0 RCX: 00007f8c5f32b799 [ 164.940594][ T6357] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 164.952244][ T6357] RBP: 00007f8c5f3c1c99 R08: 0000000000000000 R09: 0000000000000000 [ 164.965768][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.977294][ T6357] R13: 00007f8c5f5a5038 R14: 00007f8c5f5a4fa0 R15: 00007fff012ae4d8 [ 164.992384][ T6357] [ 164.995625][ T6357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.003499][ T6357] CPU: 0 PID: 6357 Comm: syz.5.622 Not tainted syzkaller #0 [ 165.011032][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.022047][ T6357] Call Trace: [ 165.025938][ T6357] [ 165.029009][ T6357] dump_stack_lvl+0x188/0x250 [ 165.033941][ T6357] ? show_regs_print_info+0x20/0x20 [ 165.039725][ T6357] ? load_image+0x400/0x400 [ 165.044503][ T6357] panic+0x2e5/0x810 [ 165.048556][ T6357] ? bpf_jit_dump+0xd0/0xd0 [ 165.053661][ T6357] ? check_map_prog_compatibility+0x6cf/0x870 [ 165.059878][ T6357] __warn+0x248/0x2b0 [ 165.064455][ T6357] ? check_map_prog_compatibility+0x6cf/0x870 [ 165.071412][ T6357] report_bug+0x1b7/0x2e0 [ 165.075899][ T6357] handle_bug+0x3a/0x70 [ 165.080619][ T6357] exc_invalid_op+0x16/0x40 [ 165.085712][ T6357] asm_exc_invalid_op+0x16/0x20 [ 165.090945][ T6357] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 165.098450][ T6357] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 82 d0 ec 0b 01 48 c7 c7 80 3e 31 8a e8 01 0f 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 165.118740][ T6357] RSP: 0018:ffffc9000316f450 EFLAGS: 00010246 [ 165.125276][ T6357] RAX: 2f9f0c344aed1a00 RBX: 0000000000000001 RCX: 0000000000080000 [ 165.133753][ T6357] RDX: ffffc90016010000 RSI: 0000000000002ae3 RDI: 0000000000002ae4 [ 165.142595][ T6357] RBP: ffff888060dd8000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 165.152426][ T6357] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffc9000113e038 [ 165.161680][ T6357] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000227c07 [ 165.171927][ T6357] resolve_pseudo_ldimm64+0x681/0x1040 [ 165.178042][ T6357] ? check_attach_btf_id+0xe70/0xe70 [ 165.183699][ T6357] ? __mark_reg_known+0x1a0/0x1a0 [ 165.189157][ T6357] bpf_check+0x4e00/0xf270 [ 165.193744][ T6357] ? mark_lock+0x94/0x320 [ 165.198566][ T6357] ? __lock_acquire+0x13bc/0x7d10 [ 165.203899][ T6357] ? bpf_get_btf_vmlinux+0x10/0x10 [ 165.209409][ T6357] ? mark_lock+0x94/0x320 [ 165.214142][ T6357] ? verify_lock_unused+0x140/0x140 [ 165.219917][ T6357] ? __mutex_trylock_common+0x155/0x260 [ 165.226450][ T6357] ? verify_lock_unused+0x140/0x140 [ 165.231949][ T6357] ? rcu_lock_release+0x5/0x20 [ 165.238007][ T6357] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 165.244431][ T6357] ? lock_chain_count+0x20/0x20 [ 165.249448][ T6357] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 165.256220][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 165.262175][ T6357] ? ktime_get_with_offset+0xff/0x320 [ 165.268013][ T6357] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 165.274962][ T6357] ? ktime_get_real_ts64+0x440/0x440 [ 165.280787][ T6357] ? pcpu_alloc+0x1121/0x1770 [ 165.285914][ T6357] ? __might_fault+0xb3/0x110 [ 165.290963][ T6357] ? memset+0x1e/0x40 [ 165.295362][ T6357] ? bpf_obj_name_cpy+0x190/0x1d0 [ 165.300704][ T6357] bpf_prog_load+0xfec/0x1510 [ 165.305624][ T6357] ? map_freeze+0x350/0x350 [ 165.310654][ T6357] ? __might_fault+0xb7/0x110 [ 165.316007][ T6357] ? __might_fault+0xb3/0x110 [ 165.321089][ T6357] ? bpf_lsm_bpf+0x5/0x10 [ 165.325492][ T6357] ? security_bpf+0x7a/0xa0 [ 165.330432][ T6357] __sys_bpf+0x532/0x6f0 [ 165.335101][ T6357] ? bpf_link_show_fdinfo+0x380/0x380 [ 165.341592][ T6357] ? vtime_user_exit+0x2c8/0x3e0 [ 165.346841][ T6357] __x64_sys_bpf+0x78/0x90 [ 165.351799][ T6357] do_syscall_64+0x4c/0xa0 [ 165.356367][ T6357] ? clear_bhb_loop+0x30/0x80 [ 165.362448][ T6357] ? clear_bhb_loop+0x30/0x80 [ 165.367753][ T6357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.374335][ T6357] RIP: 0033:0x7f8c5f32b799 [ 165.378944][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.400247][ T6357] RSP: 002b:00007f8c5d585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.409385][ T6357] RAX: ffffffffffffffda RBX: 00007f8c5f5a4fa0 RCX: 00007f8c5f32b799 [ 165.419250][ T6357] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 165.428293][ T6357] RBP: 00007f8c5f3c1c99 R08: 0000000000000000 R09: 0000000000000000 [ 165.436899][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.445013][ T6357] R13: 00007f8c5f5a5038 R14: 00007f8c5f5a4fa0 R15: 00007fff012ae4d8 [ 165.453308][ T6357] [ 165.456808][ T6357] Kernel Offset: disabled [ 165.461541][ T6357] Rebooting in 86400 seconds..