last executing test programs: 2m26.401157102s ago: executing program 2 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb82ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000800003ba67fc79500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 2m21.696381007s ago: executing program 2 (id=157): linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) 2m21.416308511s ago: executing program 2 (id=159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000ffffe0000001e0000002000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff0200"/51], 0x0) 2m21.003825218s ago: executing program 2 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9aa7, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 2m19.249315766s ago: executing program 2 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0xfffffff6, 0x4) recvmmsg$unix(r7, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 2m18.269989672s ago: executing program 2 (id=168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb82ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 2m2.665715472s ago: executing program 32 (id=168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb82ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 11.328216868s ago: executing program 4 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140), 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0xfffffff6, 0x4) recvmmsg$unix(r7, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 8.442451655s ago: executing program 0 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 8.440714205s ago: executing program 4 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0xfffffff6, 0x4) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 7.225031084s ago: executing program 3 (id=612): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000700), 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$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") 6.911730289s ago: executing program 3 (id=616): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x49, 0xa1, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0xa, 0x1, {0x7, 0x25, 0x1, 0x1, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000a40)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff0800040000000000000000886233", 0x3c}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c08fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002180)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003180b3dd9e3fbdee1c6f703f2f46805d094474cdd64dc1cfef858247b1c6daa"]}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 6.82744286s ago: executing program 1 (id=617): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0xffffffffffffff9a, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 6.696359883s ago: executing program 5 (id=618): syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000100)={[{@noquota}, {@prjquota}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x10002}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0x4, 0x517, &(0x7f0000001a80)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x3, &(0x7f00000ed000/0x2000)=nil, &(0x7f0000736000/0x2000)=nil, 0x0, 0x0, 0x0, 0xb43c, 0x0, 0x4, 0x0, 0x31}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) 5.894059905s ago: executing program 4 (id=619): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) close(0x3) 5.848483806s ago: executing program 5 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140), 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 5.722300258s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) socket$inet(0x2, 0x1, 0x0) 4.591219736s ago: executing program 4 (id=622): unshare(0x20040400) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.588325546s ago: executing program 1 (id=623): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x6, 0x5, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_triestat\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$bt_hci(r0, 0x0, 0x8) 4.281486351s ago: executing program 4 (id=624): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x2080) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2c020400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.644640482s ago: executing program 5 (id=625): syz_open_dev$video(&(0x7f0000000440), 0xe0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.633552381s ago: executing program 3 (id=626): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000700), 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$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") 3.608847092s ago: executing program 1 (id=627): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043ef50d3c"], 0xf8) 3.508278034s ago: executing program 5 (id=628): unshare(0x400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) 3.507915934s ago: executing program 5 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140), 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0xfffffff6, 0x4) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 3.377018665s ago: executing program 1 (id=630): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2.694237907s ago: executing program 0 (id=631): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x32, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x100000001}}, 0x40) 2.629636578s ago: executing program 3 (id=632): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0xa, 0x1, 0x0, 0x0, @binary="f47106157a1e"}]}, 0x20}}, 0x4008800) 2.595007199s ago: executing program 0 (id=633): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2.593690859s ago: executing program 4 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) socket$inet(0x2, 0x1, 0x0) 2.516291379s ago: executing program 0 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffa0, 0xffffffffffffffff, 0x80000}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) shutdown(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140), 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf0, 0x0) 2.5153745s ago: executing program 1 (id=636): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x49, 0xa1, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0xa, 0x1, {0x7, 0x25, 0x1, 0x1, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000a40)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff0800040000000000000000886233", 0x3c}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c08fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002180)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003180b3dd9e3fbdee1c6f703f2f46805d094474cdd64dc1cfef858247b1c6daa"]}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2.361795322s ago: executing program 3 (id=637): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x6, 0x5, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_triestat\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write$bt_hci(r0, 0x0, 0x8) 784.194197ms ago: executing program 0 (id=638): syz_open_dev$video(&(0x7f0000000440), 0xe0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 85.304678ms ago: executing program 0 (id=639): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82695cadca00000000000000000d0ec0c1b4e9b1c4369d03ffff50ceaac594b1b3d741dd23691c58d665000000000000000000000000fffffff500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 84.230648ms ago: executing program 3 (id=640): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x8b, 0x2db, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 5 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 41.937098][ T4283] cgroup: Unknown subsys name 'net' [ 42.218226][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.568328][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.285701][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.291947][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.294939][ T4304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.300817][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.303391][ T4299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.305964][ T4299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.308231][ T4299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.310946][ T4299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.317206][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.319431][ T4306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.320387][ T4302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.321440][ T4306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.323971][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.326884][ T4306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.327433][ T4302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.329195][ T4306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.331059][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.333809][ T4306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.334688][ T4302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.336406][ T4306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.338880][ T4302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.341257][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.342078][ T4302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 44.344374][ T4306] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.346165][ T4310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.348815][ T4306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.356734][ T4304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.357907][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.392860][ T4299] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.400900][ T4299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.604609][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 44.645426][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 44.698565][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 44.742994][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 44.757111][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.759017][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.761472][ T4295] device bridge_slave_0 entered promiscuous mode [ 44.770274][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 44.781569][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.783774][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.786291][ T4294] device bridge_slave_0 entered promiscuous mode [ 44.797237][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.799082][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.801655][ T4295] device bridge_slave_1 entered promiscuous mode [ 44.814161][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.816111][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.818583][ T4294] device bridge_slave_1 entered promiscuous mode [ 44.847296][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.849215][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.851658][ T4308] device bridge_slave_0 entered promiscuous mode [ 44.855549][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.857482][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.860054][ T4308] device bridge_slave_1 entered promiscuous mode [ 44.865258][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.890907][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.905488][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.927496][ T4295] team0: Port device team_slave_0 added [ 44.932139][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.935557][ T4295] team0: Port device team_slave_1 added [ 44.938441][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.950611][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.952683][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.955114][ T4305] device bridge_slave_0 entered promiscuous mode [ 44.963323][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.975759][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.977713][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.980116][ T4305] device bridge_slave_1 entered promiscuous mode [ 45.007584][ T4294] team0: Port device team_slave_0 added [ 45.009438][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.011348][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.014036][ T4301] device bridge_slave_0 entered promiscuous mode [ 45.019531][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.026679][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.028559][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.036024][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.040802][ T4294] team0: Port device team_slave_1 added [ 45.047989][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.049907][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.052551][ T4301] device bridge_slave_1 entered promiscuous mode [ 45.056029][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.060402][ T4308] team0: Port device team_slave_0 added [ 45.062901][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.064899][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.071510][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.096487][ T4308] team0: Port device team_slave_1 added [ 45.101600][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.103941][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.110718][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.120524][ T4305] team0: Port device team_slave_0 added [ 45.133870][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.135643][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.142745][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.150075][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.154343][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.157542][ T4305] team0: Port device team_slave_1 added [ 45.159464][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.161251][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.168385][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.172804][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.174632][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.181322][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.284164][ T4295] device hsr_slave_0 entered promiscuous mode [ 45.322552][ T4295] device hsr_slave_1 entered promiscuous mode [ 45.404031][ T4294] device hsr_slave_0 entered promiscuous mode [ 45.442657][ T4294] device hsr_slave_1 entered promiscuous mode [ 45.482438][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.484568][ T4294] Cannot create hsr debugfs directory [ 45.487894][ T4301] team0: Port device team_slave_0 added [ 45.490287][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.493010][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.499686][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.554022][ T4308] device hsr_slave_0 entered promiscuous mode [ 45.612541][ T4308] device hsr_slave_1 entered promiscuous mode [ 45.662453][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.664612][ T4308] Cannot create hsr debugfs directory [ 45.667472][ T4301] team0: Port device team_slave_1 added [ 45.669738][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.671540][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.680119][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.750344][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.752344][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.759100][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.778727][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.780561][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.792975][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.863970][ T4305] device hsr_slave_0 entered promiscuous mode [ 45.902513][ T4305] device hsr_slave_1 entered promiscuous mode [ 45.942474][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.944489][ T4305] Cannot create hsr debugfs directory [ 46.024137][ T4301] device hsr_slave_0 entered promiscuous mode [ 46.062646][ T4301] device hsr_slave_1 entered promiscuous mode [ 46.102418][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.104433][ T4301] Cannot create hsr debugfs directory [ 46.239492][ T4308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.264129][ T4308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.338799][ T4308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.375205][ T4308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.427266][ T4294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.433027][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 46.433104][ T4300] Bluetooth: hci4: command 0x0409 tx timeout [ 46.434806][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 46.436470][ T4300] Bluetooth: hci1: command 0x0409 tx timeout [ 46.438038][ T4299] Bluetooth: hci3: command 0x0409 tx timeout [ 46.464223][ T4294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.507045][ T4294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.554807][ T4294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.639738][ T4295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.675804][ T4295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.721489][ T4295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.770671][ T4295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.882519][ T4305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.915737][ T4305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.994347][ T4305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.039552][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.049180][ T4305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.112842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.116139][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.127790][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.164460][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.205169][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.256105][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.263144][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.265761][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.268673][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.270640][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.277427][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.280523][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.318428][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.337771][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.340567][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.343922][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.345815][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.348051][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.351076][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.371258][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.374746][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.377294][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.379684][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.395162][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.397661][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.400508][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.408209][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.413719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.416315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.426150][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.428780][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.435285][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.449889][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.453756][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.456229][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.458173][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.460606][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.480557][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.486722][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.489353][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.491234][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.496596][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.518763][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.524750][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.550084][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.553364][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.560562][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.565885][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.569214][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.572038][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.591517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.594769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.598395][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.602098][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.613483][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.616084][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.618860][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.620786][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.624341][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.643738][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.646804][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.649365][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.651269][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.654601][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.657519][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.660170][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.668231][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.670476][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.673679][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.684902][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.690350][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.697704][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.701184][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.705992][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.708731][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.711342][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.716434][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.723347][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.739940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.748738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.751266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.755748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.777786][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.781440][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.784049][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.788352][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.803586][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.806198][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.808647][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.811953][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.815769][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.817722][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.834708][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.837338][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.839790][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.853696][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.870801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.874092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.876491][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.878410][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.880996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.896270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.899112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.901732][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.903737][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.906644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.909446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.911964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.915542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.917934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.920273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.933585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.935696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.937694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.941059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.947810][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.959180][ T4308] device veth0_vlan entered promiscuous mode [ 47.961750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.969920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.973337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.976282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.978165][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.980416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.987164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.999987][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.008429][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.017676][ T4308] device veth1_vlan entered promiscuous mode [ 48.024369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.027549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.031431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.034331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.036964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.039576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.042923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.051486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.054898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.069534][ T4308] device veth0_macvtap entered promiscuous mode [ 48.072065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.075280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.078099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.080595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.083745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.086838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.098726][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.101572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.105641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.107678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.124258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.126850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.129465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.131953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.136670][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.140588][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.149597][ T4308] device veth1_macvtap entered promiscuous mode [ 48.155728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.158162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.160593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.169325][ T4294] device veth0_vlan entered promiscuous mode [ 48.179904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.188683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.195905][ T4294] device veth1_vlan entered promiscuous mode [ 48.228328][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.248140][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.251412][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.255089][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.257518][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.260121][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.268464][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.271072][ T212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.295855][ T4308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.298227][ T4308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.300470][ T4308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.309576][ T4308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.315378][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.318272][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.340954][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.343921][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.346632][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.348733][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.361017][ T4295] device veth0_vlan entered promiscuous mode [ 48.366156][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.368718][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.371425][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.374714][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.377634][ T4294] device veth0_macvtap entered promiscuous mode [ 48.381983][ T4294] device veth1_macvtap entered promiscuous mode [ 48.396506][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.400084][ T4295] device veth1_vlan entered promiscuous mode [ 48.416764][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.424975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.427603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.430195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.439203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.441380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.510312][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.513457][ T4310] Bluetooth: hci1: command 0x041b tx timeout [ 48.513492][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 48.513517][ T4310] Bluetooth: hci4: command 0x041b tx timeout [ 48.513541][ T4310] Bluetooth: hci2: command 0x041b tx timeout [ 48.519975][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.523741][ T4299] Bluetooth: hci3: command 0x041b tx timeout [ 48.527488][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.532609][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.536225][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.538940][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.542068][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.548688][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.563605][ T4301] device veth0_vlan entered promiscuous mode [ 48.579546][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.583057][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.585931][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.588558][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.591248][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.595325][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.608127][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.610310][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.611136][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.618289][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.622040][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.635026][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.636140][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.637676][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.639282][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.642560][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.646267][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.649047][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.651925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.658160][ T4295] device veth0_macvtap entered promiscuous mode [ 48.670684][ T4294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.676833][ T4294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.679114][ T4294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.681575][ T4294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.686848][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.691175][ T4295] device veth1_macvtap entered promiscuous mode [ 48.696845][ T4301] device veth1_vlan entered promiscuous mode [ 48.708744][ T4305] device veth0_vlan entered promiscuous mode [ 48.720695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.724233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.726814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.729567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.732851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.739183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.752621][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.755416][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.758045][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.760866][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.770278][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.781993][ T4305] device veth1_vlan entered promiscuous mode [ 48.809881][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.813175][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.815661][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.818383][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.837738][ T4377] loop2: detected capacity change from 0 to 128 [ 48.840558][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.858344][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.861087][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.883661][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.887573][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.919418][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.923576][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.926230][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.933120][ T4295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.935436][ T4295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.937625][ T4295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.940002][ T4295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.948293][ T4305] device veth0_macvtap entered promiscuous mode [ 48.956724][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.959423][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.961995][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.991197][ T4305] device veth1_macvtap entered promiscuous mode [ 49.002030][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.005508][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.008209][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.019791][ T4301] device veth0_macvtap entered promiscuous mode [ 49.040057][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.050848][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.059457][ T4301] device veth1_macvtap entered promiscuous mode [ 49.063985][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.066775][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.069342][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.072071][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.075471][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.078125][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.081788][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.086730][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.089482][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.092046][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.095634][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.098246][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.100938][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.105114][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.107994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.110574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.113200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.115722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.118312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.120927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.124217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.149304][ T4305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.152155][ T4305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.156153][ T4305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158437][ T4305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.178401][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.181209][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.185103][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.187960][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.190592][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.194485][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.196989][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.199643][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.205666][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.212486][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.215254][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.218408][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.221115][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.223859][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.226540][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.229187][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.231928][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.236325][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.249496][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.253049][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.258943][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.261593][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.269450][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.271637][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.274187][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276562][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.278861][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.281119][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.322439][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.328786][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.350655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.354590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.363153][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.365229][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.368539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.380048][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.383639][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.388891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.438343][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.441188][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.449941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.471719][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.492909][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.510299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.544455][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.546668][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.549995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.592772][ T4310] Bluetooth: hci3: command 0x040f tx timeout [ 50.594704][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 50.596298][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 50.597927][ T4310] Bluetooth: hci0: command 0x040f tx timeout [ 50.599498][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 50.674444][ T4392] loop1: detected capacity change from 0 to 1024 [ 50.739230][ T4398] loop4: detected capacity change from 0 to 2048 [ 50.879128][ T4398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.893550][ T4392] hfsplus: request for non-existent node 3 in B*Tree [ 50.895508][ T4392] hfsplus: request for non-existent node 3 in B*Tree [ 51.173229][ T4407] loop2: detected capacity change from 0 to 512 [ 51.255904][ T4407] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.258751][ T4407] EXT4-fs (loop2): group descriptors corrupted! [ 51.757910][ T4398] Zero length message leads to an empty skb [ 51.805097][ T4412] loop3: detected capacity change from 0 to 512 [ 51.814795][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.858036][ T4414] loop1: detected capacity change from 0 to 1024 [ 51.887946][ T4414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.917982][ T4412] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.11: corrupted inode contents [ 51.921797][ T4418] loop2: detected capacity change from 0 to 512 [ 51.941841][ T4412] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.11: mark_inode_dirty error [ 51.957214][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 51.959653][ T4412] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.11: corrupted inode contents [ 51.967751][ T4412] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.11: mark_inode_dirty error [ 51.967845][ T4418] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.14: casefold flag without casefold feature [ 51.979132][ T4412] Quota error (device loop3): write_blk: dquota write failed [ 51.981330][ T4412] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.987558][ T4412] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.11: Failed to acquire dquot type 0 [ 52.006187][ T4412] EXT4-fs (loop3): 1 orphan inode deleted [ 52.007719][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.030157][ T4418] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.14: couldn't read orphan inode 15 (err -117) [ 52.041288][ T4418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.046322][ T4340] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.049067][ T4340] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:5: Failed to release dquot type 1 [ 53.414446][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 53.418459][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 53.421903][ T4304] Bluetooth: hci2: command 0x0419 tx timeout [ 53.424971][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 53.939852][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 54.011873][ T4435] loop4: detected capacity change from 0 to 512 [ 54.073906][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 54.083885][ T4435] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.15: casefold flag without casefold feature [ 54.104010][ T4435] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.15: couldn't read orphan inode 15 (err -117) [ 54.155348][ T4435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.251754][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 56.262883][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 56.299539][ T4459] loop2: detected capacity change from 0 to 2048 [ 56.361899][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.700639][ T4473] loop0: detected capacity change from 0 to 512 [ 56.787848][ T4473] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.790613][ T4473] EXT4-fs (loop0): group descriptors corrupted! [ 57.315795][ T4470] loop1: detected capacity change from 0 to 256 [ 57.552189][ C1] sched: RT throttling activated [ 57.756116][ T4478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'. [ 58.938576][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 61.918285][ T4499] device veth0_to_team entered promiscuous mode [ 62.957382][ T4522] device veth0_to_team entered promiscuous mode [ 63.737874][ T4525] loop2: detected capacity change from 0 to 2048 [ 63.894255][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.048080][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 64.603500][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.605670][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.063398][ T4547] loop3: detected capacity change from 0 to 256 [ 67.432510][ T4556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 69.175586][ T4570] device veth0_to_team entered promiscuous mode [ 69.675371][ T24] cfg80211: failed to load regulatory.db [ 73.121163][ T4595] loop3: detected capacity change from 0 to 512 [ 73.201857][ T4595] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.65: casefold flag without casefold feature [ 73.211150][ T4595] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.65: couldn't read orphan inode 15 (err -117) [ 73.246285][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.805888][ T4606] loop4: detected capacity change from 0 to 512 [ 74.996799][ T4606] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.67: casefold flag without casefold feature [ 75.008658][ T4606] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.67: couldn't read orphan inode 15 (err -117) [ 75.555967][ T4606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.858446][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 76.761274][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 79.084236][ T4632] loop1: detected capacity change from 0 to 2048 [ 79.211900][ T4632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.465198][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 81.270981][ T4664] device veth0_to_team entered promiscuous mode [ 81.671177][ T4672] loop3: detected capacity change from 0 to 512 [ 81.727968][ T4672] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.82: casefold flag without casefold feature [ 81.864832][ T4672] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.82: couldn't read orphan inode 15 (err -117) [ 81.868435][ T4672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.423955][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 84.341541][ T4692] loop3: detected capacity change from 0 to 512 [ 84.385929][ T4692] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.87: casefold flag without casefold feature [ 84.399426][ T4692] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.87: couldn't read orphan inode 15 (err -117) [ 84.407252][ T4692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.609734][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 88.820862][ T4734] loop3: detected capacity change from 0 to 512 [ 88.842601][ T4734] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.102: casefold flag without casefold feature [ 88.846398][ T4734] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.102: couldn't read orphan inode 15 (err -117) [ 88.856607][ T4734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.404123][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 90.707057][ T4757] loop0: detected capacity change from 0 to 512 [ 90.744969][ T4757] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.108: casefold flag without casefold feature [ 90.774563][ T4757] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.108: couldn't read orphan inode 15 (err -117) [ 90.796272][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.651269][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 94.345559][ T4791] Cannot find del_set index 4 as target [ 99.241425][ T4833] Cannot find del_set index 4 as target [ 103.907976][ T4875] Cannot find del_set index 4 as target [ 104.853254][ T4894] device veth0_to_team entered promiscuous mode [ 108.897938][ T4939] Cannot find del_set index 4 as target [ 108.941593][ T4939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.531760][ T4299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.554089][ T4299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.557075][ T4299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.559704][ T4299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.562152][ T4310] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.564796][ T4310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.655900][ T5074] loop0: detected capacity change from 0 to 512 [ 125.733278][ T5074] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.207: casefold flag without casefold feature [ 125.736942][ T5074] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.207: couldn't read orphan inode 15 (err -117) [ 125.742875][ T5074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.953459][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.955798][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.253310][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 127.663224][ T4299] Bluetooth: hci5: command 0x0409 tx timeout [ 128.213493][ T5103] Cannot find del_set index 4 as target [ 128.281593][ T5104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.120516][ T5109] loop0: detected capacity change from 0 to 512 [ 129.802952][ T4299] Bluetooth: hci5: command 0x041b tx timeout [ 130.334217][ T5109] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.214: casefold flag without casefold feature [ 130.344471][ T5109] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.214: couldn't read orphan inode 15 (err -117) [ 130.353775][ T5109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.505233][ T4378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.227162][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 131.231055][ T4378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.952329][ T4299] Bluetooth: hci5: command 0x040f tx timeout [ 132.088779][ T5140] loop4: detected capacity change from 0 to 512 [ 132.125939][ T5140] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.220: casefold flag without casefold feature [ 132.143937][ T4378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.149047][ T5140] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.220: couldn't read orphan inode 15 (err -117) [ 132.207639][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.425644][ T4378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.003276][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 133.132762][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 133.331069][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.348804][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.351463][ T5064] device bridge_slave_0 entered promiscuous mode [ 133.397512][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.399502][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.402771][ T5064] device bridge_slave_1 entered promiscuous mode [ 133.418026][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.420654][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.039900][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 134.041092][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.055130][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.007836][ T5064] team0: Port device team_slave_0 added [ 135.060154][ T5064] team0: Port device team_slave_1 added [ 135.113001][ T5172] netlink: 'syz.4.225': attribute type 4 has an invalid length. [ 136.635702][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.696336][ T5193] loop0: detected capacity change from 0 to 512 [ 136.714439][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.721667][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.738373][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.740475][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.758080][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.800670][ T5193] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.231: casefold flag without casefold feature [ 136.804599][ T5193] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 136.828475][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.757104][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 137.834067][ T5064] device hsr_slave_0 entered promiscuous mode [ 137.882663][ T5064] device hsr_slave_1 entered promiscuous mode [ 137.923619][ T5219] Cannot find del_set index 4 as target [ 137.932390][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.935192][ T5064] Cannot create hsr debugfs directory [ 138.002514][ T5223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.325748][ T5064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.383951][ T5064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.502216][ T5064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.564364][ T5064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.239513][ T5271] loop3: detected capacity change from 0 to 512 [ 141.250762][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.522890][ T5271] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.245: casefold flag without casefold feature [ 142.532938][ T5271] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.245: couldn't read orphan inode 15 (err -117) [ 142.545756][ T5271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.559896][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.564672][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.602545][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.745498][ T5285] loop4: detected capacity change from 0 to 512 [ 142.789727][ T5285] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.247: casefold flag without casefold feature [ 142.802514][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.805136][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.807610][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.809530][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.824032][ T5285] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.247: couldn't read orphan inode 15 (err -117) [ 142.836027][ T5285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.169154][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.182109][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.340436][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.342513][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.355974][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.665233][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 143.819517][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.842856][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.975074][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 145.339807][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.347827][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.357591][ T5314] netlink: 'syz.3.249': attribute type 4 has an invalid length. [ 145.476660][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.480731][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.492928][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.503057][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.512853][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.627449][ T5064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.630329][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.670576][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.683462][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.747190][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.593079][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.930489][ T5351] loop1: detected capacity change from 0 to 512 [ 147.241568][ T5351] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.259: casefold flag without casefold feature [ 147.566631][ T5351] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.259: couldn't read orphan inode 15 (err -117) [ 147.686099][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.343928][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.721443][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 148.882464][ T4378] device hsr_slave_0 left promiscuous mode [ 148.900073][ T5370] loop1: detected capacity change from 0 to 512 [ 148.914114][ T4378] device hsr_slave_1 left promiscuous mode [ 148.943089][ T5370] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.261: casefold flag without casefold feature [ 148.958828][ T5370] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.261: couldn't read orphan inode 15 (err -117) [ 148.965690][ T5370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.242501][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.244675][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.248779][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.250854][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.284234][ T4378] device bridge_slave_1 left promiscuous mode [ 150.286923][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.358493][ T4378] device bridge_slave_0 left promiscuous mode [ 150.360372][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.478550][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 150.665117][ T4378] device veth1_macvtap left promiscuous mode [ 150.667244][ T4378] device veth0_macvtap left promiscuous mode [ 150.669122][ T4378] device veth1_vlan left promiscuous mode [ 150.671085][ T4378] device veth0_vlan left promiscuous mode [ 152.381821][ T5404] loop4: detected capacity change from 0 to 512 [ 152.393059][ T5404] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.270: casefold flag without casefold feature [ 152.396764][ T5404] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.270: couldn't read orphan inode 15 (err -117) [ 152.400202][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.350943][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 155.595367][ T4378] team0 (unregistering): Port device team_slave_1 removed [ 155.794263][ T4378] team0 (unregistering): Port device team_slave_0 removed [ 155.973806][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.173103][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.709308][ T4378] bond0 (unregistering): Released all slaves [ 159.372929][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.375613][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.377855][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.517758][ T5444] loop1: detected capacity change from 0 to 512 [ 159.583740][ T5444] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.280: casefold flag without casefold feature [ 159.592663][ T5444] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.280: couldn't read orphan inode 15 (err -117) [ 159.611035][ T5444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.539056][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.543651][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 160.545756][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.572743][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.575544][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.578625][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.580976][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.607595][ T5468] Cannot find del_set index 4 as target [ 160.659209][ T5468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.665558][ T5064] device veth0_vlan entered promiscuous mode [ 160.673005][ T5064] device veth1_vlan entered promiscuous mode [ 160.898393][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.901244][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.909936][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.914031][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.034190][ T5064] device veth0_macvtap entered promiscuous mode [ 162.039073][ T5064] device veth1_macvtap entered promiscuous mode [ 162.098280][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.101104][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.122345][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.132523][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.135296][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.157046][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.172347][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.175380][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.200915][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.217752][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.220612][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.241685][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.253244][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.260650][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.271593][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.276450][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.286477][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.300300][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.377192][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.379976][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.414373][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.417167][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.419905][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.460718][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.453225][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.486113][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.488539][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.490964][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.709869][ T5516] loop1: detected capacity change from 0 to 512 [ 163.723518][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.725913][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.761240][ T5516] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.292: casefold flag without casefold feature [ 163.765629][ T5516] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.292: couldn't read orphan inode 15 (err -117) [ 163.775922][ T5516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.796704][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.803567][ T4624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.805829][ T4624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.809599][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.783153][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 168.132664][ T5586] loop4: detected capacity change from 0 to 512 [ 170.085780][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 170.088706][ T4299] Bluetooth: hci0: command 0x0406 tx timeout [ 170.090450][ T4310] Bluetooth: hci3: command 0x0406 tx timeout [ 170.092215][ T4300] Bluetooth: hci2: command 0x0406 tx timeout [ 170.105087][ T5592] device veth0_to_team entered promiscuous mode [ 170.142543][ T5586] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.307: casefold flag without casefold feature [ 170.155869][ T5586] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.307: couldn't read orphan inode 15 (err -117) [ 170.164854][ T5586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.266069][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 171.574070][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 172.576739][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 172.580374][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 172.611088][ T5638] device vlan2 entered promiscuous mode [ 172.673095][ T5638] device gretap0 entered promiscuous mode [ 172.733932][ T5641] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 173.378204][ T5655] loop0: detected capacity change from 0 to 512 [ 173.483446][ T5655] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.324: casefold flag without casefold feature [ 173.492655][ T5655] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.324: couldn't read orphan inode 15 (err -117) [ 173.504642][ T5648] bond1: (slave gretap1): making interface the new active one [ 173.507571][ T5655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.533352][ T5648] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 173.714570][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 174.426655][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 176.611188][ T5704] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 176.618893][ T5710] loop5: detected capacity change from 0 to 512 [ 176.684903][ T5710] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.337: casefold flag without casefold feature [ 176.740481][ T5710] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.337: couldn't read orphan inode 15 (err -117) [ 176.744046][ T5710] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.686504][ T5064] EXT4-fs (loop5): unmounting filesystem. [ 178.920084][ T5766] netlink: 'syz.0.353': attribute type 25 has an invalid length. [ 178.929629][ T5766] netlink: 184 bytes leftover after parsing attributes in process `syz.0.353'. [ 179.098335][ T5775] loop0: detected capacity change from 0 to 512 [ 179.143371][ T5775] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.358: casefold flag without casefold feature [ 179.187232][ T5775] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.358: couldn't read orphan inode 15 (err -117) [ 179.192373][ T5775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.209114][ T5785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 179.220236][ T5785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 180.215005][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 181.044353][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 181.185244][ T5827] netlink: 'syz.5.369': attribute type 10 has an invalid length. [ 181.195415][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.369'. [ 181.203049][ T5827] device batadv0 entered promiscuous mode [ 181.220852][ T5827] bridge0: port 3(batadv0) entered blocking state [ 181.231097][ T5827] bridge0: port 3(batadv0) entered disabled state [ 181.254576][ T5827] bridge0: port 3(batadv0) entered blocking state [ 181.256864][ T5827] bridge0: port 3(batadv0) entered forwarding state [ 181.428528][ T5827] batman_adv: batadv0: Adding interface: dummy0 [ 181.430404][ T5827] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.443502][ T5827] batman_adv: batadv0: Interface activated: dummy0 [ 182.141401][ T4368] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 182.144354][ T4368] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 182.148970][ T5831] batadv0: mtu less than device minimum [ 182.155637][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.161539][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.167434][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.173185][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.178886][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.184663][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.190242][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.196052][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.201709][ T5831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 182.463051][ T5855] loop0: detected capacity change from 0 to 512 [ 182.499847][ T5855] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.375: casefold flag without casefold feature [ 182.529794][ T5855] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.375: couldn't read orphan inode 15 (err -117) [ 182.567020][ T5855] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.176381][ T5885] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 184.265785][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.381'. [ 184.297423][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 184.333020][ T5884] device bridge0 entered promiscuous mode [ 184.370087][ T5884] bridge0: port 3(macsec1) entered blocking state [ 184.405425][ T5884] bridge0: port 3(macsec1) entered disabled state [ 184.426459][ T5884] device bridge0 left promiscuous mode [ 184.441883][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'. [ 184.549978][ T5895] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 184.648099][ T5899] bond1: (slave gretap1): making interface the new active one [ 184.771403][ T5899] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.065558][ T5953] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 187.132155][ T5957] loop4: detected capacity change from 0 to 512 [ 187.145952][ T5957] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.399: casefold flag without casefold feature [ 187.149962][ T5957] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.399: couldn't read orphan inode 15 (err -117) [ 187.158814][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.543429][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.545112][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.555969][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 200.192647][ C1] net_ratelimit: 10 callbacks suppressed [ 200.192664][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 201.140628][ T6007] loop1: detected capacity change from 0 to 512 [ 201.187579][ T6007] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.411: casefold flag without casefold feature [ 201.195810][ T6007] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.411: couldn't read orphan inode 15 (err -117) [ 201.213217][ T6007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.222684][ T6010] device wireguard0 entered promiscuous mode [ 202.136614][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 202.163573][ T6023] device wireguard0 entered promiscuous mode [ 203.463140][ T6056] loop5: detected capacity change from 0 to 2048 [ 203.479157][ T6056] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.542005][ T6056] syz.5.421: attempt to access beyond end of device [ 203.542005][ T6056] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 203.548614][ T6064] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.567787][ T6060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.422'. [ 204.927599][ T6094] device wireguard0 entered promiscuous mode [ 205.359313][ T6118] loop5: detected capacity change from 0 to 2048 [ 205.402715][ T6121] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.427835][ T6123] loop1: detected capacity change from 0 to 256 [ 205.429984][ T6123] ======================================================= [ 205.429984][ T6123] WARNING: The mand mount option has been deprecated and [ 205.429984][ T6123] and is ignored by this kernel. Remove the mand [ 205.429984][ T6123] option from the mount to silence this warning. [ 205.429984][ T6123] ======================================================= [ 205.450325][ T4304] Bluetooth: hci5: adv larger than maximum supported [ 205.450410][ T4304] Bluetooth: hci5: Malformed LE Event: 0x0d [ 205.463588][ T6123] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.466932][ T6123] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 205.478746][ T6123] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 206.473224][ T6140] loop3: detected capacity change from 0 to 1024 [ 206.614666][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.617048][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.665222][ T6151] loop3: detected capacity change from 0 to 256 [ 206.737212][ T6153] loop4: detected capacity change from 0 to 512 [ 206.841043][ T6155] loop0: detected capacity change from 0 to 4096 [ 206.861701][ T6153] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 206.899653][ T6153] loop4: detected capacity change from 0 to 64 [ 208.139728][ T6190] loop1: detected capacity change from 0 to 256 [ 208.188824][ T6190] FAT-fs (loop1): Directory bread(block 64) failed [ 208.190864][ T6190] FAT-fs (loop1): Directory bread(block 65) failed [ 208.193453][ T6190] FAT-fs (loop1): Directory bread(block 66) failed [ 208.195320][ T6190] FAT-fs (loop1): Directory bread(block 67) failed [ 208.195496][ T6194] capability: warning: `syz.0.464' uses 32-bit capabilities (legacy support in use) [ 208.197043][ T6190] FAT-fs (loop1): Directory bread(block 68) failed [ 208.201318][ T6190] FAT-fs (loop1): Directory bread(block 69) failed [ 208.204361][ T6190] FAT-fs (loop1): Directory bread(block 70) failed [ 208.206452][ T6190] FAT-fs (loop1): Directory bread(block 71) failed [ 208.208158][ T6190] FAT-fs (loop1): Directory bread(block 72) failed [ 208.209899][ T6190] FAT-fs (loop1): Directory bread(block 73) failed [ 208.512577][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 208.526155][ T6210] Cannot find del_set index 4 as target [ 208.528748][ T6210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.898359][ T6246] loop4: detected capacity change from 0 to 16 [ 209.946846][ T6246] erofs: (device loop4): mounted with root inode @ nid 36. [ 209.978663][ T4304] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 209.984526][ T6246] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 209.987810][ T6246] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 210.051896][ T6252] loop1: detected capacity change from 0 to 65 [ 210.081373][ T6252] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 210.591269][ T6271] Cannot find del_set index 4 as target [ 210.649534][ T6274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.109097][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.111529][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.362366][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 212.504381][ T6321] Cannot find del_set index 4 as target [ 212.686718][ T6324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.874225][ T6359] loop3: detected capacity change from 0 to 64 [ 213.928591][ T6359] hfs: bad catalog folder thread [ 214.080979][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.094697][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.100018][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.109718][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.211632][ T6365] loop3: detected capacity change from 0 to 4096 [ 214.232760][ T6365] ntfs3: Unknown parameter '' [ 214.256179][ T6366] loop1: detected capacity change from 0 to 2048 [ 215.666408][ T6389] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.818377][ T6400] loop3: detected capacity change from 0 to 256 [ 215.836014][ T6400] FAT-fs (loop3): Directory bread(block 64) failed [ 215.837835][ T6400] FAT-fs (loop3): Directory bread(block 65) failed [ 215.839684][ T6400] FAT-fs (loop3): Directory bread(block 66) failed [ 215.841591][ T6400] FAT-fs (loop3): Directory bread(block 67) failed [ 215.887493][ T6400] FAT-fs (loop3): Directory bread(block 68) failed [ 215.889232][ T6400] FAT-fs (loop3): Directory bread(block 69) failed [ 215.891052][ T6400] FAT-fs (loop3): Directory bread(block 70) failed [ 215.911823][ T6400] FAT-fs (loop3): Directory bread(block 71) failed [ 215.917344][ T6400] FAT-fs (loop3): Directory bread(block 72) failed [ 215.919082][ T6400] FAT-fs (loop3): Directory bread(block 73) failed [ 216.897661][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.900066][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.110910][ T6420] loop5: detected capacity change from 0 to 4096 [ 217.118798][ T6420] ntfs3: Unknown parameter '' [ 218.745122][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.767078][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.155111][ T6478] loop1: detected capacity change from 0 to 32768 [ 220.158007][ T6478] (syz.1.545,6478,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 220.160737][ T6478] (syz.1.545,6478,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 220.270108][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.272740][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.390705][ T5983] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.211439][ T6494] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 222.581372][ T6515] loop1: detected capacity change from 0 to 32768 [ 222.586556][ T6515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.556 (6515) [ 222.599100][ T6515] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.602125][ T6515] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 222.604706][ T6515] BTRFS info (device loop1): setting nodatasum [ 222.606318][ T6515] BTRFS info (device loop1): force zlib compression, level 3 [ 222.608302][ T6515] BTRFS info (device loop1): metadata ratio 1 [ 222.609841][ T6515] BTRFS info (device loop1): enabling ssd optimizations [ 222.611582][ T6515] BTRFS info (device loop1): allowing degraded mounts [ 222.613413][ T6515] BTRFS info (device loop1): using free space tree [ 223.669829][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.693289][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.723285][ T4294] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.736651][ T6566] loop0: detected capacity change from 0 to 512 [ 224.872952][ T6566] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.566: casefold flag without casefold feature [ 224.876514][ T6566] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.566: couldn't read orphan inode 15 (err -117) [ 224.887179][ T6566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.825293][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 227.172297][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.191753][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.365613][ T4344] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 227.636676][ T4344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.640535][ T4344] usb 1-1: not running at top speed; connect to a high speed hub [ 227.955206][ T4344] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 227.958739][ T4344] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 228.020765][ T4344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.350507][ T4344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.364663][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.422721][ T6605] loop1: detected capacity change from 0 to 2048 [ 228.429937][ T4344] usb 1-1: Product: syz [ 228.431166][ T4344] usb 1-1: Manufacturer: syz [ 228.432663][ T4344] usb 1-1: SerialNumber: syz [ 228.485856][ T6611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.543283][ T4304] Bluetooth: hci0: adv larger than maximum supported [ 228.543332][ T4304] Bluetooth: hci0: Malformed LE Event: 0x0d [ 228.667697][ T6615] loop5: detected capacity change from 0 to 512 [ 229.783233][ T6615] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.581: casefold flag without casefold feature [ 229.787003][ T6615] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.581: couldn't read orphan inode 15 (err -117) [ 229.817545][ T4344] usb 1-1: 0:2 : does not exist [ 229.819989][ T6615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 230.831165][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 230.842471][ T27] audit: type=1326 audit(230.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35ad28 code=0x7ffc0000 [ 230.849575][ T27] audit: type=1326 audit(230.814:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff8d35ad28 code=0x7ffc0000 [ 230.855997][ T4344] usb 1-1: USB disconnect, device number 2 [ 230.862026][ T27] audit: type=1326 audit(230.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35ad28 code=0x7ffc0000 [ 230.875081][ T27] audit: type=1326 audit(230.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35ad28 code=0x7ffc0000 [ 230.885655][ T6637] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 230.900780][ T5064] EXT4-fs (loop5): unmounting filesystem. [ 230.921528][ T6637] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 232.004911][ T6485] udevd[6485]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.298270][ T6654] loop0: detected capacity change from 0 to 2048 [ 232.387563][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.391997][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.396431][ T6658] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.552510][ T4304] Bluetooth: hci2: adv larger than maximum supported [ 232.552560][ T4304] Bluetooth: hci2: Malformed LE Event: 0x0d [ 234.055989][ T6667] netlink: 'syz.1.595': attribute type 4 has an invalid length. [ 234.715959][ T6669] loop4: detected capacity change from 0 to 512 [ 234.809776][ T6669] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.598: casefold flag without casefold feature [ 234.819820][ T6669] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.598: couldn't read orphan inode 15 (err -117) [ 234.826750][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.871838][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 235.739484][ T6686] loop0: detected capacity change from 0 to 8 [ 235.747296][ T6686] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 235.939320][ T5983] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.175814][ T6699] Cannot find del_set index 4 as target [ 237.482445][ T6694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.892039][ T6720] loop3: detected capacity change from 0 to 512 [ 239.998590][ T6726] loop1: detected capacity change from 0 to 2048 [ 240.000934][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.612: casefold flag without casefold feature [ 240.013136][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.612: couldn't read orphan inode 15 (err -117) [ 240.026624][ T6720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.070749][ T6728] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.112009][ T4304] Bluetooth: hci0: adv larger than maximum supported [ 240.112031][ T4304] Bluetooth: hci0: Malformed LE Event: 0x0d [ 240.125473][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 240.182064][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.185203][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.317799][ T6734] loop5: detected capacity change from 0 to 512 [ 240.341899][ T6734] ext3: Unknown parameter 'fsmagic' [ 240.473541][ T6736] netlink: 'syz.3.616': attribute type 4 has an invalid length. [ 240.632882][ T6630] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.156154][ T6738] bridge0: port 3(syz_tun) entered blocking state [ 241.158658][ T6738] bridge0: port 3(syz_tun) entered disabled state [ 241.179116][ T6738] device syz_tun entered promiscuous mode [ 241.181168][ T6738] bridge0: port 3(syz_tun) entered blocking state [ 241.183210][ T6738] bridge0: port 3(syz_tun) entered forwarding state [ 243.529167][ T4304] Bluetooth: hci0: Malformed LE Event: 0x0d [ 243.568180][ T6771] loop3: detected capacity change from 0 to 512 [ 243.624351][ T6771] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.626: casefold flag without casefold feature [ 243.637947][ T6771] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.626: couldn't read orphan inode 15 (err -117) [ 243.879997][ T6771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.388377][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 244.545382][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.547939][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.934347][ T6801] netlink: 'syz.1.636': attribute type 4 has an invalid length. [ 247.005428][ T6815] loop3: detected capacity change from 0 to 64 [ 247.044600][ T6815] ================================================================== [ 247.046715][ T6815] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x310/0x454 [ 247.048799][ T6815] Write of size 94 at addr ffff0000d142f700 by task syz.3.640/6815 [ 247.050911][ T6815] [ 247.051544][ T6815] CPU: 0 PID: 6815 Comm: syz.3.640 Not tainted 6.1.133-syzkaller #0 [ 247.053779][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.056489][ T6815] Call trace: [ 247.057345][ T6815] dump_backtrace+0x1c8/0x1f4 [ 247.058731][ T6815] show_stack+0x2c/0x3c [ 247.059877][ T6815] dump_stack_lvl+0x108/0x170 [ 247.061153][ T6815] print_report+0x174/0x4c0 [ 247.062408][ T6815] kasan_report+0xd4/0x130 [ 247.063660][ T6815] kasan_check_range+0x264/0x2a4 [ 247.065113][ T6815] memcpy+0x60/0x90 [ 247.066179][ T6815] hfs_bnode_read_key+0x310/0x454 [ 247.067573][ T6815] hfs_brec_insert+0x620/0x97c [ 247.068934][ T6815] hfs_cat_create+0x340/0x71c [ 247.070273][ T6815] hfs_create+0x70/0xe4 [ 247.071532][ T6815] path_openat+0xeac/0x2548 [ 247.072808][ T6815] do_filp_open+0x1bc/0x3cc [ 247.074075][ T6815] do_sys_openat2+0x128/0x3e0 [ 247.075445][ T6815] __arm64_sys_openat+0x1f0/0x240 [ 247.076855][ T6815] invoke_syscall+0x98/0x2bc [ 247.078153][ T6815] el0_svc_common+0x138/0x258 [ 247.079408][ T6815] do_el0_svc+0x58/0x13c [ 247.080618][ T6815] el0_svc+0x58/0x168 [ 247.081729][ T6815] el0t_64_sync_handler+0x84/0xf0 [ 247.083186][ T6815] el0t_64_sync+0x18c/0x190 [ 247.084526][ T6815] [ 247.085129][ T6815] Allocated by task 6815: [ 247.086365][ T6815] kasan_set_track+0x4c/0x80 [ 247.087641][ T6815] kasan_save_alloc_info+0x24/0x30 [ 247.089032][ T6815] __kasan_kmalloc+0xac/0xc4 [ 247.090319][ T6815] __kmalloc+0xd8/0x1c4 [ 247.091507][ T6815] hfs_find_init+0x88/0x1c8 [ 247.092724][ T6815] hfs_cat_create+0x168/0x71c [ 247.093951][ T6815] hfs_create+0x70/0xe4 [ 247.095094][ T6815] path_openat+0xeac/0x2548 [ 247.096363][ T6815] do_filp_open+0x1bc/0x3cc [ 247.097741][ T6815] do_sys_openat2+0x128/0x3e0 [ 247.099036][ T6815] __arm64_sys_openat+0x1f0/0x240 [ 247.100397][ T6815] invoke_syscall+0x98/0x2bc [ 247.101725][ T6815] el0_svc_common+0x138/0x258 [ 247.103033][ T6815] do_el0_svc+0x58/0x13c [ 247.104274][ T6815] el0_svc+0x58/0x168 [ 247.105386][ T6815] el0t_64_sync_handler+0x84/0xf0 [ 247.106730][ T6815] el0t_64_sync+0x18c/0x190 [ 247.107929][ T6815] [ 247.108617][ T6815] Last potentially related work creation: [ 247.110170][ T6815] kasan_save_stack+0x40/0x70 [ 247.111462][ T6815] __kasan_record_aux_stack+0xcc/0xe8 [ 247.113042][ T6815] kasan_record_aux_stack_noalloc+0x14/0x20 [ 247.114717][ T6815] call_rcu+0xfc/0xa40 [ 247.115851][ T6815] replace+0x218/0x52c [ 247.116988][ T6815] resize+0xe74/0x2498 [ 247.118088][ T6815] fib_insert_alias+0xb00/0xef0 [ 247.119493][ T6815] fib_table_insert+0x624/0x1574 [ 247.120864][ T6815] fib_magic+0x300/0x4b8 [ 247.122018][ T6815] fib_add_ifaddr+0x118/0x4ec [ 247.123338][ T6815] fib_inetaddr_event+0x12c/0x200 [ 247.124772][ T6815] blocking_notifier_call_chain+0xf0/0x198 [ 247.126305][ T6815] __inet_insert_ifa+0x8b0/0xa90 [ 247.127739][ T6815] inet_rtm_newaddr+0xe78/0x1748 [ 247.129196][ T6815] rtnetlink_rcv_msg+0x734/0xd9c [ 247.130568][ T6815] netlink_rcv_skb+0x20c/0x3b8 [ 247.131902][ T6815] rtnetlink_rcv+0x28/0x38 [ 247.133195][ T6815] netlink_unicast+0x65c/0x898 [ 247.134524][ T6815] netlink_sendmsg+0x844/0xb28 [ 247.135919][ T6815] __sys_sendto+0x3b8/0x508 [ 247.137201][ T6815] __arm64_sys_sendto+0xd8/0xf8 [ 247.138582][ T6815] invoke_syscall+0x98/0x2bc [ 247.139891][ T6815] el0_svc_common+0x138/0x258 [ 247.141199][ T6815] do_el0_svc+0x58/0x13c [ 247.142396][ T6815] el0_svc+0x58/0x168 [ 247.143530][ T6815] el0t_64_sync_handler+0x84/0xf0 [ 247.144941][ T6815] el0t_64_sync+0x18c/0x190 [ 247.146177][ T6815] [ 247.146802][ T6815] The buggy address belongs to the object at ffff0000d142f700 [ 247.146802][ T6815] which belongs to the cache kmalloc-128 of size 128 [ 247.150695][ T6815] The buggy address is located 0 bytes inside of [ 247.150695][ T6815] 128-byte region [ffff0000d142f700, ffff0000d142f780) [ 247.154351][ T6815] [ 247.155001][ T6815] The buggy address belongs to the physical page: [ 247.156818][ T6815] page:0000000004334e2f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11142f [ 247.159690][ T6815] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 247.161808][ T6815] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002300 [ 247.164179][ T6815] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 247.166515][ T6815] page dumped because: kasan: bad access detected [ 247.168249][ T6815] [ 247.168862][ T6815] Memory state around the buggy address: [ 247.170426][ T6815] ffff0000d142f600: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 247.172619][ T6815] ffff0000d142f680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.174798][ T6815] >ffff0000d142f700: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 247.177073][ T6815] ^ [ 247.178841][ T6815] ffff0000d142f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.181046][ T6815] ffff0000d142f800: 00 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.183291][ T6815] ================================================================== [ 247.273385][ T6815] Disabling lock debugging due to kernel taint [ 248.842792][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.844500][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.912385][ T4304] Bluetooth: hci5: command 0x0406 tx timeout