last executing test programs: 2m30.494706228s ago: executing program 4 (id=56): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 2m26.704459593s ago: executing program 4 (id=74): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=0x0], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x40) 2m24.925363858s ago: executing program 4 (id=80): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x3, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 2m22.210266191s ago: executing program 4 (id=86): r0 = socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000680)={0x34, 0xfffffff9, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc356bf9b09d4372dada82178", 0xd}], 0x1, 0x2) r6 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r6, 0x0, 0x3, 0x0, 0xffa4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x17, &(0x7f00000004c0), &(0x7f0000000440)=0x1) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x3a1c02, 0x152) 2m20.576481842s ago: executing program 4 (id=88): r0 = socket(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x2c}}, 0x20044010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100019b, &(0x7f0000000340), 0x80, 0x54f, &(0x7f0000000480)="$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") 2m16.486038823s ago: executing program 4 (id=99): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "015332", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e20, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, "7aba7a", 0xc, "ea06fd"}}}}}}}, 0x0) 1m59.954093137s ago: executing program 32 (id=99): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "015332", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e20, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, "7aba7a", 0xc, "ea06fd"}}}}}}}, 0x0) 8.539755614s ago: executing program 3 (id=596): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000024c0)=ANY=[], 0x1, 0x2cf, &(0x7f0000002680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 7.403996625s ago: executing program 5 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010002000000000000000700000a98000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3100000000080005400000002c5c000980580002800c00018008000140000000030c00018008000140000000080c00"], 0xc0}}, 0x0) 7.401815775s ago: executing program 3 (id=599): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xb58}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) unshare(0x20000400) 7.204790999s ago: executing program 5 (id=602): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x2, 0x7, 0x7, 0x2}}, 0x7) 7.104146751s ago: executing program 5 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) 4.832957415s ago: executing program 5 (id=609): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="33754c8daef67d952fabb896fc89ccd6a0b6f32948d304a77ee7c37cb571b13b8e8061b7ceae32947daafdb667a11692b1f21aa061eb32e114366616011072b36362c5f649f02dfacbb9deb0097ace3bd16e2ccd522d830dd3dbea3becb54d96b48eb46cb4342fddaaf69045e57dacb8a85b1ab079573ad9cd26411bc818d7e9201e6cd440c73a911ed0c555dac4fa15f1623a37a4024765e39aa41686193aa996d13021da6d", @ANYRESDEC, @ANYRESDEC=0x0], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.775409464s ago: executing program 1 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x2, 0x8, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x40002) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c031500000000ff840000000000000002125ce882cbf490d908f1523f", 0x28}, {&(0x7f0000000640)="a652c4145f", 0x5}], 0x2}, 0x4005) 3.552532741s ago: executing program 1 (id=614): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a62674"}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r4 = socket$inet(0x2, 0xa, 0x3) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @remote}, 0x108, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x401, 0x6, 0xa}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r3, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r7, @void, @void, @void, r6}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r8, r1, 0x5, 0x2000, 0x0, @value, @void, @void, @void, r6}, 0x20) 3.43746969s ago: executing program 5 (id=615): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x48, &(0x7f0000001480)={[{@nodiscard}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100070000102000"], 0x24, 0x1) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2.720993148s ago: executing program 1 (id=619): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x2, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r4}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r3, r5, 0x37, 0x2000, 0x0, @value, @void, @void, @void, r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, r2, 0x24, 0x2000, r2, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f, 0xffffffffffffffff, @void, @void, @value, @void, r7}, 0x20) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000099940000a4403000f0ffffff183a0000030000000000000000000000d50850000800000005881000ff0300009500010000000000f7b9f01b6d8c873a01fe71390e0e8f0683ef0e5646ea00a1a0cd4a582e467362d5d16da9e4a9032cee1bc4d319b93514aaba6b869a7bca1d78e9a80b1c85ceb74dcba028ddd5efc7fb489b3cdff18729ffe41ef59a0fb414710d24fcd74898c222297dce173aeb844e524e6939ce2cfaa0e4ac0498ceb6918f56c8e72b0def8681026bcda4ffa52421dd5300000000c46cca3e2bde5d93975037bbc9b31889aa2f0e14e72f19"], &(0x7f0000000200)='syzkaller\x00', 0xf0, 0x90, &(0x7f0000000300)=""/144, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0xffffffff, 0xd}, 0x10, 0x268e, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x5, 0xf, 0x2}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, r0, 0x22, 0x0, r1, @void, @value=r9, @void, @void, r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 2.331873287s ago: executing program 3 (id=621): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) 2.169481187s ago: executing program 0 (id=623): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a000007000000090001007379ad550000000044000000090a010400000400000000000700000008002a40000000000900020073797a30000000000900010073797a3000000000080005400000000d07000d4063efee00140000001000010000000000000000000584000a00"/140], 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.150948734s ago: executing program 1 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x2, 0x8, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x40002) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c031500000000ff840000000000000002125ce882cbf490d908f1523f", 0x28}, {&(0x7f0000000640)="a652c4145f", 0x5}], 0x2}, 0x4005) 2.149990414s ago: executing program 2 (id=625): syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @remote, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 2.024748841s ago: executing program 2 (id=626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010022bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="04002d8024002d8005000100040000de070002"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 1.949082267s ago: executing program 3 (id=627): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000880), &(0x7f00000000c0)=0x4) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @mcast2, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x18, 0x200, 0xfffffffe, 0x100, {{@in6=@private2, @in6=@remote, 0x4e23, 0x71c, 0x4e23, 0x45, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x401f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x20080, 0x3500, 0x2, 0x3, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x16, 0x3, 'sh\x00', 0xb04f8d1a00b69154, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.834955476s ago: executing program 2 (id=628): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2c}, {{0x0, 0x0, 0x0}, 0xfffffff5}], 0x2, 0x2, 0x0) 1.834439086s ago: executing program 0 (id=629): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48}, 0x8000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x1}]}, @typedef={0x10}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x0]}}, &(0x7f00000002c0)=""/209, 0x3e, 0xd1, 0x1, 0x8000}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r7, &(0x7f0000000040)={0x11, 0x1, r8, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r8, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x7f, 0x6, 0x0, r6, 0x82b, '\x00', r8, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x3}, 0x50) socket$inet6(0xa, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x9, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.717125785s ago: executing program 2 (id=630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000004a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x148c3edafdf2c235}], 0x1, 0x4004047) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/143, 0x8f}], 0x1}, 0x100) 1.716395104s ago: executing program 1 (id=631): r0 = socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000680)={0x34, 0xfffffff9, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0xffa4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r6, 0x0, 0x17, &(0x7f00000004c0), &(0x7f0000000440)=0x1) splice(r4, 0x0, r5, 0x0, 0x8000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = openat$incfs(0xffffffffffffffff, 0x0, 0x3a1c02, 0x152) ppoll(&(0x7f0000000000)=[{r7, 0x842e}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 1.334403375s ago: executing program 3 (id=632): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xb58}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) unshare(0x20000400) 1.125565546s ago: executing program 2 (id=633): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000800) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES16=r0], 0x4) 924.69174ms ago: executing program 1 (id=634): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) readv(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)=""/109, 0x6d}, {0x0}], 0x3) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f107843704b6", 0x9}], 0x1}, 0x4048081) 858.713928ms ago: executing program 0 (id=635): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x9, 0xfffffffffffffffc, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002b80)=ANY=[], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-ce)\x00'}, 0x58) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) sendmsg$inet6(r5, 0x0, 0x4040060) accept$inet(r3, 0x0, &(0x7f0000000680)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020600) unshare(0x2a020400) socket(0x2a, 0x2, 0x0) 673.445304ms ago: executing program 2 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 636.835037ms ago: executing program 0 (id=637): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 174.767213ms ago: executing program 0 (id=638): syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @remote, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 57.080941ms ago: executing program 5 (id=639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES16=0x0], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f00000002c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000007ec5dad10a000000000000", @ANYRESDEC, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r3, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001311645acfd60d6f000000d526ca60125da05bebcb6100438b29285b94a43c185264b8b805003f425e2a23bf1b21088403ecd109f04de03d0ed58512c21a702ee1ebb50baf46bbceeba70513fa91e25a7b617c0128f91053ec81916c9e09c248069e76c94cb80fc9a52e49bbab4fa6a068a125c9785093d06f2745cb763c5eca370c7a224da4a2e57342850000b16c560f760400000000000000e89aa465fc1f9e434f1666e02a34ce94ce626cd8aa0cf79cb9097779ddcd6e5c84bca4c85492c27c465524859a80ce1728bc988e2b57"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) r8 = openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000380)='syz1\x00', 0x1ff) 56.287051ms ago: executing program 0 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) r5 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) alarm(0x1000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd22, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0xc03, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 0s ago: executing program 3 (id=641): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) unshare(0x2c020400) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000800) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES64=0x0], 0x4) kernel console output (not intermixed with test programs): [ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.576712][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.602240][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.609233][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.636021][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.720265][ T4187] device hsr_slave_0 entered promiscuous mode [ 72.727480][ T4187] device hsr_slave_1 entered promiscuous mode [ 72.735077][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.743626][ T4187] Cannot create hsr debugfs directory [ 72.752515][ T4188] device hsr_slave_0 entered promiscuous mode [ 72.759380][ T4188] device hsr_slave_1 entered promiscuous mode [ 72.766443][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.774509][ T4188] Cannot create hsr debugfs directory [ 72.799927][ T4197] device hsr_slave_0 entered promiscuous mode [ 72.807192][ T4197] device hsr_slave_1 entered promiscuous mode [ 72.814274][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.822171][ T4197] Cannot create hsr debugfs directory [ 72.840814][ T4186] device hsr_slave_0 entered promiscuous mode [ 72.848092][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 72.851781][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 72.858934][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 72.862390][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 72.868948][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 72.879911][ T4186] device hsr_slave_1 entered promiscuous mode [ 72.887101][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.895041][ T4186] Cannot create hsr debugfs directory [ 73.226184][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.241158][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.259311][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.269332][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.306407][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.337500][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.347481][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.363932][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.448262][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.477587][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.506248][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.516981][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.541243][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.578711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.594582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.605833][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.625262][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.637406][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.654847][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.666304][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.678997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.688214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.699080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.708553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.719419][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.726834][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.737146][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.750009][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.767583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.776160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.786242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.795470][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.802633][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.810951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.855215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.865661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.875088][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.882279][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.891151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.900567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.910303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.920003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.928742][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.935845][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.943987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.953804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.963303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.972841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.985785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.994410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.005041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.015013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.040632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.050760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.076975][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.095544][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.105477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.115104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.125463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.135178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.144299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.153151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.162349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.170871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.180561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.190244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.207722][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.219387][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.228810][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.243280][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.255870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.263873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.289717][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.299448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.309081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.317967][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.325117][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.338086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.352158][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.412733][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.444324][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.464707][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.471882][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.484411][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.494926][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.516629][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.544549][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.555901][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.592735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.604628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.614444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.623736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.640091][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.663991][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.683961][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.696399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.706553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.756709][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.767063][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.776195][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.785788][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.794508][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.803657][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.817022][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.828280][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.853957][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.878232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.887900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.899229][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.906448][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.922534][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 74.928950][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 74.942770][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 74.948860][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 74.956567][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 74.982101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.990488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.000172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.011224][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.018382][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.029012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.038238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.047576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.078922][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.107437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.116783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.126818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.148447][ T4185] device veth0_vlan entered promiscuous mode [ 75.156421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.165694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.175715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.184550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.195531][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.214916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.224719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.234482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.244865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.256007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.265759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.274804][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.281948][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.289807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.298721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.309116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.317651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.326789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.335461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.348721][ T4187] device veth0_vlan entered promiscuous mode [ 75.377747][ T4185] device veth1_vlan entered promiscuous mode [ 75.390257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.400388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.410084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.425246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.434333][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.441489][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.450419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.459270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.470146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.479175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.509870][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.521847][ T4187] device veth1_vlan entered promiscuous mode [ 75.529151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.539300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.548630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.558187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.567917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.579238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.588747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.613658][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.622545][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.631047][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.641066][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.657107][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.668500][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.695138][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.706964][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.719383][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.736966][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.746599][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.795834][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.808599][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.818478][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.827903][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.837664][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.847458][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.865901][ T4197] device veth0_vlan entered promiscuous mode [ 75.878259][ T4185] device veth0_macvtap entered promiscuous mode [ 75.918313][ T4197] device veth1_vlan entered promiscuous mode [ 75.946324][ T4185] device veth1_macvtap entered promiscuous mode [ 75.957625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.975135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.990659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.999611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.015862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.039625][ T4187] device veth0_macvtap entered promiscuous mode [ 76.069613][ T4187] device veth1_macvtap entered promiscuous mode [ 76.080020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.088698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.104824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.113615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.121182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.136641][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.165147][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.177227][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.193126][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.218659][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.231093][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.239607][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.249146][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.260063][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.275501][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.294712][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.304143][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.318655][ T4197] device veth0_macvtap entered promiscuous mode [ 76.328767][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.339627][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.351169][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.364948][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.392269][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.401050][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.415843][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.430715][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.440620][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.459267][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.469062][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.478456][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.494489][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.504637][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.514112][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.523758][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.559589][ T4197] device veth1_macvtap entered promiscuous mode [ 76.586039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.599662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.631853][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.696890][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.708631][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.730343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.740854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.777917][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.789899][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.800001][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.810803][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.825678][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.838546][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.850984][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.862504][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.873480][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.886443][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.900257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.910161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.919438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.929025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.961019][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.964514][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.979003][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.987254][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.996733][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.006302][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 77.012838][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 77.016046][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.019098][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 77.041248][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 77.048282][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 77.054382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.062749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.073238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.083261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.091246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.111247][ T4188] device veth0_vlan entered promiscuous mode [ 77.139109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.148235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.158609][ T4186] device veth0_vlan entered promiscuous mode [ 77.200791][ T4188] device veth1_vlan entered promiscuous mode [ 77.210281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.219541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.228238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.251997][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.259868][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.280936][ T4186] device veth1_vlan entered promiscuous mode [ 77.305451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.326611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.335917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.364139][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.373095][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.417497][ T4186] device veth0_macvtap entered promiscuous mode [ 77.429000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.449006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.458936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.475428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.488805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.499367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.513678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.530981][ T4188] device veth0_macvtap entered promiscuous mode [ 77.575058][ T4186] device veth1_macvtap entered promiscuous mode [ 77.595144][ T4188] device veth1_macvtap entered promiscuous mode [ 77.617835][ T4269] loop0: detected capacity change from 0 to 512 [ 77.622326][ T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.643199][ T4269] ======================================================= [ 77.643199][ T4269] WARNING: The mand mount option has been deprecated and [ 77.643199][ T4269] and is ignored by this kernel. Remove the mand [ 77.643199][ T4269] option from the mount to silence this warning. [ 77.643199][ T4269] ======================================================= [ 77.662948][ T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.705227][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.724223][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.738830][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.750128][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.761856][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.773799][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.791342][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.808052][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.818867][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.828941][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.839624][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.853633][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.864324][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.874606][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.885556][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.900027][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.921269][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.930749][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.930757][ T4269] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.948429][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.963352][ T4269] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.964345][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.985649][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.993369][ T4269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 77.998850][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.005026][ T4269] System zones: 1-12 [ 78.017103][ T4269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.026016][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.038424][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.049259][ T4269] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33619980: comm syz.0.1: invalid block [ 78.050336][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.074668][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.081731][ T4269] EXT4-fs (loop0): Remounting filesystem read-only [ 78.084835][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.093102][ T4269] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 2 (level 2) [ 78.117598][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.120889][ T4269] EXT4-fs (loop0): Remounting filesystem read-only [ 78.136093][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.145683][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.148895][ T4269] EXT4-fs (loop0): 1 truncate cleaned up [ 78.159307][ T4269] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 78.178500][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.202404][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.210617][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.242435][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.266794][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.275984][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.285527][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.295223][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.317601][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.326338][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.340937][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.349869][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.367564][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.380679][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.390673][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.401793][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.414107][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.424993][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.436512][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.453798][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463488][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473310][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.482288][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.520633][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.547379][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.573900][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.664607][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.896385][ T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.923628][ T4287] loop1: detected capacity change from 0 to 1024 [ 78.946774][ T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.978809][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.988746][ T4287] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.024218][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.040850][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.056870][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.059672][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.081902][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 79.088699][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 79.109048][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 79.114147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.139069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.146443][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 79.161343][ T4293] loop3: detected capacity change from 0 to 128 [ 79.163085][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 79.207068][ T4287] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,debug_want_extra_isize=0x0000000000000080,init_itable=0x00000000000000ff,resuid=0x0000000000000000,grpid,nojournal_checksum,noauto_da_alloc,bsddf,dioread_nolock,,errors=continue. Quota mode: none. [ 79.238790][ T4293] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.260965][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.274305][ T4293] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.298576][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.313111][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.443933][ T307] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.810493][ T4302] loop0: detected capacity change from 0 to 40427 [ 81.381368][ C0] sched: RT throttling activated [ 81.469315][ T4302] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 81.476921][ T4302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.500121][ T4302] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x216 [ 81.521812][ T4302] F2FS-fs (loop0): invalid crc value [ 81.653408][ T4302] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 81.929385][ T4302] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.937035][ T4302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.501916][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.321919][ T4331] input: syz1 as /devices/virtual/input/input5 [ 84.416320][ T4335] loop0: detected capacity change from 0 to 1024 [ 84.484601][ T4335] EXT4-fs (loop0): Ignoring removed bh option [ 84.513386][ T4335] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.574734][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 84.611273][ T4335] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 84.747468][ T4315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.788794][ T4315] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.835040][ T4315] usb 5-1: config 1 has no interface number 0 [ 84.887678][ T4343] loop3: detected capacity change from 0 to 512 [ 85.055948][ T4315] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 85.087663][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.148986][ T4315] usb 5-1: Product: syz [ 85.154755][ T4315] usb 5-1: Manufacturer: syz [ 85.159570][ T4315] usb 5-1: SerialNumber: syz [ 85.172983][ T4343] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.202943][ T4343] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.938828][ T4350] loop2: detected capacity change from 0 to 512 [ 86.060389][ T4350] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 86.117924][ T4350] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.150283][ T4343] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.23: dir seems corrupt? Run e2fsck -D. [ 86.164828][ T4315] usb 5-1: can't set config #1, error -71 [ 86.175959][ T4189] udevd[4189]: incorrect ext4dev checksum on /dev/loop3 [ 86.224218][ T4315] usb 5-1: USB disconnect, device number 2 [ 86.280675][ T4343] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.23: Directory index failed checksum [ 86.557516][ T4187] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 86.599964][ T4339] loop1: detected capacity change from 0 to 40427 [ 86.709443][ T4339] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.726074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 86.735168][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 86.744275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.753298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.762345][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.771761][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.780763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.790006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.799053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 86.808231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 86.843727][ T4187] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 86.916584][ T4339] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.037185][ T4187] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 87.205509][ T4339] F2FS-fs (loop1): invalid crc value [ 87.274688][ T4187] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 87.412645][ T4339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.561880][ T4187] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 87.827796][ T4187] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #4: comm syz-executor: mark_inode_dirty error [ 87.849868][ T4375] loop4: detected capacity change from 0 to 4096 [ 88.033337][ T4377] device syzkaller0 entered promiscuous mode [ 88.049824][ T4375] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 88.436576][ T4375] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 88.517999][ T4385] loop3: detected capacity change from 0 to 1024 [ 88.608736][ T4385] EXT4-fs (loop3): Ignoring removed orlov option [ 88.667260][ T4385] EXT4-fs (loop3): Ignoring removed nobh option [ 88.751490][ T4385] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 89.682076][ T4402] loop3: detected capacity change from 0 to 4096 [ 89.855678][ T4402] EXT4-fs (loop3): inline encryption not supported [ 90.074492][ T4402] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.113095][ T4402] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 90.133101][ T4402] System zones: 0-5 [ 90.170862][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 90.520281][ T4402] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 90.536092][ T4418] loop1: detected capacity change from 0 to 512 [ 90.577226][ T26] audit: type=1800 audit(1773273475.765:2): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.39" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 90.659980][ T4425] loop2: detected capacity change from 0 to 128 [ 90.756665][ T4418] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 90.771458][ T4418] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.899742][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.042338][ T4418] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.000635][ T4442] device syzkaller0 entered promiscuous mode [ 93.102373][ T1108] cfg80211: failed to load regulatory.db [ 93.142005][ T26] audit: type=1326 audit(1773273477.925:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.410925][ T4466] loop0: detected capacity change from 0 to 256 [ 93.452478][ T4468] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.54'. [ 93.491439][ T26] audit: type=1326 audit(1773273477.925:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.581420][ T26] audit: type=1326 audit(1773273477.935:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.603465][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.616326][ T4472] loop2: detected capacity change from 0 to 512 [ 93.663819][ T26] audit: type=1326 audit(1773273477.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.685768][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.708017][ T4466] FAT-fs (loop0): Directory bread(block 64) failed [ 93.715059][ T4472] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.763724][ T4466] FAT-fs (loop0): Directory bread(block 65) failed [ 93.799125][ T4466] FAT-fs (loop0): Directory bread(block 66) failed [ 93.802499][ T26] audit: type=1326 audit(1773273477.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.844943][ T4466] FAT-fs (loop0): Directory bread(block 67) failed [ 93.880459][ T4466] FAT-fs (loop0): Directory bread(block 68) failed [ 93.911838][ T26] audit: type=1326 audit(1773273477.945:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 93.933791][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.952594][ T4466] FAT-fs (loop0): Directory bread(block 69) failed [ 93.979670][ T4466] FAT-fs (loop0): Directory bread(block 70) failed [ 94.005530][ T4466] FAT-fs (loop0): Directory bread(block 71) failed [ 94.022143][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.043716][ T4466] FAT-fs (loop0): Directory bread(block 72) failed [ 94.078364][ T26] audit: type=1326 audit(1773273477.945:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 94.082033][ T4466] FAT-fs (loop0): Directory bread(block 73) failed [ 94.100380][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.176571][ T26] audit: type=1326 audit(1773273477.945:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 94.198754][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.219505][ T26] audit: type=1326 audit(1773273477.945:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 94.271581][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 94.391591][ T1325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 94.416318][ T1325] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.236728][ T4487] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.481830][ T1325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.490948][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.539093][ T1325] usb 5-1: SerialNumber: syz [ 95.586873][ T4475] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.717921][ T1111] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.791030][ T4500] device syzkaller0 entered promiscuous mode [ 95.798325][ T4503] Zero length message leads to an empty skb [ 95.837706][ T4475] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.911700][ T1111] usb 1-1: device descriptor read/64, error -71 [ 96.076963][ T4509] device syzkaller0 entered promiscuous mode [ 96.191607][ T1111] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.326828][ T1325] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 97.218723][ T1111] usb 1-1: device descriptor read/64, error -71 [ 97.380034][ T1108] usb 5-1: USB disconnect, device number 3 [ 97.381256][ T1111] usb usb1-port1: attempt power cycle [ 97.523685][ T4527] loop3: detected capacity change from 0 to 512 [ 97.550936][ T1108] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 98.335250][ T4532] loop4: detected capacity change from 0 to 256 [ 98.359799][ T4527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.376037][ T4527] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 98.391316][ T4527] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 98.399766][ T4527] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.71: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 98.423458][ T4527] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.71: couldn't read orphan inode 13 (err -117) [ 98.436064][ T4527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.496782][ T4507] loop2: detected capacity change from 0 to 40427 [ 98.533478][ T4532] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 98.605104][ T4507] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 98.630763][ T4507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.738246][ T4507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.776065][ T4547] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 99.626931][ T4550] device syzkaller0 entered promiscuous mode [ 99.700928][ T4551] device syzkaller0 entered promiscuous mode [ 102.326936][ T4586] loop3: detected capacity change from 0 to 512 [ 103.867011][ T4591] loop1: detected capacity change from 0 to 4096 [ 103.976293][ T4591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.009560][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.053473][ T4591] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 104.062681][ T4586] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.091781][ T4591] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 104.110517][ T4608] loop4: detected capacity change from 0 to 512 [ 104.119599][ T4591] EXT4-fs (loop1): re-mounted. Opts: block_validity,journal_async_commit,barrier=0x0000000000000401,minixdf,data=ordered,noinit_itable,. Quota mode: writeback. [ 104.161004][ T4586] __quota_error: 24 callbacks suppressed [ 104.161024][ T4586] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 104.221737][ T4608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.228665][ T4586] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 104.238158][ T4586] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.84: Failed to acquire dquot type 0 [ 104.249963][ T4608] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.264968][ T4608] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 104.272102][ T4608] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.88: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.292450][ T4608] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.88: couldn't read orphan inode 13 (err -117) [ 104.320172][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.902003][ T4635] loop1: detected capacity change from 0 to 512 [ 105.994503][ T4635] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 106.021626][ T4635] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.216391][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 106.241598][ T4635] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.347098][ T4622] loop2: detected capacity change from 0 to 40427 [ 107.754980][ T4653] loop3: detected capacity change from 0 to 512 [ 108.349551][ T4658] xt_hashlimit: size too large, truncated to 1048576 [ 108.384802][ T4653] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 108.573844][ T4653] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 109.092058][ T4653] EXT4-fs (loop3): 1 truncate cleaned up [ 109.266844][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,abort,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 110.044201][ T4653] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.100: Logical block already allocated [ 113.474731][ T4710] fuse: Bad value for 'fd' [ 116.384368][ T4732] loop3: detected capacity change from 0 to 512 [ 116.510184][ T4732] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 116.579104][ T4732] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 116.629385][ T4732] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.117: attempt to clear invalid blocks 2 len 1 [ 116.734616][ T4732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.771708][ T4732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.117: invalid indirect mapped block 1819239214 (level 0) [ 116.860693][ T4732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.117: invalid indirect mapped block 1819239214 (level 1) [ 116.886425][ T4732] EXT4-fs (loop3): 1 truncate cleaned up [ 116.905523][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,mblk_io_submit,user_xattr,bsddf,usrjquota=..,errors=continue. Quota mode: writeback. [ 117.091280][ T4745] netlink: 'syz.0.120': attribute type 12 has an invalid length. [ 118.079607][ T4754] loop1: detected capacity change from 0 to 256 [ 118.821584][ T4754] FAT-fs (loop1): Directory bread(block 64) failed [ 118.991851][ T4754] FAT-fs (loop1): Directory bread(block 65) failed [ 119.041584][ T4754] FAT-fs (loop1): Directory bread(block 66) failed [ 119.394318][ T4754] FAT-fs (loop1): Directory bread(block 67) failed [ 119.401022][ T4754] FAT-fs (loop1): Directory bread(block 68) failed [ 119.410910][ T4754] FAT-fs (loop1): Directory bread(block 69) failed [ 119.418626][ T4754] FAT-fs (loop1): Directory bread(block 70) failed [ 119.838205][ T4754] FAT-fs (loop1): Directory bread(block 71) failed [ 120.202198][ T4754] FAT-fs (loop1): Directory bread(block 72) failed [ 120.313182][ T4754] FAT-fs (loop1): Directory bread(block 73) failed [ 120.460361][ T4768] netlink: 'syz.2.128': attribute type 12 has an invalid length. [ 120.468461][ T4768] netlink: 'syz.2.128': attribute type 29 has an invalid length. [ 120.477143][ T4768] netlink: 148 bytes leftover after parsing attributes in process `syz.2.128'. [ 120.684570][ T4770] device syzkaller0 entered promiscuous mode [ 120.796378][ T4772] device syzkaller0 entered promiscuous mode [ 121.016121][ T4781] loop3: detected capacity change from 0 to 128 [ 121.065013][ T4781] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.734792][ T4786] FAT-fs (loop3): error, invalid access to FAT (entry 0x0f000000) [ 121.743010][ T4786] FAT-fs (loop3): Filesystem has been set read-only [ 122.192107][ T4187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.326662][ T4802] loop1: detected capacity change from 0 to 256 [ 124.440668][ T26] audit: type=1326 audit(1773273509.625:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25aa5d4799 code=0x7ffc0000 [ 124.561631][ T26] audit: type=1326 audit(1773273509.665:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f25aa5d4799 code=0x7ffc0000 [ 124.621519][ T26] audit: type=1326 audit(1773273509.665:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f25aa5d4799 code=0x7ffc0000 [ 124.739916][ T4802] FAT-fs (loop1): Directory bread(block 64) failed [ 124.747520][ T4802] FAT-fs (loop1): Directory bread(block 65) failed [ 124.761594][ T4802] FAT-fs (loop1): Directory bread(block 66) failed [ 124.775601][ T4802] FAT-fs (loop1): Directory bread(block 67) failed [ 124.806263][ T4807] device syzkaller0 entered promiscuous mode [ 124.814021][ T4802] FAT-fs (loop1): Directory bread(block 68) failed [ 124.854687][ T4802] FAT-fs (loop1): Directory bread(block 69) failed [ 124.881160][ T4802] FAT-fs (loop1): Directory bread(block 70) failed [ 124.926703][ T4802] FAT-fs (loop1): Directory bread(block 71) failed [ 124.961933][ T4802] FAT-fs (loop1): Directory bread(block 72) failed [ 124.989910][ T4802] FAT-fs (loop1): Directory bread(block 73) failed [ 125.307637][ T4239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.657328][ T4239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.715076][ T4836] loop1: detected capacity change from 0 to 256 [ 126.848574][ T4235] Bluetooth: hci5: command 0x0409 tx timeout [ 126.952790][ T4844] loop2: detected capacity change from 0 to 512 [ 127.038927][ T4810] chnl_net:caif_netlink_parms(): no params data found [ 127.261491][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.276158][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.292600][ T4810] device bridge_slave_0 entered promiscuous mode [ 127.319018][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.330633][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.343737][ T4810] device bridge_slave_1 entered promiscuous mode [ 127.351927][ T4854] device syzkaller0 entered promiscuous mode [ 127.420194][ T4810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.451198][ T4844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.515587][ T4239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.576933][ T4844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.617546][ T4810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.690779][ T4844] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.868002][ T4239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.896421][ T4844] EXT4-fs (loop2): 1 truncate cleaned up [ 127.953489][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 127.981821][ T26] audit: type=1326 audit(1773273513.085:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 128.076343][ T4810] team0: Port device team_slave_0 added [ 128.103642][ T26] audit: type=1326 audit(1773273513.085:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 128.162364][ T4810] team0: Port device team_slave_1 added [ 128.275186][ T26] audit: type=1326 audit(1773273513.135:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 128.298007][ T26] audit: type=1326 audit(1773273513.135:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29ce0c799 code=0x7ffc0000 [ 128.369038][ T4810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.381499][ T26] audit: type=1800 audit(1773273513.445:43): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 128.412506][ T4810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.622973][ T4876] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.163'. [ 128.659497][ T4810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.732081][ T4810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.739089][ T4810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.768447][ T4810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.023422][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 129.055197][ T4880] netlink: 'syz.2.162': attribute type 12 has an invalid length. [ 129.295231][ T4810] device hsr_slave_0 entered promiscuous mode [ 129.371963][ T4810] device hsr_slave_1 entered promiscuous mode [ 129.441413][ T4810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.472910][ T4810] Cannot create hsr debugfs directory [ 129.725955][ T4862] loop0: detected capacity change from 0 to 40427 [ 130.413007][ T4862] F2FS-fs (loop0): invalid crc value [ 130.508824][ T4862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.685347][ T4862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.100020][ T4810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.134415][ T4185] attempt to access beyond end of device [ 131.134415][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 131.160366][ T4810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.253507][ T4810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.297480][ T4810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.417324][ T4270] Bluetooth: hci5: command 0x040f tx timeout [ 131.837410][ T4931] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.174'. [ 132.221747][ T4810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.855909][ T4239] device hsr_slave_0 left promiscuous mode [ 132.892835][ T4239] device hsr_slave_1 left promiscuous mode [ 132.912627][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.933809][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.968679][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.979715][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.002527][ T4239] device bridge_slave_1 left promiscuous mode [ 133.024406][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.067346][ T4239] device bridge_slave_0 left promiscuous mode [ 133.081959][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.150634][ T4239] device veth1_macvtap left promiscuous mode [ 133.164620][ T4239] device veth0_macvtap left promiscuous mode [ 133.170925][ T4239] device veth1_vlan left promiscuous mode [ 133.193645][ T4239] device veth0_vlan left promiscuous mode [ 133.481963][ T4270] Bluetooth: hci5: command 0x0419 tx timeout [ 133.592404][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 133.617533][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 133.637684][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.662593][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.813190][ T4239] bond0 (unregistering): Released all slaves [ 133.915252][ T4943] netlink: 'syz.3.175': attribute type 12 has an invalid length. [ 133.965603][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.971999][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.090218][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 134.124057][ T4810] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.147754][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.214498][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.308809][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.340668][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.370894][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.378106][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.421865][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.471856][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.509702][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.516892][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.554014][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.573182][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.602690][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.614117][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.667772][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.706800][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.727054][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.941810][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.129413][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.403839][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.572655][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.597708][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.612843][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.733235][ T4995] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.184'. [ 136.118117][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.141862][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.173965][ T4810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.541262][ T4974] loop0: detected capacity change from 0 to 40427 [ 136.628562][ T4974] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 136.657466][ T4974] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.754840][ T4974] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.105870][ T4974] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.131559][ T4974] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.220514][ T5029] tmpfs: Unknown parameter 'fscontext' [ 137.548172][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.572506][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.722018][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.982964][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.994514][ T4810] device veth0_vlan entered promiscuous mode [ 138.001636][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.010896][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.024514][ T4810] device veth1_vlan entered promiscuous mode [ 138.096759][ T5038] netlink: 'syz.1.188': attribute type 12 has an invalid length. [ 138.777929][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.792270][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.871608][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.880425][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.904021][ T4810] device veth0_macvtap entered promiscuous mode [ 139.013059][ T4810] device veth1_macvtap entered promiscuous mode [ 139.106435][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.143585][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.199447][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.266506][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.351403][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.384277][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.517629][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.830235][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.089080][ T4810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.216199][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.248094][ T5064] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.194'. [ 140.254266][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.310580][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.355457][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.521496][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.589872][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.758903][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.053589][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.284738][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.338836][ T4810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.410841][ T4810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.460037][ T4810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.514833][ T4810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.563985][ T4810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.598604][ T4810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.701410][ T4810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.733046][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.755138][ T5079] loop3: detected capacity change from 0 to 256 [ 141.766512][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.102838][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.231382][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.242143][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.335730][ T5090] tmpfs: Unknown parameter 'fscontext' [ 142.927741][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.001615][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.051671][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.361219][ T5112] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.204'. [ 143.451474][ T4235] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 143.551759][ T4270] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 143.759084][ T5125] device syzkaller0 entered promiscuous mode [ 143.861696][ T4235] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 143.892190][ T4235] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.941855][ T4235] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.971640][ T4270] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 143.979783][ T4270] usb 6-1: config 0 has no interface number 0 [ 143.991482][ T4235] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 144.016681][ T4270] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 144.037782][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.051464][ T4270] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 144.062062][ T4235] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 144.071143][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.089774][ T4270] usb 6-1: config 0 interface 96 has no altsetting 0 [ 144.130658][ T4235] usb 2-1: config 0 descriptor?? [ 144.281850][ T4270] usb 6-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 144.301216][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.331419][ T4270] usb 6-1: Product: syz [ 144.335773][ T4270] usb 6-1: Manufacturer: syz [ 144.340401][ T4270] usb 6-1: SerialNumber: syz [ 144.355389][ T4270] usb 6-1: config 0 descriptor?? [ 144.384546][ T5113] loop3: detected capacity change from 0 to 40427 [ 144.441169][ T5113] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 144.714816][ T4235] hid (null): bogus close delimiter [ 144.727443][ T4235] hid-alps 0003:044E:120C.0001: bogus close delimiter [ 144.734533][ T4235] hid-alps 0003:044E:120C.0001: item 0 4 2 10 parsing failed [ 144.742979][ T4235] hid-alps 0003:044E:120C.0001: parse failed [ 144.749024][ T4235] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 145.101987][ T4235] usb 6-1: USB disconnect, device number 2 [ 145.291043][ T4270] usb 2-1: USB disconnect, device number 2 [ 145.451716][ T4238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.811692][ T4238] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.828570][ T5164] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.216'. [ 145.833104][ T4238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.971901][ T4238] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.999196][ T5172] loop1: detected capacity change from 0 to 1024 [ 146.005879][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.015674][ T5162] device syzkaller0 entered promiscuous mode [ 146.022253][ T4238] usb 4-1: SerialNumber: syz [ 146.047912][ T5172] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 146.106170][ T5172] EXT4-fs (loop1): Ignoring removed bh option [ 146.134186][ T5172] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.223058][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,mblk_io_submit,barrier=0x0000000000000002,dioread_lock,acl,dioread_nolock,data_err=ignore,grpquota,resuid=0x0000000000000000,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 146.324394][ T5172] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.217: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 146.352359][ T4238] usb 4-1: 0:2 : does not exist [ 146.436799][ T5185] device syzkaller0 entered promiscuous mode [ 146.451571][ T4238] usb 4-1: USB disconnect, device number 2 [ 147.069823][ T5195] loop1: detected capacity change from 0 to 256 [ 147.383562][ T4199] udevd[4199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.417237][ T5195] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.508498][ T5195] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 147.601252][ T5195] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.795713][ T5212] loop0: detected capacity change from 0 to 512 [ 147.879366][ T5212] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 147.898443][ T5212] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.046625][ T5216] loop5: detected capacity change from 0 to 4096 [ 148.078952][ T5212] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 148.114068][ T5216] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 148.135173][ T5212] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.337563][ T5236] device syzkaller0 entered promiscuous mode [ 151.055084][ T5259] loop5: detected capacity change from 0 to 256 [ 151.280848][ T5259] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 151.618938][ T5265] device syzkaller0 entered promiscuous mode [ 152.174391][ T5278] loop5: detected capacity change from 0 to 1024 [ 152.190412][ T5241] loop1: detected capacity change from 0 to 40427 [ 152.234761][ T5278] EXT4-fs (loop5): Ignoring removed bh option [ 152.259475][ T5278] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.296806][ T5241] F2FS-fs (loop1): invalid crc value [ 152.329614][ T5241] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.342000][ T5282] loop2: detected capacity change from 0 to 512 [ 152.368610][ T5278] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.475503][ T5282] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 152.545407][ T5282] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.775310][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.794996][ T5282] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.834804][ T5241] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 153.753663][ T5311] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 154.011917][ T5319] loop0: detected capacity change from 0 to 512 [ 154.211981][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 154.643459][ T23] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 154.811046][ T23] usb 3-1: config 0 has no interface number 0 [ 154.829975][ T23] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 154.861924][ T23] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 154.878373][ T5326] device syzkaller0 entered promiscuous mode [ 154.891393][ T23] usb 3-1: config 0 interface 96 has no altsetting 0 [ 155.024602][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 155.079018][ T5319] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.102771][ T23] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 155.136099][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.161089][ T23] usb 3-1: Product: syz [ 155.188111][ T23] usb 3-1: Manufacturer: syz [ 155.193309][ T23] usb 3-1: SerialNumber: syz [ 155.272657][ T23] usb 3-1: config 0 descriptor?? [ 156.047333][ T5350] netlink: 'syz.5.252': attribute type 12 has an invalid length. [ 157.347011][ T5360] loop0: detected capacity change from 0 to 512 [ 158.437794][ T4270] usb 3-1: USB disconnect, device number 2 [ 158.457703][ T5360] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 158.492901][ T5360] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.662034][ T5360] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 158.734637][ T5385] loop5: detected capacity change from 0 to 256 [ 158.741853][ T5360] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.762213][ T5380] device syzkaller0 entered promiscuous mode [ 158.783945][ T5386] device syzkaller0 entered promiscuous mode [ 158.820978][ T5385] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.904887][ T5385] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 158.961145][ T5385] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 159.679300][ T5402] tmpfs: Unknown parameter 'fscontext' [ 160.368304][ T5390] loop1: detected capacity change from 0 to 40427 [ 160.480281][ T5414] loop3: detected capacity change from 0 to 128 [ 160.507659][ T5390] F2FS-fs (loop1): Unrecognized mount option "mfs" or missing value [ 160.897920][ T5429] device syzkaller0 entered promiscuous mode [ 161.035919][ T5437] loop1: detected capacity change from 0 to 512 [ 161.160592][ T5437] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.208968][ T5441] loop3: detected capacity change from 0 to 512 [ 161.273629][ T5437] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.404925][ T5441] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.417872][ T5441] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 161.434146][ T5441] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 161.446553][ T5441] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.479377][ T5441] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.274: couldn't read orphan inode 13 (err -117) [ 161.493452][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.938871][ T5437] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 161.962484][ T5439] overlayfs: failed to resolve './bus': -2 [ 162.031658][ T5437] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.271899][ T5451] loop3: detected capacity change from 0 to 512 [ 162.347842][ T5451] EXT4-fs (loop3): Ignoring removed bh option [ 162.396057][ T5451] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 162.667998][ T5464] tmpfs: Unknown parameter 'fscontext' [ 163.108669][ T5451] EXT4-fs (loop3): 1 truncate cleaned up [ 163.355105][ T5463] loop2: detected capacity change from 0 to 4096 [ 163.361673][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,auto_da_alloc,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 163.543621][ T5463] EXT4-fs (loop2): Unrecognized mount option "func=BPRM_CHECK" or missing value [ 164.071519][ T5485] tipc: Started in network mode [ 164.077130][ T5485] tipc: Node identity ac14140f, cluster identity 4711 [ 164.109247][ T5485] tipc: New replicast peer: 255.255.255.255 [ 164.117137][ T5485] tipc: Enabled bearer , priority 10 [ 165.610928][ T5505] loop5: detected capacity change from 0 to 40427 [ 165.626397][ T23] tipc: Node number set to 2886997007 [ 166.512211][ T5505] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 166.519656][ T5505] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 166.534114][ T5505] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x216 [ 166.556132][ T5505] F2FS-fs (loop5): invalid crc value [ 166.817857][ T5505] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 167.077788][ T5505] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 167.085915][ T5505] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 167.674225][ T5513] loop3: detected capacity change from 0 to 2048 [ 167.858342][ T5513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.052588][ T5531] loop0: detected capacity change from 0 to 1024 [ 169.147090][ T5531] EXT4-fs (loop0): Ignoring removed orlov option [ 169.346304][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 169.427650][ T5531] EXT4-fs error (device loop0): __ext4_new_inode:1286: comm syz.0.297: failed to insert inode 12: doubly allocated? [ 169.650615][ T5548] loop3: detected capacity change from 0 to 1024 [ 169.699869][ T5554] loop2: detected capacity change from 0 to 1024 [ 169.720957][ T5552] device syzkaller0 entered promiscuous mode [ 169.742884][ T5548] EXT4-fs (loop3): Ignoring removed orlov option [ 169.760544][ T5548] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.807125][ T5554] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 169.845835][ T26] audit: type=1804 audit(1773273555.035:44): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.304" name="/newroot/62/file2/bus" dev="loop2" ino=18 res=1 errno=0 [ 169.981773][ T5548] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 170.114888][ T5565] device syzkaller0 entered promiscuous mode [ 170.198081][ T5566] tmpfs: Unknown parameter 'fscontext' [ 170.887277][ T5574] loop5: detected capacity change from 0 to 512 [ 170.908801][ T5575] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.307'. [ 170.958556][ T5574] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 170.958556][ T5574] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.958556][ T5574] [ 171.051735][ T5574] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.142326][ T5574] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026119, mo2=0000] [ 171.341578][ T5568] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.380844][ T5574] EXT4-fs (loop5): 1 truncate cleaned up [ 171.407425][ T4633] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 171.446367][ T5601] loop3: detected capacity change from 0 to 512 [ 171.517262][ T5601] EXT4-fs (loop3): orphan cleanup on readonly fs [ 171.534464][ T5601] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 171.641452][ T5574] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000003,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 171.879411][ T4633] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:14: Failed to release dquot type 1 [ 171.893937][ T5568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.035660][ T5568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.282094][ T5601] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 172.289258][ T5601] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.312096][ T5601] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.314: couldn't read orphan inode 13 (err -117) [ 172.324585][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.421787][ T5568] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.444808][ T5568] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 172.473721][ T5568] usb 2-1: Manufacturer: syz [ 172.513756][ T5568] usb 2-1: config 0 descriptor?? [ 172.645370][ T5617] device syzkaller0 entered promiscuous mode [ 173.213862][ T5633] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.321'. [ 173.301742][ T5635] loop5: detected capacity change from 0 to 1024 [ 173.419350][ T5635] EXT4-fs (loop5): Ignoring removed orlov option [ 173.437113][ T5635] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.467175][ T5643] loop0: detected capacity change from 0 to 2048 [ 173.569371][ T5635] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 173.792865][ T5643] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 173.841598][ T5643] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.883109][ T5568] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input9 [ 173.979962][ T5568] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 174.081913][ T5568] usb 2-1: USB disconnect, device number 3 [ 174.125663][ T5643] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.324: bg 0: block 345: padding at end of block bitmap is not set [ 174.195826][ T5643] EXT4-fs (loop0): Remounting filesystem read-only [ 174.216105][ T5643] EXT4-fs error (device loop0): ext4_xattr_block_set:2195: inode #2: comm syz.0.324: bad block 0 [ 174.317630][ T5643] EXT4-fs (loop0): Remounting filesystem read-only [ 174.396215][ T5666] fido_id[5666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 174.754163][ T5676] loop2: detected capacity change from 0 to 512 [ 175.463138][ T5676] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.470585][ T5676] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 175.486960][ T5676] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 175.495620][ T5676] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.329: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 175.516783][ T5676] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.329: couldn't read orphan inode 13 (err -117) [ 175.529503][ T5676] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.566481][ T5685] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.333'. [ 175.584373][ T5681] loop3: detected capacity change from 0 to 512 [ 175.668556][ T5681] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 175.711451][ T5681] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.921506][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 176.024164][ T5681] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.729225][ T5720] loop2: detected capacity change from 0 to 2048 [ 176.745444][ T5721] loop0: detected capacity change from 0 to 1024 [ 176.781734][ T5726] loop5: detected capacity change from 0 to 256 [ 176.848177][ T5726] exfat: Deprecated parameter 'utf8' [ 176.908312][ T5726] exfat: Deprecated parameter 'namecase' [ 176.955210][ T5726] exfat: Deprecated parameter 'namecase' [ 176.963883][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.999178][ T5732] loop1: detected capacity change from 0 to 4096 [ 177.006513][ T5721] EXT4-fs (loop0): Ignoring removed orlov option [ 177.017056][ T5721] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.050546][ T5738] device syzkaller0 entered promiscuous mode [ 177.092752][ T5726] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 177.142036][ T5732] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 177.185848][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 177.380158][ T5732] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 178.361898][ T4174] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.984271][ T4174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.057479][ T4174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.182620][ T5764] device syzkaller0 entered promiscuous mode [ 179.201897][ T4174] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 179.229885][ T4174] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 179.245953][ T4174] usb 6-1: Manufacturer: syz [ 179.683556][ T4174] usb 6-1: config 0 descriptor?? [ 179.892817][ T5786] loop0: detected capacity change from 0 to 512 [ 179.993940][ T5786] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.350: inode has both inline data and extents flags [ 180.028740][ T5786] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.350: couldn't read orphan inode 15 (err -117) [ 180.134135][ T5786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.343686][ T5798] device syzkaller0 entered promiscuous mode [ 180.453877][ T5801] loop3: detected capacity change from 0 to 4096 [ 180.590179][ T5801] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 180.605525][ T5811] loop2: detected capacity change from 0 to 512 [ 180.617623][ T4174] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input10 [ 180.640830][ T5811] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 180.640830][ T5811] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 180.640830][ T5811] [ 180.699394][ T5811] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.723210][ T4174] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input11 [ 180.835422][ T5817] loop0: detected capacity change from 0 to 512 [ 181.081679][ T5811] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026119, mo2=0000] [ 181.148612][ T4174] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 181.172289][ T5817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.187104][ T5817] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 181.594128][ T5817] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 181.595811][ T5801] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 181.609101][ T5817] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.629210][ T5817] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.359: couldn't read orphan inode 13 (err -117) [ 181.641729][ T5817] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.652832][ T5811] EXT4-fs (loop2): 1 truncate cleaned up [ 181.665537][ T4174] usb 6-1: USB disconnect, device number 3 [ 181.671956][ T3090] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 181.690370][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000003,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 181.746322][ T3090] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1 [ 181.952031][ T5826] loop5: detected capacity change from 0 to 512 [ 182.105666][ T4438] tipc: Subscription rejected, illegal request [ 182.264021][ T5826] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,quota,nojournal_checksum,grpjquota=,lazytime,block_validity,bsddf,,errors=continue. Quota mode: writeback. [ 182.336837][ T5833] fido_id[5833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 182.391570][ T5826] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.509776][ T26] audit: type=1800 audit(1773273567.695:45): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.361" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 182.681507][ T1325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.787495][ T5852] device syzkaller0 entered promiscuous mode [ 184.072506][ T5869] device syzkaller0 entered promiscuous mode [ 184.516600][ T5878] loop3: detected capacity change from 0 to 256 [ 184.690234][ T5878] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 184.821594][ T1325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.866974][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.993558][ T5891] loop1: detected capacity change from 0 to 512 [ 185.233308][ T5891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.249301][ T5891] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 185.264794][ T5891] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 185.274926][ T5891] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.373: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 185.299364][ T5891] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.373: couldn't read orphan inode 13 (err -117) [ 185.317898][ T5891] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.471939][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.774041][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.784312][ T1325] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 185.794092][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.812997][ T1325] usb 1-1: config 0 descriptor?? [ 185.839731][ T5900] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.376'. [ 185.871588][ T1325] usb 1-1: can't set config #0, error -71 [ 185.882842][ T1325] usb 1-1: USB disconnect, device number 5 [ 185.951801][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.973711][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 185.991909][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.045614][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.098280][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.131926][ T4230] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 186.165151][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.200566][ T4230] usb 4-1: config 0 descriptor?? [ 186.283820][ T4230] gspca_main: spca561-2.14.0 probing abcd:cdee [ 186.429666][ T5930] loop0: detected capacity change from 0 to 256 [ 186.457220][ T5930] exfat: Deprecated parameter 'utf8' [ 186.474181][ T5930] exfat: Deprecated parameter 'namecase' [ 186.523990][ T5930] exfat: Deprecated parameter 'namecase' [ 186.559597][ T5933] xt_hashlimit: size too large, truncated to 1048576 [ 186.571838][ T4230] spca561: probe of 4-1:0.0 failed with error -22 [ 186.584731][ T4230] usb 4-1: MIDIStreaming interface descriptor not found [ 186.600905][ T5930] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 186.663509][ T4230] usb 4-1: USB disconnect, device number 3 [ 187.034193][ T4199] udevd[4199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.353752][ T5948] netlink: 'syz.3.388': attribute type 12 has an invalid length. [ 187.387668][ T5949] loop2: detected capacity change from 0 to 512 [ 187.602201][ T5949] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.617268][ T5949] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 187.633036][ T5949] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 187.642472][ T5949] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.387: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 187.668643][ T5949] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.387: couldn't read orphan inode 13 (err -117) [ 187.685854][ T5949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.095665][ T5955] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.389'. [ 188.331553][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.591406][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 188.711702][ T4315] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.741589][ T4315] usb 4-1: config 0 has no interface number 0 [ 188.761838][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.803503][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.844196][ T4315] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 188.874706][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.922245][ T4315] usb 4-1: config 0 descriptor?? [ 189.642016][ T4315] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 189.660031][ T4315] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 189.715177][ T4315] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 189.757064][ T4315] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 189.791473][ T4315] uclogic: probe of 0003:28BD:0071.0004 failed with error -71 [ 189.819649][ T4315] usb 4-1: USB disconnect, device number 4 [ 191.377676][ T5989] loop3: detected capacity change from 0 to 512 [ 191.692516][ T5989] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.704592][ T5989] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 191.719866][ T5989] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 191.730679][ T5989] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.400: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.756277][ T5989] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.400: couldn't read orphan inode 13 (err -117) [ 191.778035][ T5989] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.285760][ T5997] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.403'. [ 192.470378][ T5999] loop5: detected capacity change from 0 to 4096 [ 192.601960][ T5999] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 192.989389][ T6008] loop0: detected capacity change from 0 to 2048 [ 193.051772][ T6014] process 'syz.2.408' launched './file1' with NULL argv: empty string added [ 193.202923][ T6008] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.233916][ T6008] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.504860][ T6020] loop0: detected capacity change from 0 to 512 [ 193.619245][ T6020] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 193.651665][ T6020] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.747643][ T6020] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 193.841295][ T6009] loop5: detected capacity change from 0 to 40427 [ 193.856330][ T6020] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.870710][ T6009] F2FS-fs (loop5): invalid crc value [ 194.082730][ T6035] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.415'. [ 194.099654][ T6009] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.540305][ T6009] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.606990][ T6043] loop2: detected capacity change from 0 to 4096 [ 194.655435][ T6043] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 194.676425][ T6043] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.891513][ T6043] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,abort,discard,noblock_validity,discard,,errors=continue. Quota mode: writeback. [ 195.821981][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.831220][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.388755][ T6062] loop2: detected capacity change from 0 to 512 [ 196.599646][ T6062] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.652394][ T6062] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.921578][ T4238] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 197.149239][ T6076] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 197.571642][ T5568] Bluetooth: hci2: command 0x0406 tx timeout [ 197.586470][ T5568] Bluetooth: hci0: command 0x0406 tx timeout [ 197.619508][ T5568] Bluetooth: hci4: command 0x0406 tx timeout [ 197.790269][ T6080] loop3: detected capacity change from 0 to 512 [ 197.822634][ T4238] usb 6-1: Using ep0 maxpacket: 8 [ 197.891577][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 197.915174][ T6084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.427'. [ 197.925189][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 197.940820][ T6080] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.952210][ T4238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.967230][ T4238] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.141725][ T4238] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 198.157378][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.192897][ T4238] usb 6-1: Product: syz [ 198.197135][ T4238] usb 6-1: Manufacturer: syz [ 198.206096][ T4238] usb 6-1: SerialNumber: syz [ 198.225880][ T6092] device syzkaller0 entered promiscuous mode [ 198.408552][ T6096] loop1: detected capacity change from 0 to 256 [ 198.906484][ T4238] usb 6-1: USB disconnect, device number 4 [ 199.098987][ T6113] loop2: detected capacity change from 0 to 512 [ 199.281693][ T6113] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.294190][ T6113] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 199.309469][ T6113] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 199.318211][ T6113] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.436: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 199.349706][ T6113] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.436: couldn't read orphan inode 13 (err -117) [ 199.364492][ T6113] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.994660][ T6122] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.439'. [ 200.876630][ T6146] device syzkaller0 entered promiscuous mode [ 201.703180][ T6159] loop3: detected capacity change from 0 to 512 [ 201.949507][ T6159] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.962839][ T6159] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 201.978312][ T6159] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 201.988676][ T6159] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 202.019444][ T6159] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.449: couldn't read orphan inode 13 (err -117) [ 202.035521][ T6159] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.622669][ T6165] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.451'. [ 202.813031][ T6169] loop3: detected capacity change from 0 to 2048 [ 202.881518][ T6169] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000060928" or missing value [ 203.124554][ T6169] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 203.144472][ T6169] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 203.412891][ T6181] loop3: detected capacity change from 0 to 128 [ 203.483343][ T6181] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.576885][ T6181] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.693596][ T6181] EXT4-fs warning (device loop3): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 203.752695][ T6187] loop0: detected capacity change from 0 to 512 [ 203.907439][ T6187] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.945472][ T6189] loop3: detected capacity change from 0 to 512 [ 204.033216][ T6187] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 204.086488][ T6189] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 204.105867][ T6187] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.131545][ T6189] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.178608][ T6189] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.459: iget: bad i_size value: 2533274857506816 [ 204.252523][ T6187] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.458: dir seems corrupt? Run e2fsck -D. [ 204.285197][ T4199] udevd[4199]: incorrect ext4 checksum on /dev/loop0 [ 204.340198][ T6197] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.401627][ T6187] EXT4-fs (loop0): Remounting filesystem read-only [ 204.431852][ T6187] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.458: Directory index failed checksum [ 204.463790][ T6197] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 204.519475][ T6197] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.458: resize_inode disabled but reserved GDT blocks non-zero [ 204.587771][ T6201] loop3: detected capacity change from 0 to 256 [ 204.633432][ T6187] EXT4-fs (loop0): Remounting filesystem read-only [ 204.659334][ T6197] EXT4-fs (loop0): Remounting filesystem read-only [ 205.142014][ T4315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.361696][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 205.501680][ T4315] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 205.520448][ T4315] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 205.562226][ T4315] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 205.616085][ T4315] usb 4-1: config 220 has no interface number 2 [ 205.962363][ T4174] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 206.013228][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.181769][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.337977][ T4174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.401368][ T4174] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.438757][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.466393][ T4315] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.480403][ T4315] usb 4-1: config 220 interface 0 has no altsetting 0 [ 206.504340][ T4174] usb 3-1: config 0 descriptor?? [ 206.510481][ T4315] usb 4-1: config 220 interface 76 has no altsetting 0 [ 206.518639][ T4315] usb 4-1: config 220 interface 1 has no altsetting 0 [ 206.600399][ T6228] device syzkaller0 entered promiscuous mode [ 206.691646][ T4315] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.716236][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.726824][ T4315] usb 4-1: Product: syz [ 206.731048][ T4315] usb 4-1: Manufacturer: syz [ 206.739530][ T6224] netlink: 'syz.0.468': attribute type 12 has an invalid length. [ 206.747861][ T4315] usb 4-1: SerialNumber: syz [ 206.800686][ T6231] loop1: detected capacity change from 0 to 512 [ 206.830837][ T6231] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.871486][ T6231] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 206.898518][ T6231] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 206.919312][ T6231] System zones: 0-2, 18-18, 34-35 [ 206.950947][ T6231] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.015179][ T4174] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 207.027438][ T4174] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 207.035763][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 207.051644][ T4174] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 207.379859][ T1325] usb 3-1: USB disconnect, device number 3 [ 207.465002][ T4315] usb 4-1: selecting invalid altsetting 0 [ 207.486188][ T4315] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 207.493785][ T4315] usb 4-1: No valid video chain found. [ 207.573310][ T4315] usb 4-1: selecting invalid altsetting 0 [ 207.583532][ T4315] usbtest: probe of 4-1:220.1 failed with error -22 [ 207.608986][ T4315] usb 4-1: USB disconnect, device number 5 [ 207.691652][ T4238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.931592][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 208.052897][ T4238] usb 1-1: config 1 has too many interfaces: 131, using maximum allowed: 32 [ 208.090772][ T4238] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.117888][ T4238] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 131 [ 208.195321][ T6250] device syzkaller0 entered promiscuous mode [ 208.849355][ T4238] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 208.860812][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.870048][ T4238] usb 1-1: Product: syz [ 208.874584][ T4238] usb 1-1: Manufacturer: syz [ 208.879290][ T4238] usb 1-1: SerialNumber: syz [ 209.217322][ T4238] usb 1-1: USB disconnect, device number 6 [ 209.365643][ T6264] loop3: detected capacity change from 0 to 512 [ 210.355713][ T6273] loop2: detected capacity change from 0 to 16 [ 210.451729][ T6273] erofs: Unknown parameter '<' [ 210.632053][ T6282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.672982][ T6264] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,quota,nojournal_checksum,grpjquota=,lazytime,block_validity,bsddf,,errors=continue. Quota mode: writeback. [ 210.698031][ T6264] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.798115][ T26] audit: type=1800 audit(1773273595.985:46): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 211.098223][ T6289] device syzkaller0 entered promiscuous mode [ 211.441920][ T5568] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.861568][ T5568] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.182311][ T5568] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.391544][ T5568] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 212.605738][ T5568] usb 4-1: Product: syz [ 212.626003][ T5568] usb 4-1: SerialNumber: syz [ 214.923733][ T5568] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 214.930294][ T5568] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 214.938402][ T5568] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 216.865309][ T5568] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 217.221627][ T5568] usb 4-1: USB disconnect, device number 6 [ 217.228272][ T5568] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 218.011760][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.661612][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 218.812181][ T4230] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.870076][ T4230] usb 1-1: config 179 has no interface number 0 [ 219.090117][ T4230] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.449328][ T4230] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.461750][ T4230] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.473718][ T4230] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.663469][ T4230] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.677328][ T4230] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.686554][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.281884][ T6340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.411522][ T4230] usb 1-1: can't set config #179, error -71 [ 221.428485][ T4230] usb 1-1: USB disconnect, device number 7 [ 221.523264][ T6382] device syzkaller0 entered promiscuous mode [ 221.835072][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 221.880562][ T6403] device bond1 entered promiscuous mode [ 221.887142][ T6403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.579857][ T6421] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.526'. [ 222.853714][ T6436] loop0: detected capacity change from 0 to 128 [ 222.925176][ T6436] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.973249][ T6442] device syzkaller0 entered promiscuous mode [ 224.075849][ T4899] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.253145][ T6467] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.539'. [ 226.270588][ T6523] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.551'. [ 228.387447][ T6530] fuse: Bad value for 'fd' [ 228.823175][ T6551] xt_CONNSECMARK: invalid mode: 254 [ 229.935539][ T6561] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.564'. [ 230.263234][ T6574] fuse: Bad value for 'fd' [ 231.686465][ T6598] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.672879][ T6609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.576'. [ 232.840196][ T6615] loop0: detected capacity change from 0 to 128 [ 232.951830][ T6615] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.370107][ T6624] tmpfs: Unknown parameter 'fscontext' [ 234.031883][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 234.075114][ T6638] tipc: Failed to obtain node identity [ 234.081416][ T144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.122635][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 234.449829][ T6650] device vlan2 entered promiscuous mode [ 234.481420][ T6650] device bridge0 entered promiscuous mode [ 234.986970][ T6661] device batadv0 entered promiscuous mode [ 235.030796][ T6661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.067946][ T6661] device batadv0 left promiscuous mode [ 240.464758][ T6736] netlink: 88 bytes leftover after parsing attributes in process `syz.0.612'. [ 240.689318][ T6742] syz.1.614 uses obsolete (PF_INET,SOCK_PACKET) [ 240.727500][ T6742] lo speed is unknown, defaulting to 1000 [ 240.791672][ T6742] lo speed is unknown, defaulting to 1000 [ 240.881692][ T6742] lo speed is unknown, defaulting to 1000 [ 240.931585][ T6742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.945906][ T6742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.990415][ T6742] lo speed is unknown, defaulting to 1000 [ 240.998412][ T6742] lo speed is unknown, defaulting to 1000 [ 241.035274][ T6742] lo speed is unknown, defaulting to 1000 [ 241.065951][ T6742] lo speed is unknown, defaulting to 1000 [ 241.110283][ T6742] lo speed is unknown, defaulting to 1000 [ 241.206247][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 241.483053][ T6754] team0 (unregistering): Port device team_slave_0 removed [ 241.712203][ T6754] team0 (unregistering): Port device team_slave_1 removed [ 241.831563][ T6755] netlink: 72 bytes leftover after parsing attributes in process `syz.2.617'. [ 241.862824][ T6755] netlink: 72 bytes leftover after parsing attributes in process `syz.2.617'. [ 242.363096][ T6789] IPVS: sh: FWM 3 0x00000003 - no destination available [ 242.501339][ T6791] device hsr0 entered promiscuous mode [ 242.577434][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 243.663364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801efe9000: rx timeout, send abort [ 244.152399][ T6826] [ 244.154788][ T6826] ====================================================== [ 244.161825][ T6826] WARNING: possible circular locking dependency detected [ 244.164504][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801efeac00: rx timeout, send abort [ 244.168877][ T6826] syzkaller #0 Not tainted [ 244.177167][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801efe9000: abort rx timeout. Force session deactivation [ 244.181455][ T6826] ------------------------------------------------------ [ 244.181463][ T6826] syz.5.639/6826 is trying to acquire lock: [ 244.181474][ T6826] ffff88807b218120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.214451][ T6826] [ 244.214451][ T6826] but task is already holding lock: [ 244.221837][ T6826] ffffc900016d7798 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 244.231453][ T6826] [ 244.231453][ T6826] which lock already depends on the new lock. [ 244.231453][ T6826] [ 244.241883][ T6826] [ 244.241883][ T6826] the existing dependency chain (in reverse order) is: [ 244.250917][ T6826] [ 244.250917][ T6826] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 244.259214][ T6826] _raw_spin_lock+0x2a/0x40 [ 244.264364][ T6826] __inet_hash+0xe3/0x960 [ 244.269252][ T6826] inet_csk_listen_start+0x22f/0x320 [ 244.275101][ T6826] inet_listen+0x2e1/0x590 [ 244.280148][ T6826] __sys_listen+0x19d/0x220 [ 244.285199][ T6826] __x64_sys_listen+0x56/0x60 [ 244.290437][ T6826] do_syscall_64+0x4c/0xa0 [ 244.295410][ T6826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.301965][ T6826] [ 244.301965][ T6826] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 244.309741][ T6826] __lock_acquire+0x2c42/0x7d10 [ 244.315156][ T6826] lock_acquire+0x19e/0x400 [ 244.320223][ T6826] mptcp_diag_get_info+0x1f2/0x9e0 [ 244.325904][ T6826] inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.331492][ T6826] mptcp_diag_dump+0xce6/0x12b0 [ 244.336930][ T6826] __inet_diag_dump+0x1f6/0x380 [ 244.342327][ T6826] netlink_dump+0x694/0xcf0 [ 244.347376][ T6826] __netlink_dump_start+0x523/0x700 [ 244.353119][ T6826] inet_diag_handler_cmd+0x1d3/0x2b0 [ 244.358961][ T6826] sock_diag_rcv_msg+0x164/0x3e0 [ 244.364457][ T6826] netlink_rcv_skb+0x1f5/0x440 [ 244.369775][ T6826] sock_diag_rcv+0x26/0x40 [ 244.374745][ T6826] netlink_unicast+0x774/0x920 [ 244.380055][ T6826] netlink_sendmsg+0x8ba/0xbe0 [ 244.385370][ T6826] sock_write_iter+0x2a6/0x3a0 [ 244.390689][ T6826] do_iter_readv_writev+0x47e/0x5f0 [ 244.396448][ T6826] do_iter_write+0x205/0x7b0 [ 244.401737][ T6826] do_writev+0x281/0x480 [ 244.406580][ T6826] do_syscall_64+0x4c/0xa0 [ 244.411557][ T6826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.418003][ T6826] [ 244.418003][ T6826] other info that might help us debug this: [ 244.418003][ T6826] [ 244.428256][ T6826] Possible unsafe locking scenario: [ 244.428256][ T6826] [ 244.435818][ T6826] CPU0 CPU1 [ 244.441210][ T6826] ---- ---- [ 244.446625][ T6826] lock(&h->lhash2[i].lock); [ 244.451329][ T6826] lock(sk_lock-AF_INET6); [ 244.458371][ T6826] lock(&h->lhash2[i].lock); [ 244.465798][ T6826] lock(sk_lock-AF_INET6); [ 244.470424][ T6826] [ 244.470424][ T6826] *** DEADLOCK *** [ 244.470424][ T6826] [ 244.478746][ T6826] 6 locks held by syz.5.639/6826: [ 244.483807][ T6826] #0: ffffffff8d4466e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 244.493710][ T6826] #1: ffffffff8d4465a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 244.504138][ T6826] #2: ffff888062aa3698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 244.514911][ T6826] #3: ffffffff8d520588 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 244.525254][ T6826] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.534819][ T6826] #5: ffffc900016d7798 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 244.544900][ T6826] [ 244.544900][ T6826] stack backtrace: [ 244.550832][ T6826] CPU: 0 PID: 6826 Comm: syz.5.639 Not tainted syzkaller #0 [ 244.558146][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.568240][ T6826] Call Trace: [ 244.571587][ T6826] [ 244.574566][ T6826] dump_stack_lvl+0x188/0x250 [ 244.579279][ T6826] ? load_image+0x400/0x400 [ 244.583822][ T6826] ? show_regs_print_info+0x20/0x20 [ 244.589062][ T6826] ? print_circular_bug+0x12b/0x1a0 [ 244.594388][ T6826] check_noncircular+0x296/0x330 [ 244.599370][ T6826] ? add_chain_block+0x940/0x940 [ 244.604335][ T6826] ? lockdep_lock+0xf1/0x1f0 [ 244.609009][ T6826] ? mark_lock+0x94/0x320 [ 244.613377][ T6826] __lock_acquire+0x2c42/0x7d10 [ 244.618275][ T6826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.624298][ T6826] ? verify_lock_unused+0x140/0x140 [ 244.629540][ T6826] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 244.635568][ T6826] ? verify_lock_unused+0x140/0x140 [ 244.640863][ T6826] ? __local_bh_enable_ip+0xd7/0x1c0 [ 244.646195][ T6826] ? __local_bh_enable_ip+0x136/0x1c0 [ 244.651596][ T6826] ? lockdep_hardirqs_on+0x94/0x140 [ 244.658529][ T6826] ? __local_bh_enable_ip+0x136/0x1c0 [ 244.663947][ T6826] ? _local_bh_enable+0xa0/0xa0 [ 244.668832][ T6826] ? nla_put+0x130/0x1e0 [ 244.673191][ T6826] lock_acquire+0x19e/0x400 [ 244.677147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801efeac00: abort rx timeout. Force session deactivation [ 244.677712][ T6826] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.693319][ T6826] ? read_lock_is_recursive+0x10/0x10 [ 244.698729][ T6826] ? rcu_lock_release+0x5/0x20 [ 244.703528][ T6826] ? __lock_acquire+0x7d10/0x7d10 [ 244.708726][ T6826] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.713950][ T6826] mptcp_diag_get_info+0x1f2/0x9e0 [ 244.719117][ T6826] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.724342][ T6826] inet_sk_diag_fill+0xf5e/0x1ca0 [ 244.729393][ T6826] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 244.735128][ T6826] ? do_raw_spin_lock+0x128/0x2f0 [ 244.740186][ T6826] ? __rwlock_init+0x140/0x140 [ 244.745017][ T6826] ? inet_diag_bc_sk+0x18b/0x1120 [ 244.750090][ T6826] mptcp_diag_dump+0xce6/0x12b0 [ 244.755156][ T6826] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 244.761771][ T6826] __inet_diag_dump+0x1f6/0x380 [ 244.766648][ T6826] netlink_dump+0x694/0xcf0 [ 244.771173][ T6826] ? netlink_lookup+0x1d0/0x1d0 [ 244.776041][ T6826] ? __inet_diag_dump_start+0x805/0x970 [ 244.781615][ T6826] __netlink_dump_start+0x523/0x700 [ 244.786850][ T6826] inet_diag_handler_cmd+0x1d3/0x2b0 [ 244.792310][ T6826] ? rcu_lock_release+0x20/0x20 [ 244.797192][ T6826] ? inet_diag_handler_get_info+0xb90/0xb90 [ 244.803117][ T6826] ? inet_diag_dump_start+0x20/0x20 [ 244.808518][ T6826] ? inet_diag_dump+0x50/0x50 [ 244.813218][ T6826] ? rcu_lock_release+0x20/0x20 [ 244.818099][ T6826] sock_diag_rcv_msg+0x164/0x3e0 [ 244.823101][ T6826] netlink_rcv_skb+0x1f5/0x440 [ 244.827972][ T6826] ? sock_diag_bind+0xa0/0xa0 [ 244.832679][ T6826] ? netlink_ack+0xb50/0xb50 [ 244.837284][ T6826] ? __lock_acquire+0x7d10/0x7d10 [ 244.842326][ T6826] sock_diag_rcv+0x26/0x40 [ 244.846754][ T6826] netlink_unicast+0x774/0x920 [ 244.851535][ T6826] netlink_sendmsg+0x8ba/0xbe0 [ 244.856310][ T6826] ? netlink_getsockopt+0x570/0x570 [ 244.861518][ T6826] ? aa_sock_msg_perm+0x94/0x150 [ 244.866481][ T6826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 244.871778][ T6826] ? security_socket_sendmsg+0x7c/0xa0 [ 244.877255][ T6826] sock_write_iter+0x2a6/0x3a0 [ 244.882031][ T6826] ? sock_read_iter+0x380/0x380 [ 244.886921][ T6826] do_iter_readv_writev+0x47e/0x5f0 [ 244.892221][ T6826] ? aa_path_link+0x880/0x880 [ 244.897261][ T6826] ? generic_file_rw_checks+0x280/0x280 [ 244.902823][ T6826] ? common_file_perm+0x171/0x1c0 [ 244.907869][ T6826] ? fsnotify_perm+0x5d/0x560 [ 244.912573][ T6826] ? security_file_permission+0x75/0xa0 [ 244.918135][ T6826] do_iter_write+0x205/0x7b0 [ 244.922753][ T6826] ? import_iovec+0x6f/0xa0 [ 244.927280][ T6826] do_writev+0x281/0x480 [ 244.931547][ T6826] ? do_readv+0x460/0x460 [ 244.935912][ T6826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.941925][ T6826] ? lock_chain_count+0x20/0x20 [ 244.946962][ T6826] ? vtime_user_exit+0x2c8/0x3e0 [ 244.951941][ T6826] ? lockdep_hardirqs_on+0x94/0x140 [ 244.957382][ T6826] do_syscall_64+0x4c/0xa0 [ 244.961849][ T6826] ? clear_bhb_loop+0x30/0x80 [ 244.966561][ T6826] ? clear_bhb_loop+0x30/0x80 [ 244.971263][ T6826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.977290][ T6826] RIP: 0033:0x7f3ae82d7799 [ 244.981762][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.001768][ T6826] RSP: 002b:00007f3ae6531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 245.010232][ T6826] RAX: ffffffffffffffda RBX: 00007f3ae8550fa0 RCX: 00007f3ae82d7799 [ 245.018243][ T6826] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 245.026331][ T6826] RBP: 00007f3ae836dc99 R08: 0000000000000000 R09: 0000000000000000 [ 245.034419][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.042405][ T6826] R13: 00007f3ae8551038 R14: 00007f3ae8550fa0 R15: 00007ffe9f0de648 [ 245.050405][ T6826] [ 245.054786][ T6826] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 245.064473][ T6826] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6826, name: syz.5.639 [ 245.073488][ T6826] INFO: lockdep is turned off. [ 245.078273][ T6826] Preemption disabled at: [ 245.078285][ T6826] [<0000000000000000>] 0x0 [ 245.087107][ T6826] CPU: 0 PID: 6826 Comm: syz.5.639 Not tainted syzkaller #0 [ 245.094431][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.104534][ T6826] Call Trace: [ 245.107925][ T6826] [ 245.110883][ T6826] dump_stack_lvl+0x188/0x250 [ 245.115724][ T6826] ? show_regs_print_info+0x20/0x20 [ 245.120962][ T6826] ? load_image+0x400/0x400 [ 245.125555][ T6826] ___might_sleep+0x493/0x610 [ 245.130272][ T6826] ? __might_sleep+0xf0/0xf0 [ 245.134904][ T6826] ? read_lock_is_recursive+0x10/0x10 [ 245.140356][ T6826] ? rcu_lock_release+0x5/0x20 [ 245.145334][ T6826] __lock_sock_fast+0x2f/0xe0 [ 245.150218][ T6826] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 245.155456][ T6826] mptcp_diag_get_info+0x1fe/0x9e0 [ 245.160608][ T6826] inet_sk_diag_fill+0xf5e/0x1ca0 [ 245.165688][ T6826] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 245.171454][ T6826] ? do_raw_spin_lock+0x128/0x2f0 [ 245.176820][ T6826] ? __rwlock_init+0x140/0x140 [ 245.181652][ T6826] ? inet_diag_bc_sk+0x18b/0x1120 [ 245.186746][ T6826] mptcp_diag_dump+0xce6/0x12b0 [ 245.191642][ T6826] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 245.198307][ T6826] __inet_diag_dump+0x1f6/0x380 [ 245.203231][ T6826] netlink_dump+0x694/0xcf0 [ 245.207983][ T6826] ? netlink_lookup+0x1d0/0x1d0 [ 245.213065][ T6826] ? __inet_diag_dump_start+0x805/0x970 [ 245.218679][ T6826] __netlink_dump_start+0x523/0x700 [ 245.223932][ T6826] inet_diag_handler_cmd+0x1d3/0x2b0 [ 245.229270][ T6826] ? rcu_lock_release+0x20/0x20 [ 245.234169][ T6826] ? inet_diag_handler_get_info+0xb90/0xb90 [ 245.240109][ T6826] ? inet_diag_dump_start+0x20/0x20 [ 245.245555][ T6826] ? inet_diag_dump+0x50/0x50 [ 245.250282][ T6826] ? rcu_lock_release+0x20/0x20 [ 245.255177][ T6826] sock_diag_rcv_msg+0x164/0x3e0 [ 245.260164][ T6826] netlink_rcv_skb+0x1f5/0x440 [ 245.264976][ T6826] ? sock_diag_bind+0xa0/0xa0 [ 245.269743][ T6826] ? netlink_ack+0xb50/0xb50 [ 245.274380][ T6826] ? __lock_acquire+0x7d10/0x7d10 [ 245.279459][ T6826] sock_diag_rcv+0x26/0x40 [ 245.283921][ T6826] netlink_unicast+0x774/0x920 [ 245.288751][ T6826] netlink_sendmsg+0x8ba/0xbe0 [ 245.293563][ T6826] ? netlink_getsockopt+0x570/0x570 [ 245.299070][ T6826] ? aa_sock_msg_perm+0x94/0x150 [ 245.304053][ T6826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 245.309383][ T6826] ? security_socket_sendmsg+0x7c/0xa0 [ 245.314919][ T6826] sock_write_iter+0x2a6/0x3a0 [ 245.319718][ T6826] ? sock_read_iter+0x380/0x380 [ 245.324614][ T6826] do_iter_readv_writev+0x47e/0x5f0 [ 245.329864][ T6826] ? aa_path_link+0x880/0x880 [ 245.334590][ T6826] ? generic_file_rw_checks+0x280/0x280 [ 245.340272][ T6826] ? common_file_perm+0x171/0x1c0 [ 245.345343][ T6826] ? fsnotify_perm+0x5d/0x560 [ 245.350068][ T6826] ? security_file_permission+0x75/0xa0 [ 245.355665][ T6826] do_iter_write+0x205/0x7b0 [ 245.360292][ T6826] ? import_iovec+0x6f/0xa0 [ 245.364834][ T6826] do_writev+0x281/0x480 [ 245.369122][ T6826] ? do_readv+0x460/0x460 [ 245.373497][ T6826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.379516][ T6826] ? lock_chain_count+0x20/0x20 [ 245.384425][ T6826] ? vtime_user_exit+0x2c8/0x3e0 [ 245.389498][ T6826] ? lockdep_hardirqs_on+0x94/0x140 [ 245.394945][ T6826] do_syscall_64+0x4c/0xa0 [ 245.399485][ T6826] ? clear_bhb_loop+0x30/0x80 [ 245.404198][ T6826] ? clear_bhb_loop+0x30/0x80 [ 245.409125][ T6826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.415084][ T6826] RIP: 0033:0x7f3ae82d7799 [ 245.419562][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.439193][ T6826] RSP: 002b:00007f3ae6531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 245.447712][ T6826] RAX: ffffffffffffffda RBX: 00007f3ae8550fa0 RCX: 00007f3ae82d7799 [ 245.455780][ T6826] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 245.463856][ T6826] RBP: 00007f3ae836dc99 R08: 0000000000000000 R09: 0000000000000000 [ 245.471945][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.479956][ T6826] R13: 00007f3ae8551038 R14: 00007f3ae8550fa0 R15: 00007ffe9f0de648 [ 245.487936][ T6826] [ 245.491059][ T6826] BUG: scheduling while atomic: syz.5.639/6826/0x00000002 [ 245.498287][ T6826] INFO: lockdep is turned off. [ 245.503090][ T6826] Modules linked in: [ 245.507006][ T6826] Preemption disabled at: [ 245.507013][ T6826] [<0000000000000000>] 0x0 [ 245.515830][ T6826] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 245.524594][ T6826] CPU: 0 PID: 6826 Comm: syz.5.639 Tainted: G W syzkaller #0 [ 245.533286][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.543356][ T6826] Call Trace: [ 245.546648][ T6826] [ 245.549585][ T6826] dump_stack_lvl+0x188/0x250 [ 245.554463][ T6826] ? show_regs_print_info+0x20/0x20 [ 245.559694][ T6826] ? load_image+0x400/0x400 [ 245.564214][ T6826] panic+0x2e5/0x810 [ 245.568132][ T6826] ? bpf_jit_dump+0xd0/0xd0 [ 245.572657][ T6826] ? vprintk_emit+0xf9/0x150 [ 245.577267][ T6826] ? _printk+0xda/0x130 [ 245.581432][ T6826] check_panic_on_warn+0x80/0xa0 [ 245.586475][ T6826] __schedule_bug+0x193/0x1f0 [ 245.591163][ T6826] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 245.596545][ T6826] ? 0xffffffffa0048000 [ 245.600868][ T6826] __schedule+0x1324/0x43c0 [ 245.605400][ T6826] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 245.611189][ T6826] ? prepare_to_wait_exclusive+0xc5/0x220 [ 245.616937][ T6826] ? do_raw_spin_lock+0x128/0x2f0 [ 245.622183][ T6826] ? __kthread_should_park+0xa2/0xe0 [ 245.627617][ T6826] ? lock_chain_count+0x20/0x20 [ 245.633233][ T6826] ? lock_release+0xb5/0x8a0 [ 245.637952][ T6826] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 245.643953][ T6826] ? __lock_sock+0x159/0x2b0 [ 245.648729][ T6826] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 245.654646][ T6826] ? release_firmware_map_entry+0x190/0x190 [ 245.660562][ T6826] ? __lock_sock+0x159/0x2b0 [ 245.665165][ T6826] ? __local_bh_enable_ip+0x136/0x1c0 [ 245.670641][ T6826] ? _local_bh_enable+0xa0/0xa0 [ 245.675502][ T6826] schedule+0x11b/0x1e0 [ 245.679675][ T6826] __lock_sock+0x15e/0x2b0 [ 245.684094][ T6826] ? sk_page_frag_refill+0x200/0x200 [ 245.689419][ T6826] ? do_raw_spin_lock+0x128/0x2f0 [ 245.694452][ T6826] ? init_wait_entry+0xd0/0xd0 [ 245.699256][ T6826] ? __rwlock_init+0x140/0x140 [ 245.704021][ T6826] ? rcu_lock_release+0x5/0x20 [ 245.708802][ T6826] ? __lock_sock_fast+0x43/0xe0 [ 245.713798][ T6826] __lock_sock_fast+0x78/0xe0 [ 245.718556][ T6826] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 245.723777][ T6826] mptcp_diag_get_info+0x1fe/0x9e0 [ 245.729005][ T6826] inet_sk_diag_fill+0xf5e/0x1ca0 [ 245.734059][ T6826] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 245.739803][ T6826] ? do_raw_spin_lock+0x128/0x2f0 [ 245.744859][ T6826] ? __rwlock_init+0x140/0x140 [ 245.749638][ T6826] ? inet_diag_bc_sk+0x18b/0x1120 [ 245.754711][ T6826] mptcp_diag_dump+0xce6/0x12b0 [ 245.759740][ T6826] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 245.766347][ T6826] __inet_diag_dump+0x1f6/0x380 [ 245.771266][ T6826] netlink_dump+0x694/0xcf0 [ 245.775829][ T6826] ? netlink_lookup+0x1d0/0x1d0 [ 245.780705][ T6826] ? __inet_diag_dump_start+0x805/0x970 [ 245.786285][ T6826] __netlink_dump_start+0x523/0x700 [ 245.791512][ T6826] inet_diag_handler_cmd+0x1d3/0x2b0 [ 245.796829][ T6826] ? rcu_lock_release+0x20/0x20 [ 245.801705][ T6826] ? inet_diag_handler_get_info+0xb90/0xb90 [ 245.807622][ T6826] ? inet_diag_dump_start+0x20/0x20 [ 245.812836][ T6826] ? inet_diag_dump+0x50/0x50 [ 245.817551][ T6826] ? rcu_lock_release+0x20/0x20 [ 245.822445][ T6826] sock_diag_rcv_msg+0x164/0x3e0 [ 245.827526][ T6826] netlink_rcv_skb+0x1f5/0x440 [ 245.832333][ T6826] ? sock_diag_bind+0xa0/0xa0 [ 245.837032][ T6826] ? netlink_ack+0xb50/0xb50 [ 245.841788][ T6826] ? __lock_acquire+0x7d10/0x7d10 [ 245.846860][ T6826] sock_diag_rcv+0x26/0x40 [ 245.851336][ T6826] netlink_unicast+0x774/0x920 [ 245.856128][ T6826] netlink_sendmsg+0x8ba/0xbe0 [ 245.860914][ T6826] ? netlink_getsockopt+0x570/0x570 [ 245.866122][ T6826] ? aa_sock_msg_perm+0x94/0x150 [ 245.871076][ T6826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 245.876393][ T6826] ? security_socket_sendmsg+0x7c/0xa0 [ 245.881885][ T6826] sock_write_iter+0x2a6/0x3a0 [ 245.886682][ T6826] ? sock_read_iter+0x380/0x380 [ 245.891641][ T6826] do_iter_readv_writev+0x47e/0x5f0 [ 245.896873][ T6826] ? aa_path_link+0x880/0x880 [ 245.901562][ T6826] ? generic_file_rw_checks+0x280/0x280 [ 245.907132][ T6826] ? common_file_perm+0x171/0x1c0 [ 245.912254][ T6826] ? fsnotify_perm+0x5d/0x560 [ 245.916945][ T6826] ? security_file_permission+0x75/0xa0 [ 245.922510][ T6826] do_iter_write+0x205/0x7b0 [ 245.927122][ T6826] ? import_iovec+0x6f/0xa0 [ 245.931675][ T6826] do_writev+0x281/0x480 [ 245.935943][ T6826] ? do_readv+0x460/0x460 [ 245.940295][ T6826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.946287][ T6826] ? lock_chain_count+0x20/0x20 [ 245.951175][ T6826] ? vtime_user_exit+0x2c8/0x3e0 [ 245.957943][ T6826] ? lockdep_hardirqs_on+0x94/0x140 [ 245.963175][ T6826] do_syscall_64+0x4c/0xa0 [ 245.967615][ T6826] ? clear_bhb_loop+0x30/0x80 [ 245.972307][ T6826] ? clear_bhb_loop+0x30/0x80 [ 245.977005][ T6826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.982932][ T6826] RIP: 0033:0x7f3ae82d7799 [ 245.987383][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.006999][ T6826] RSP: 002b:00007f3ae6531028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 246.015447][ T6826] RAX: ffffffffffffffda RBX: 00007f3ae8550fa0 RCX: 00007f3ae82d7799 [ 246.023527][ T6826] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 246.031515][ T6826] RBP: 00007f3ae836dc99 R08: 0000000000000000 R09: 0000000000000000 [ 246.039496][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.047469][ T6826] R13: 00007f3ae8551038 R14: 00007f3ae8550fa0 R15: 00007ffe9f0de648 [ 246.055458][ T6826] [ 246.058853][ T6826] Kernel Offset: disabled [ 246.063219][ T6826] Rebooting in 86400 seconds..