last executing test programs: 11m57.7783372s ago: executing program 0 (id=1571): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpid() mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r2 = syz_pidfd_open(r1, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() setns(r2, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 11m54.784550896s ago: executing program 0 (id=1572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11m52.489438014s ago: executing program 0 (id=1576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11m50.703305299s ago: executing program 0 (id=1579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11m49.235603266s ago: executing program 0 (id=1590): r0 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./cgroup\x00', 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x800452d2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)='bdev\x00', 0x123140d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@random="3488678b38a8630f76b53c1d0d216f484ee6", 0x12, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/55], 0xb8}}, 0x4000) 11m38.630770554s ago: executing program 0 (id=1606): r0 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./cgroup\x00', 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x800452d2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)='bdev\x00', 0x123140d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@random="3488678b38a8630f76b53c1d0d216f484ee6", 0x12, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a"], 0xb8}}, 0x4000) 11m22.043131074s ago: executing program 32 (id=1606): r0 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./cgroup\x00', 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x800452d2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)='bdev\x00', 0x123140d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@random="3488678b38a8630f76b53c1d0d216f484ee6", 0x12, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a"], 0xb8}}, 0x4000) 8m10.712121269s ago: executing program 1 (id=1941): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}], 0x2, 0x0) 8m10.502849624s ago: executing program 1 (id=1942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) 8m1.755474155s ago: executing program 1 (id=1964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) 7m54.316061313s ago: executing program 1 (id=1970): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a0060b74b21214c153173924c7718bac4995c4b759eb4ee6c86c12d448dab3360b579b1f32b3c638fadfc08b850b8dd5ec65d809ad6046a", 0xf5, 0x10008095, 0x0, 0x0) 7m52.695864794s ago: executing program 1 (id=1973): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 7m49.71407756s ago: executing program 1 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 7m34.050963985s ago: executing program 33 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 42.789804049s ago: executing program 4 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 41.020014314s ago: executing program 4 (id=2882): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1e, 0xe, @empty, 0x2}, {0xa, 0x4e21, 0x401, @remote, 0x2}, r2, 0x4000007}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x4, @remote, 0x3}, r4, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 37.384649526s ago: executing program 4 (id=2886): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x19, 0x0, @void}, 0x30) 35.22321463s ago: executing program 4 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 35.031881205s ago: executing program 4 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 22.379932225s ago: executing program 4 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) close(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000140)='W', &(0x7f00000001c0)=""/197}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 9.304657475s ago: executing program 5 (id=2972): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_crypto(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@del={0xe0, 0x11, 0xfd34c051af82335, 0x70bd2b, 0x25dfdbfe, {{'sha512_mb\x00'}, '\x00', '\x00', 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4110) 9.304417265s ago: executing program 6 (id=2973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x110, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x2, 0xdc1, 0x9, 'syz1\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x2, 0x70}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x44, 0x7a, 0x1}}, @common=@unspec=@state={{0x28}, {0x80}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 9.304194445s ago: executing program 2 (id=2974): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00'], 0x4c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) 9.303713275s ago: executing program 3 (id=2975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.667679456s ago: executing program 5 (id=2976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) 7.667444156s ago: executing program 6 (id=2977): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "fb"}]}}, 0x0, 0x2a, 0x0, 0x1, 0x1}, 0x28) 7.667088736s ago: executing program 2 (id=2978): socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) 7.666726606s ago: executing program 3 (id=2979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3384870", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450d", 0x27}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a04", 0x4a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34", 0x8b}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8", 0x50}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.918034481s ago: executing program 5 (id=2980): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x24060400) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) 5.917841351s ago: executing program 6 (id=2981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) 5.917677651s ago: executing program 2 (id=2982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000130005000000000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000001000000000000000000000000000000000000000000ffffffffffffffffffffffff"], 0xfc}}, 0x810) 5.917356541s ago: executing program 3 (id=2983): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.96530254s ago: executing program 5 (id=2984): r0 = socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/10, @ANYRES16=r10, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000010000000011316e530000001800000000000000100100000c000000aa00000000000000"], 0x30}, 0xfc40) 3.96508285s ago: executing program 6 (id=2985): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x3700}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 3.96491437s ago: executing program 2 (id=2986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.96464243s ago: executing program 3 (id=2987): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x40000000008, 0x740201}) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@remote, @dev={0xfe, 0x80, '\x00', 0x2b}, @private1, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120186, r4}) 2.078293158s ago: executing program 5 (id=2988): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.078084968s ago: executing program 6 (id=2989): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @remote, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000040)="9b", 0x1}], 0x1}}], 0x1, 0x20044040) 2.077936018s ago: executing program 2 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) 2.077652578s ago: executing program 3 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000002060102000010000000f6ac4de2adca135e8729d0158588000000000600090002574047d089741717d381671528e46bad04beb162628ddcbe489718b1fef32741c70d1b786dfea3fac160200182a4d1e2806eb97041107566ce22b94dfacb354ceaf4633cde849e460ec54ab4a2588a379b52a5775fa195351e0929e5c0"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x40080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 666.411µs ago: executing program 5 (id=2992): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e}, 0x28) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 445.891µs ago: executing program 6 (id=2993): unshare(0xa020480) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x4) 149.96µs ago: executing program 2 (id=2994): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @local}) 0s ago: executing program 3 (id=2995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x4040) kernel console output (not intermixed with test programs): ailed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1199.769996][T15351] loop6: detected capacity change from 0 to 64 [ 1200.238843][T15362] futex_wake_op: syz.6.2335 tries to shift op by 144; fix this program [ 1200.357477][T15362] loop6: detected capacity change from 0 to 512 [ 1200.705128][ T129] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1200.975064][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 1200.986673][ T129] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.106002][ T129] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1201.157858][ T129] usb 7-1: config 0 has no interface number 0 [ 1201.164038][ T129] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1201.280906][ T129] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1201.290474][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.326597][ T129] usb 7-1: config 0 descriptor?? [ 1201.365477][ T129] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 1202.062315][T15362] team0: Device wg0 is of different type [ 1202.070449][T15362] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1203.264643][T12690] usb 7-1: USB disconnect, device number 9 [ 1203.717713][T15387] loop5: detected capacity change from 0 to 4096 [ 1203.930985][T15387] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1204.011919][T15387] ntfs3: loop5: Failed to load $Extend. [ 1204.795479][ T26] audit: type=1800 audit(1785698514.661:116): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2341" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 1204.892209][T15402] loop4: detected capacity change from 0 to 64 [ 1205.510242][T15415] futex_wake_op: syz.4.2346 tries to shift op by 144; fix this program [ 1206.130413][T15417] loop4: detected capacity change from 0 to 512 [ 1206.952978][ T4427] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1207.285000][T12690] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1207.474828][T12690] usb 5-1: Using ep0 maxpacket: 32 [ 1207.481996][T12690] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1207.528781][T12690] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1207.557197][T12690] usb 5-1: config 0 has no interface number 0 [ 1207.573686][T12690] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.593295][T12690] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1207.602881][T12690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.628268][T12690] usb 5-1: config 0 descriptor?? [ 1207.640605][T12690] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1208.221237][T15415] team0: Device wg0 is of different type [ 1208.230011][T15415] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1208.380380][T15446] futex_wake_op: syz.2.2350 tries to shift op by 144; fix this program [ 1208.483512][T15446] loop2: detected capacity change from 0 to 512 [ 1209.114638][T15449] futex_wake_op: syz.5.2352 tries to shift op by 144; fix this program [ 1209.180421][T15449] loop5: detected capacity change from 0 to 512 [ 1209.702385][ T129] usb 5-1: USB disconnect, device number 19 [ 1209.946985][ T4427] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1210.215278][T12690] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1210.735203][ T4525] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1210.775704][T12690] usb 3-1: Using ep0 maxpacket: 32 [ 1210.790549][T12690] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1211.215087][T12690] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1211.225618][T12690] usb 3-1: config 0 has no interface number 0 [ 1211.231775][T12690] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.245428][T12690] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1211.254688][T12690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.265750][T12690] usb 3-1: config 0 descriptor?? [ 1211.334914][T12690] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1211.344155][T12690] usb 3-1: USB disconnect, device number 36 [ 1211.365126][ T4525] usb 6-1: Using ep0 maxpacket: 32 [ 1211.413152][ T4525] usb 6-1: device descriptor read/all, error -71 [ 1211.425940][T15468] futex_wake_op: syz.4.2357 tries to shift op by 144; fix this program [ 1211.535452][T15469] loop6: detected capacity change from 0 to 64 [ 1211.899914][T15471] team0: Device wg0 is of different type [ 1211.923040][T15471] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1213.745631][T15497] futex_wake_op: syz.3.2367 tries to shift op by 144; fix this program [ 1213.903068][T15499] loop3: detected capacity change from 0 to 512 [ 1214.325111][T12690] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1214.585914][T12690] usb 4-1: Using ep0 maxpacket: 32 [ 1214.595798][T12690] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.627426][T12690] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1214.813145][T12690] usb 4-1: config 0 has no interface number 0 [ 1214.819980][T12690] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1214.833336][T12690] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1214.842777][T12690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.852857][T12690] usb 4-1: config 0 descriptor?? [ 1214.862587][T12690] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1215.847120][T15497] team0: Device wg0 is of different type [ 1215.855072][T15497] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1217.014390][ T4525] usb 4-1: USB disconnect, device number 38 [ 1218.008200][T15524] futex_wake_op: syz.3.2374 tries to shift op by 144; fix this program [ 1218.050617][T15526] futex_wake_op: syz.2.2373 tries to shift op by 144; fix this program [ 1218.128297][T15524] loop3: detected capacity change from 0 to 512 [ 1218.167023][T15526] loop2: detected capacity change from 0 to 512 [ 1218.543886][ T4446] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1218.884896][ T4525] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1218.892771][T12690] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1219.085274][ T4525] usb 3-1: Using ep0 maxpacket: 32 [ 1219.090682][T12690] usb 4-1: Using ep0 maxpacket: 32 [ 1219.102286][ T4525] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1219.112245][T12690] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1219.207604][ T4525] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1219.945635][T12690] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1219.956405][ T4525] usb 3-1: config 0 has no interface number 0 [ 1219.962837][ T4525] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1219.975829][T12690] usb 4-1: config 0 has no interface number 0 [ 1219.981954][T12690] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1220.002618][ T4525] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1220.012957][T12690] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1220.022448][ T4525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.030942][T12690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.051841][T12690] usb 4-1: config 0 descriptor?? [ 1220.058571][ T4525] usb 3-1: config 0 descriptor?? [ 1220.068983][ T4525] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1220.085146][T12690] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1220.295784][ T4525] usb 4-1: USB disconnect, device number 39 [ 1220.324959][T12690] usb 3-1: USB disconnect, device number 37 [ 1221.721189][T15558] futex_wake_op: syz.3.2384 tries to shift op by 144; fix this program [ 1221.810963][T15558] loop3: detected capacity change from 0 to 512 [ 1222.634848][T12690] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1222.864991][T12690] usb 4-1: Using ep0 maxpacket: 32 [ 1222.877990][T12690] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.919314][T12690] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1223.083790][T12690] usb 4-1: config 0 has no interface number 0 [ 1223.237363][T12690] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.596598][T12690] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1223.650667][T12690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.748638][T12690] usb 4-1: config 0 descriptor?? [ 1223.772646][T12690] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1226.982271][T12690] usb 4-1: USB disconnect, device number 40 [ 1231.807052][T15628] futex_wake_op: syz.5.2401 tries to shift op by 144; fix this program [ 1232.434775][T15631] loop5: detected capacity change from 0 to 512 [ 1233.304809][ T4525] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1234.384825][ T4525] usb 6-1: Using ep0 maxpacket: 32 [ 1234.391941][ T4525] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.414795][ T4525] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1234.435680][ T4525] usb 6-1: config 0 has no interface number 0 [ 1234.455677][ T4525] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.469161][ T4525] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1234.478561][ T4525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.489307][ T4525] usb 6-1: config 0 descriptor?? [ 1234.498546][ T4525] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1234.595762][ T4525] usb 6-1: USB disconnect, device number 19 [ 1234.669278][T15645] loop3: detected capacity change from 0 to 512 [ 1234.897082][T15645] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2405: invalid indirect mapped block 4294967295 (level 1) [ 1234.942203][T15645] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2405: invalid indirect mapped block 4294967295 (level 1) [ 1234.966654][T15645] EXT4-fs (loop3): 2 truncates cleaned up [ 1234.972632][T15645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1235.066037][T15659] futex_wake_op: syz.6.2408 tries to shift op by 144; fix this program [ 1235.143374][T15659] team0: Device wg0 is of different type [ 1235.157141][T15659] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1236.197941][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1236.713067][T15683] futex_wake_op: syz.6.2416 tries to shift op by 144; fix this program [ 1236.772434][T15683] loop6: detected capacity change from 0 to 512 [ 1237.135102][ T4525] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1237.375092][ T4525] usb 7-1: Using ep0 maxpacket: 32 [ 1237.417697][ T4525] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1237.584765][ T4525] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1237.630828][ T4525] usb 7-1: config 0 has no interface number 0 [ 1237.650874][ T4525] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.687141][ T4525] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1237.712841][ T4525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.918871][ T4525] usb 7-1: config 0 descriptor?? [ 1237.928290][ T4525] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 1238.842457][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.850256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.922121][T15683] team0: Device wg0 is of different type [ 1238.939229][T15683] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1240.100524][T12690] usb 7-1: USB disconnect, device number 10 [ 1240.403147][T15712] futex_wake_op: syz.4.2422 tries to shift op by 144; fix this program [ 1240.462171][T15712] loop4: detected capacity change from 0 to 512 [ 1240.836697][T12690] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1241.088160][T12690] usb 5-1: Using ep0 maxpacket: 32 [ 1241.112398][T12690] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1241.264893][T12690] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1241.321966][T12690] usb 5-1: config 0 has no interface number 0 [ 1241.336868][T12690] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.381567][T12690] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1241.535346][T12690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.555863][T12690] usb 5-1: config 0 descriptor?? [ 1241.592784][T12690] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1242.609127][T15712] team0: Device wg0 is of different type [ 1242.616845][T15712] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1243.973661][ T4525] usb 5-1: USB disconnect, device number 20 [ 1244.892432][T15748] futex_wake_op: syz.3.2427 tries to shift op by 144; fix this program [ 1244.938922][T15748] team0: Device wg0 is of different type [ 1244.970511][T15748] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1249.448262][T15794] futex_wake_op: syz.2.2438 tries to shift op by 144; fix this program [ 1249.511332][T15794] loop2: detected capacity change from 0 to 512 [ 1249.854983][ T4525] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1250.096011][ T4525] usb 3-1: Using ep0 maxpacket: 32 [ 1250.121356][ T4525] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1250.313383][ T4525] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1250.347293][ T4525] usb 3-1: config 0 has no interface number 0 [ 1250.353507][ T4525] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.421099][ T4525] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1250.455393][ T4525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.541405][ T4525] usb 3-1: config 0 descriptor?? [ 1250.591291][ T4525] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1251.593456][T15794] team0: Device wg0 is of different type [ 1251.601389][T15794] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1252.732387][ T4525] usb 3-1: USB disconnect, device number 38 [ 1252.791931][T15813] loop5: detected capacity change from 0 to 512 [ 1252.874187][T15816] futex_wake_op: syz.3.2443 tries to shift op by 144; fix this program [ 1253.253002][T15813] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2442: invalid indirect mapped block 4294967295 (level 1) [ 1253.478317][T15813] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2442: invalid indirect mapped block 4294967295 (level 1) [ 1253.780112][T15813] EXT4-fs (loop5): 2 truncates cleaned up [ 1253.814892][T15813] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1253.830467][T15818] team0: Device wg0 is of different type [ 1253.871514][T15818] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1253.926885][T15822] loop6: detected capacity change from 0 to 1024 [ 1253.951457][T15822] EXT4-fs: Ignoring removed nobh option [ 1254.014968][T15822] EXT4-fs: Ignoring removed bh option [ 1254.056974][T15822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 1254.083341][T15822] System zones: 0-1, 3-12 [ 1254.107383][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1254.122169][T15822] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1255.273069][T15837] loop3: detected capacity change from 0 to 512 [ 1255.795432][ T4525] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1256.095957][ T4525] usb 4-1: Using ep0 maxpacket: 32 [ 1256.108354][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1256.119278][ T4525] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1256.185675][ T4525] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1256.206354][ T4525] usb 4-1: config 0 has no interface number 0 [ 1256.238305][ T4525] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1256.272077][ T4525] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1256.331129][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.371145][ T4525] usb 4-1: config 0 descriptor?? [ 1256.388163][ T4525] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1257.072321][T15851] futex_wake_op: syz.4.2451 tries to shift op by 144; fix this program [ 1257.137260][T15851] loop4: detected capacity change from 0 to 512 [ 1257.841501][T15835] team0: Device wg0 is of different type [ 1257.894403][T15835] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1258.433462][ T4525] usb 4-1: USB disconnect, device number 41 [ 1259.009591][ T4519] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1259.362653][ T4519] usb 5-1: Using ep0 maxpacket: 32 [ 1259.369958][ T4519] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1259.384807][ T4519] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1259.395563][ T4519] usb 5-1: config 0 has no interface number 0 [ 1259.401784][ T4519] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1259.416352][ T4519] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1259.426657][ T4519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.569850][ T4519] usb 5-1: config 0 descriptor?? [ 1259.727670][ T4519] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1260.091775][ T4519] usb 5-1: USB disconnect, device number 21 [ 1260.425792][T15881] futex_wake_op: syz.4.2457 tries to shift op by 144; fix this program [ 1260.549648][T15881] team0: Device wg0 is of different type [ 1260.600238][T15881] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1261.287934][T15886] futex_wake_op: syz.6.2458 tries to shift op by 144; fix this program [ 1261.353519][T15886] loop6: detected capacity change from 0 to 512 [ 1261.895535][ T4525] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1262.144882][ T4525] usb 7-1: Using ep0 maxpacket: 32 [ 1262.176059][ T4525] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.247800][ T4525] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1262.279837][ T4525] usb 7-1: config 0 has no interface number 0 [ 1262.300099][ T4525] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.333917][ T4525] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1262.363897][ T4525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.382298][T15891] loop2: detected capacity change from 0 to 1024 [ 1262.408553][ T4525] usb 7-1: config 0 descriptor?? [ 1262.439683][T15891] EXT4-fs: Ignoring removed nobh option [ 1262.458786][ T4525] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 1262.485665][T15891] EXT4-fs: Ignoring removed bh option [ 1262.615788][T15891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 1262.624052][T15891] System zones: 0-1, 3-12 [ 1262.679325][T15891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1262.920581][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1263.041887][T15886] team0: Device wg0 is of different type [ 1263.055141][T15886] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1264.136663][ T4525] usb 7-1: USB disconnect, device number 11 [ 1268.986980][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2471'. [ 1270.541451][T15953] loop3: detected capacity change from 0 to 1024 [ 1270.627122][T15953] EXT4-fs: Ignoring removed nobh option [ 1270.705141][T15953] EXT4-fs: Ignoring removed bh option [ 1270.862031][T15953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 1270.884881][T15953] System zones: 0-1, 3-12 [ 1270.932542][T15953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1271.299192][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1273.838062][T15974] futex_wake_op: syz.5.2478 tries to shift op by 144; fix this program [ 1274.053079][T15975] team0: Device wg0 is of different type [ 1274.075048][T15975] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1275.666229][T15990] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.2483'. [ 1275.694911][T15990] netlink: zone id is out of range [ 1275.701182][T15990] netlink: zone id is out of range [ 1275.707513][T15990] netlink: zone id is out of range [ 1275.713291][T15990] netlink: zone id is out of range [ 1275.725489][T15990] netlink: zone id is out of range [ 1275.730670][T15990] netlink: zone id is out of range [ 1275.736236][T15990] netlink: zone id is out of range [ 1275.747448][T15990] netlink: zone id is out of range [ 1275.752633][T15990] netlink: zone id is out of range [ 1276.731161][T16004] loop3: detected capacity change from 0 to 512 [ 1277.235049][ T4525] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1277.460699][T16009] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2487'. [ 1277.470652][ T4525] usb 4-1: Using ep0 maxpacket: 32 [ 1277.479104][ T4525] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.496347][ T4525] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1277.534751][ T4525] usb 4-1: config 0 has no interface number 0 [ 1277.554830][ T4525] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.591390][ T4525] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1277.629918][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.695980][ T4525] usb 4-1: config 0 descriptor?? [ 1277.722522][ T4525] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1278.363469][T16000] team0: Device wg0 is of different type [ 1279.478297][T13742] usb 4-1: USB disconnect, device number 42 [ 1279.602704][T16032] tipc: Enabled bearer , priority 0 [ 1279.708893][T16032] device syzkaller0 entered promiscuous mode [ 1279.731910][T16032] tipc: Resetting bearer [ 1279.819877][T16031] tipc: Resetting bearer [ 1280.297532][T16040] futex_wake_op: syz.6.2493 tries to shift op by 144; fix this program [ 1284.910942][T16031] tipc: Disabling bearer [ 1284.929709][T16040] team0: Device wg0 is of different type [ 1284.937443][T16040] net_ratelimit: 7058 callbacks suppressed [ 1284.937501][T16040] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1284.959274][T13742] tipc: Node number set to 3066101654 [ 1284.965503][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2495'. [ 1286.126787][T16076] loop6: detected capacity change from 0 to 512 [ 1286.907557][ T4446] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1287.255019][T12690] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1287.524947][T12690] usb 7-1: Using ep0 maxpacket: 32 [ 1287.572247][T12690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1287.844740][T12690] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1287.896488][T12690] usb 7-1: config 0 has no interface number 0 [ 1287.902665][T12690] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1288.018868][T12690] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1288.039681][T12690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.060680][T12690] usb 7-1: config 0 descriptor?? [ 1288.084374][T12690] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 1288.632135][T16074] team0: Device wg0 is of different type [ 1288.640203][T16074] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1289.505656][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1289.724323][T12690] usb 7-1: USB disconnect, device number 12 [ 1289.861161][T16117] futex_wake_op: syz.2.2510 tries to shift op by 144; fix this program [ 1289.934360][T16117] team0: Device wg0 is of different type [ 1289.957137][T16117] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1290.052043][T16115] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2511'. [ 1290.173013][T16115] netlink: zone id is out of range [ 1290.924955][T16115] netlink: zone id is out of range [ 1291.195531][T16115] netlink: zone id is out of range [ 1291.200830][T16115] netlink: zone id is out of range [ 1291.321426][T16115] netlink: zone id is out of range [ 1291.386148][T16115] netlink: zone id is out of range [ 1291.404815][T16115] netlink: zone id is out of range [ 1291.410093][T16115] netlink: zone id is out of range [ 1291.432875][T16115] netlink: zone id is out of range [ 1291.593009][T16125] tipc: Started in network mode [ 1291.612501][T16125] tipc: Node identity 32dc09b54cda, cluster identity 4711 [ 1291.636491][T16125] tipc: Enabled bearer , priority 0 [ 1292.411193][T16125] device syzkaller0 entered promiscuous mode [ 1292.431171][T16125] tipc: Resetting bearer [ 1292.472414][T16124] tipc: Resetting bearer [ 1293.994502][T16155] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2523'. [ 1295.124249][T16165] loop2: detected capacity change from 0 to 512 [ 1295.237449][T16165] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2525: invalid indirect mapped block 4294967295 (level 1) [ 1295.255890][T16165] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2525: invalid indirect mapped block 4294967295 (level 1) [ 1295.299875][T16165] EXT4-fs (loop2): 2 truncates cleaned up [ 1295.311605][T16165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1295.585060][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1297.777675][T16189] futex_wake_op: syz.3.2528 tries to shift op by 144; fix this program [ 1300.087862][T16124] tipc: Disabling bearer [ 1300.098331][T12690] tipc: Node number set to 2114324917 [ 1300.155837][T16189] team0: Device wg0 is of different type [ 1300.163486][T16189] net_ratelimit: 7063 callbacks suppressed [ 1300.163502][T16189] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1300.268851][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.275382][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.404234][T16216] loop5: detected capacity change from 0 to 512 [ 1301.796313][T12690] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1302.015024][T12690] usb 6-1: Using ep0 maxpacket: 32 [ 1302.027916][T12690] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1302.087790][T12690] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1302.109252][T12690] usb 6-1: config 0 has no interface number 0 [ 1302.116116][T12690] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1302.129571][T12690] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1302.141609][T12690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.152872][T12690] usb 6-1: config 0 descriptor?? [ 1302.168267][T12690] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1303.283585][T16211] team0: Device wg0 is of different type [ 1303.302406][T16211] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1303.352052][T16231] loop4: detected capacity change from 0 to 512 [ 1303.637723][T16231] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2538: invalid indirect mapped block 4294967295 (level 1) [ 1303.897971][T16231] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2538: invalid indirect mapped block 4294967295 (level 1) [ 1304.534892][T13742] usb 6-1: USB disconnect, device number 20 [ 1304.563646][T16231] EXT4-fs (loop4): 2 truncates cleaned up [ 1304.584919][T16231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1304.804768][T16238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1305.955287][T16251] futex_wake_op: syz.6.2543 tries to shift op by 144; fix this program [ 1306.254155][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1308.246655][T16284] loop5: detected capacity change from 0 to 512 [ 1308.350602][T16289] futex_wake_op: syz.4.2551 tries to shift op by 144; fix this program [ 1308.445068][T16289] loop4: detected capacity change from 0 to 512 [ 1308.550490][T16284] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2549: invalid block [ 1308.795094][T11933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1308.906989][T16284] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2549: invalid indirect mapped block 4294967295 (level 1) [ 1309.024840][T11933] usb 5-1: Using ep0 maxpacket: 32 [ 1309.036872][T11933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1309.136002][T16284] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2549: invalid indirect mapped block 4294967295 (level 1) [ 1309.182534][T11933] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1309.224873][T11933] usb 5-1: config 0 has no interface number 0 [ 1309.231045][T11933] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.257596][T16284] EXT4-fs (loop5): 2 truncates cleaned up [ 1309.283977][T16284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1309.285075][T11933] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1309.364771][T11933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.415698][T11933] usb 5-1: config 0 descriptor?? [ 1309.433042][T11933] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1309.699024][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1310.037978][T16289] team0: Device wg0 is of different type [ 1310.046810][T16289] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1310.775525][T16307] loop3: detected capacity change from 0 to 512 [ 1311.369530][T16309] futex_wake_op: syz.6.2553 tries to shift op by 144; fix this program [ 1311.888355][ T4325] usb 5-1: USB disconnect, device number 22 [ 1311.991968][T16312] loop6: detected capacity change from 0 to 512 [ 1312.395192][ T27] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1312.485031][ T4626] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1312.716436][ T4626] usb 4-1: Using ep0 maxpacket: 32 [ 1312.723690][ T4626] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1312.744823][ T4626] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1312.755369][ T4626] usb 4-1: config 0 has no interface number 0 [ 1312.761614][ T4626] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1312.912375][ T4626] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1313.005132][ T4626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.189302][ T4626] usb 4-1: config 0 descriptor?? [ 1313.404623][ T4626] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1313.529891][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 1313.537027][T11933] usb 4-1: USB disconnect, device number 43 [ 1313.545526][ T27] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1313.576523][ T27] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1313.666050][ T27] usb 7-1: config 0 has no interface number 0 [ 1313.672239][ T27] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1313.730717][ T27] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1313.945012][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.917082][ T27] usb 7-1: config 0 descriptor?? [ 1315.064953][ T27] usb 7-1: can't set config #0, error -71 [ 1315.092539][ T27] usb 7-1: USB disconnect, device number 13 [ 1315.740685][T16342] futex_wake_op: syz.6.2561 tries to shift op by 144; fix this program [ 1315.841690][T16344] loop6: detected capacity change from 0 to 512 [ 1316.326937][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2564'. [ 1316.337471][ T27] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1316.475700][T16352] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1316.488863][T16352] netlink: zone id is out of range [ 1316.494144][T16352] netlink: zone id is out of range [ 1316.501601][T16352] netlink: zone id is out of range [ 1316.507231][T16352] netlink: zone id is out of range [ 1316.512671][T16352] netlink: zone id is out of range [ 1316.518222][T16352] netlink: zone id is out of range [ 1316.545211][T16352] netlink: zone id is out of range [ 1316.642110][T16355] futex_wake_op: syz.5.2565 tries to shift op by 144; fix this program [ 1316.666619][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 1316.687517][ T27] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1317.437652][ T27] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1317.451382][ T27] usb 7-1: config 0 has no interface number 0 [ 1317.458486][ T27] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1317.473171][ T27] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1317.561923][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.574939][T16352] netlink: zone id is out of range [ 1317.752052][T16352] netlink: zone id is out of range [ 1317.846284][T16357] team0: Device wg0 is of different type [ 1317.855343][ T27] usb 7-1: config 0 descriptor?? [ 1317.874903][T16352] netlink: zone id is out of range [ 1317.905524][ T27] usb 7-1: can't set config #0, error -71 [ 1317.921012][ T27] usb 7-1: USB disconnect, device number 14 [ 1320.971656][T16393] loop2: detected capacity change from 0 to 512 [ 1321.125637][T16393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2575: invalid indirect mapped block 4294967295 (level 1) [ 1321.997297][T16393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2575: invalid indirect mapped block 4294967295 (level 1) [ 1322.062653][T16393] EXT4-fs (loop2): 2 truncates cleaned up [ 1322.070939][T16393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1322.140576][T16401] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2578'. [ 1322.178893][T16401] net_ratelimit: 3533 callbacks suppressed [ 1322.178911][T16401] netlink: zone id is out of range [ 1322.211568][T16401] netlink: zone id is out of range [ 1322.220939][T16401] netlink: zone id is out of range [ 1322.237674][T16401] netlink: zone id is out of range [ 1322.243048][T16401] netlink: zone id is out of range [ 1322.285974][T16401] netlink: zone id is out of range [ 1322.294832][T16401] netlink: zone id is out of range [ 1322.307169][T16401] netlink: zone id is out of range [ 1322.319627][T16401] netlink: zone id is out of range [ 1322.331842][T16401] netlink: zone id is out of range [ 1322.461468][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1323.428160][T16414] futex_wake_op: syz.6.2581 tries to shift op by 144; fix this program [ 1323.456324][T16416] futex_wake_op: syz.2.2580 tries to shift op by 144; fix this program [ 1323.551881][T16416] loop2: detected capacity change from 0 to 512 [ 1323.784318][T16417] team0: Device wg0 is of different type [ 1323.921540][ T4446] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1324.280915][T11933] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1324.295144][T16419] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2582'. [ 1324.490969][T11933] usb 3-1: Using ep0 maxpacket: 32 [ 1324.523549][T11933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.562686][T11933] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1324.655082][T11933] usb 3-1: config 0 has no interface number 0 [ 1324.661278][T11933] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.071376][T11933] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1325.396036][T11933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.446336][T11933] usb 3-1: config 0 descriptor?? [ 1325.457909][T11933] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1325.659278][ T5483] usb 3-1: USB disconnect, device number 39 [ 1325.955838][T16440] futex_wake_op: syz.2.2587 tries to shift op by 144; fix this program [ 1326.026693][T16440] loop2: detected capacity change from 0 to 512 [ 1327.637276][ T4446] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1328.014939][ T4325] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1328.426391][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 1328.438546][ T4325] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1328.478814][ T4325] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1329.004938][ T4325] usb 3-1: config 0 has no interface number 0 [ 1329.004981][ T4325] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.005025][ T4325] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1329.005051][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.007491][ T4325] usb 3-1: config 0 descriptor?? [ 1329.007917][ T4325] usb 3-1: can't set config #0, error -71 [ 1329.008972][ T4325] usb 3-1: USB disconnect, device number 40 [ 1330.708578][T16462] device syzkaller0 entered promiscuous mode [ 1332.376908][T16480] futex_wake_op: syz.6.2594 tries to shift op by 144; fix this program [ 1336.841335][T16484] team0: Device wg0 is of different type [ 1336.850116][T16484] net_ratelimit: 3533 callbacks suppressed [ 1336.850131][T16484] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1337.247317][T16506] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1337.265163][T16506] netlink: zone id is out of range [ 1337.274364][T16506] netlink: zone id is out of range [ 1337.279829][T16506] netlink: zone id is out of range [ 1337.285256][T16506] netlink: zone id is out of range [ 1337.290655][T16506] netlink: zone id is out of range [ 1337.297892][T16506] netlink: zone id is out of range [ 1337.303173][T16506] netlink: zone id is out of range [ 1337.374835][T16506] netlink: zone id is out of range [ 1337.395032][T16506] netlink: zone id is out of range [ 1343.745668][T16553] futex_wake_op: syz.2.2613 tries to shift op by 144; fix this program [ 1344.158993][T16556] team0: Device wg0 is of different type [ 1344.181422][T16556] net_ratelimit: 3533 callbacks suppressed [ 1344.181464][T16556] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1344.769112][T16561] device bond3 entered promiscuous mode [ 1344.775153][T16561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1344.921669][T16560] device syzkaller0 entered promiscuous mode [ 1351.304116][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2624'. [ 1354.404296][T16566] device bridge3 entered promiscuous mode [ 1354.411675][T16566] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1354.434920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1354.901143][T16639] futex_wake_op: syz.5.2632 tries to shift op by 144; fix this program [ 1355.075820][T16641] loop5: detected capacity change from 0 to 512 [ 1355.619742][ T4325] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1355.894827][ T4325] usb 6-1: Using ep0 maxpacket: 32 [ 1355.906294][ T4325] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1355.914394][ T4325] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1355.987740][ T4325] usb 6-1: config 0 has no interface number 0 [ 1355.994321][ T4325] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.044448][ T4325] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1356.095155][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.432868][ T4325] usb 6-1: config 0 descriptor?? [ 1358.082517][ T4325] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1358.099311][ T4325] usb 6-1: USB disconnect, device number 21 [ 1362.547361][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.554292][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.970229][T16701] loop3: detected capacity change from 0 to 512 [ 1363.365899][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 1363.555495][T16701] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2648: invalid indirect mapped block 4294967295 (level 1) [ 1363.582636][T16711] loop6: detected capacity change from 0 to 512 [ 1363.595299][T16701] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2648: invalid indirect mapped block 4294967295 (level 1) [ 1364.586577][T16711] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2650: invalid indirect mapped block 4294967295 (level 1) [ 1364.680956][T16701] EXT4-fs (loop3): 2 truncates cleaned up [ 1364.687013][T16701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1364.697062][T16711] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2650: invalid indirect mapped block 4294967295 (level 1) [ 1364.754475][T16720] loop2: detected capacity change from 0 to 512 [ 1364.775968][T16711] EXT4-fs (loop6): 2 truncates cleaned up [ 1364.781793][T16711] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1364.869172][T16720] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2652: invalid indirect mapped block 4294967295 (level 1) [ 1364.900623][T16720] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2652: invalid indirect mapped block 4294967295 (level 1) [ 1364.915172][T16709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1364.985484][T16720] EXT4-fs (loop2): 2 truncates cleaned up [ 1364.995120][T16720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1365.010793][T16709] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1365.085151][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1365.205913][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1365.256460][T16729] loop4: detected capacity change from 0 to 128 [ 1365.363819][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1365.399813][T16729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1365.485408][T16734] netlink: 143932 bytes leftover after parsing attributes in process `syz.6.2656'. [ 1365.506872][T16734] netlink: zone id is out of range [ 1365.512086][T16734] netlink: zone id is out of range [ 1365.517922][T16729] ext4 filesystem being mounted at /557/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.581395][T16734] netlink: zone id is out of range [ 1365.610617][T16734] netlink: zone id is out of range [ 1365.635060][T16734] netlink: zone id is out of range [ 1365.640250][T16734] netlink: zone id is out of range [ 1365.669980][ T26] audit: type=1800 audit(1785698675.591:117): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2657" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 1365.739984][T16734] netlink: zone id is out of range [ 1365.810920][T16734] netlink: zone id is out of range [ 1365.819015][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1365.827004][T16734] netlink: zone id is out of range [ 1365.878509][T16734] netlink: zone id is out of range [ 1365.938640][T16740] loop2: detected capacity change from 0 to 512 [ 1366.081355][T16740] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2659: invalid indirect mapped block 4294967295 (level 1) [ 1366.205473][T16740] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2659: invalid indirect mapped block 4294967295 (level 1) [ 1366.240481][T16740] EXT4-fs (loop2): 2 truncates cleaned up [ 1366.278505][T16740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1366.562745][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1368.443099][T16767] loop2: detected capacity change from 0 to 512 [ 1368.623020][T16767] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2665: invalid indirect mapped block 4294967295 (level 1) [ 1368.707474][T16767] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2665: invalid indirect mapped block 4294967295 (level 1) [ 1368.789190][T16767] EXT4-fs (loop2): 2 truncates cleaned up [ 1368.826652][T16767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1369.082222][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1369.332876][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1369.401218][T16773] loop5: detected capacity change from 0 to 512 [ 1369.452571][T16773] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2667: invalid indirect mapped block 4294967295 (level 1) [ 1369.615191][T16773] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2667: invalid indirect mapped block 4294967295 (level 1) [ 1369.652014][T16773] EXT4-fs (loop5): 2 truncates cleaned up [ 1369.661458][T16773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1369.752254][T16776] loop6: detected capacity change from 0 to 512 [ 1369.835041][T16776] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2668: invalid block [ 1369.911358][T16776] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2668: invalid indirect mapped block 4294967295 (level 1) [ 1369.935464][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1370.038659][T16785] futex_wake_op: syz.4.2671 tries to shift op by 144; fix this program [ 1370.095101][T16776] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2668: invalid indirect mapped block 4294967295 (level 1) [ 1370.628157][T16776] EXT4-fs (loop6): 2 truncates cleaned up [ 1370.743967][T16776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1370.870656][T16788] team0: Device wg0 is of different type [ 1370.878359][T16788] net_ratelimit: 3529 callbacks suppressed [ 1370.878378][T16788] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1371.054093][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1371.076264][T16798] loop5: detected capacity change from 0 to 512 [ 1371.160221][T16801] loop2: detected capacity change from 0 to 128 [ 1371.181689][T16798] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2674: invalid indirect mapped block 4294967295 (level 1) [ 1371.199545][T16801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1371.252113][T16804] loop6: detected capacity change from 0 to 512 [ 1371.296617][T16804] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2677: invalid indirect mapped block 4294967295 (level 1) [ 1371.300164][T16798] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2674: invalid indirect mapped block 4294967295 (level 1) [ 1371.317023][T16801] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.375290][T16804] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2677: invalid indirect mapped block 4294967295 (level 1) [ 1371.422195][T16798] EXT4-fs (loop5): 2 truncates cleaned up [ 1371.448322][T16804] EXT4-fs (loop6): 2 truncates cleaned up [ 1371.454179][T16804] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1371.481330][T16798] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1371.654713][ T26] audit: type=1800 audit(1785698681.521:118): pid=16801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2676" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 1371.773831][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1371.860943][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1371.987885][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1374.598677][T16859] team0: Device wg0 is of different type [ 1374.613283][T16859] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1375.572966][T16862] loop3: detected capacity change from 0 to 128 [ 1375.644204][T16862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1375.684588][T16862] ext4 filesystem being mounted at /557/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.815819][ T26] audit: type=1800 audit(1785698685.741:119): pid=16862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2691" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 1376.107995][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1383.121045][T16939] team0: Device wg0 is of different type [ 1383.132705][T16939] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1385.302120][T16955] loop3: detected capacity change from 0 to 512 [ 1385.372846][T16955] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2712: invalid indirect mapped block 4294967295 (level 1) [ 1385.404924][T16955] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2712: invalid indirect mapped block 4294967295 (level 1) [ 1385.420425][T16961] futex_wake_op: syz.4.2714 tries to shift op by 144; fix this program [ 1385.431901][T16955] EXT4-fs (loop3): 2 truncates cleaned up [ 1385.438432][T16955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1385.454822][T16961] loop4: detected capacity change from 0 to 512 [ 1385.515925][ T4427] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1385.551317][T16963] loop2: detected capacity change from 0 to 128 [ 1385.677765][T16963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1385.778542][T16963] ext4 filesystem being mounted at /525/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.784408][ T4325] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1385.817677][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1387.098026][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1387.434962][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 1387.712009][ T4325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1387.723377][ T4325] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1387.744282][ T4325] usb 5-1: config 0 has no interface number 0 [ 1387.758143][ T4325] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.858173][ T4325] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1387.934249][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.953440][ T4325] usb 5-1: config 0 descriptor?? [ 1387.972358][ T4325] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1387.997185][T16985] device syzkaller0 entered promiscuous mode [ 1389.862271][T17000] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.2723'. [ 1389.872788][T17000] netlink: zone id is out of range [ 1389.878430][T17000] netlink: zone id is out of range [ 1389.884132][T17000] netlink: zone id is out of range [ 1389.890637][T17000] netlink: zone id is out of range [ 1389.897744][T17000] netlink: zone id is out of range [ 1389.903006][T17000] netlink: zone id is out of range [ 1389.913416][T17000] netlink: zone id is out of range [ 1389.918970][T17000] netlink: zone id is out of range [ 1389.930706][T17000] netlink: zone id is out of range [ 1389.936251][T17000] netlink: zone id is out of range [ 1396.835205][T16996] team0: Device wg0 is of different type [ 1396.842110][T16996] net_ratelimit: 3542 callbacks suppressed [ 1396.842121][T16996] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1396.890658][T16997] team0: Device wg0 is of different type [ 1396.894135][ T4325] usb 5-1: USB disconnect, device number 23 [ 1396.906705][T16997] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1396.937146][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1397.364444][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2734'. [ 1398.466496][T17057] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2735'. [ 1398.485185][T17057] netlink: zone id is out of range [ 1398.510739][T17057] netlink: zone id is out of range [ 1398.519479][T17057] netlink: zone id is out of range [ 1398.525311][T17057] netlink: zone id is out of range [ 1398.559399][T17057] netlink: zone id is out of range [ 1398.579244][T17057] netlink: zone id is out of range [ 1398.584503][T17057] netlink: zone id is out of range [ 1398.607297][T17057] netlink: zone id is out of range [ 1398.703118][T17064] futex_wake_op: syz.2.2738 tries to shift op by 144; fix this program [ 1398.734756][T17064] loop2: detected capacity change from 0 to 512 [ 1399.057294][T17068] loop5: detected capacity change from 0 to 128 [ 1399.293588][T17068] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1399.331234][T17068] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.510207][ T26] audit: type=1800 audit(1785698709.431:120): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2739" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 1399.558305][ T4446] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1399.743534][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1399.952899][ T4325] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1400.082866][T17089] futex_wake_op: syz.4.2744 tries to shift op by 144; fix this program [ 1401.309117][T17089] team0: Device wg0 is of different type [ 1401.327152][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 1401.400997][ T4325] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1401.426532][T17093] futex_wake_op: syz.6.2741 tries to shift op by 144; fix this program [ 1401.566699][ T4325] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1401.800679][ T4325] usb 3-1: config 0 has no interface number 0 [ 1401.819694][ T4325] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.834607][ T4325] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1401.844799][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.861946][ T4325] usb 3-1: config 0 descriptor?? [ 1401.917192][ T4325] usb 3-1: can't set config #0, error -71 [ 1401.932421][T17096] loop5: detected capacity change from 0 to 1024 [ 1401.957797][ T4325] usb 3-1: USB disconnect, device number 41 [ 1401.981277][T17089] net_ratelimit: 3545 callbacks suppressed [ 1401.981298][T17089] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1402.049192][T17101] futex_wake_op: syz.3.2745 tries to shift op by 144; fix this program [ 1402.086349][T17101] loop3: detected capacity change from 0 to 512 [ 1402.096832][T17096] EXT4-fs: Ignoring removed bh option [ 1402.160859][T17099] loop6: detected capacity change from 0 to 512 [ 1402.197009][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1402.905851][T17096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1402.914460][T17096] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.938802][T17096] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.2742: Freeing blocks not in datazone - block = 0, count = 16 [ 1402.967591][ T27] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1402.983641][T17106] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1403.154798][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1403.162222][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1403.284598][ T27] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1403.295373][T11933] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1403.422663][ T27] usb 4-1: config 0 has no interface number 0 [ 1403.490933][ T27] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1403.525023][T11933] usb 7-1: Using ep0 maxpacket: 32 [ 1403.535603][T11933] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1403.598043][T11933] usb 7-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1403.881158][ T27] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1404.866563][T11933] usb 7-1: config 0 has no interface number 0 [ 1404.877488][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.912608][T11933] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1404.927589][ T27] usb 4-1: config 0 descriptor?? [ 1404.932955][T11933] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1404.942572][ T27] usb 4-1: can't set config #0, error -71 [ 1404.948729][T11933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.974922][ T27] usb 4-1: USB disconnect, device number 44 [ 1405.009345][T11933] usb 7-1: config 0 descriptor?? [ 1405.035679][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1405.111087][T17128] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2750'. [ 1405.198632][T17128] netlink: zone id is out of range [ 1405.244810][T17128] netlink: zone id is out of range [ 1405.250028][T17128] netlink: zone id is out of range [ 1405.307828][T17128] netlink: zone id is out of range [ 1405.324853][T17128] netlink: zone id is out of range [ 1405.341734][T17128] netlink: zone id is out of range [ 1405.360757][T17128] netlink: zone id is out of range [ 1405.367785][T17128] netlink: zone id is out of range [ 1405.373150][T17128] netlink: zone id is out of range [ 1405.623360][T17142] loop3: detected capacity change from 0 to 128 [ 1405.908052][T17142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1405.920250][T17142] ext4 filesystem being mounted at /574/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.386548][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1406.480299][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1406.752472][T17164] futex_wake_op: syz.3.2757 tries to shift op by 144; fix this program [ 1407.099018][T17166] team0: Device wg0 is of different type [ 1407.123310][T17166] net_ratelimit: 3544 callbacks suppressed [ 1407.123351][T17166] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1407.520052][T17162] loop2: detected capacity change from 0 to 1024 [ 1407.565322][T17162] EXT4-fs: Ignoring removed bh option [ 1407.660609][T17162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1407.674971][T17162] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1407.793519][T17162] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.2758: Freeing blocks not in datazone - block = 0, count = 16 [ 1407.843181][T11933] usb 7-1: can't set config #0, error -71 [ 1407.871351][T11933] usb 7-1: USB disconnect, device number 15 [ 1407.893821][T17173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2758: bg 0: block 112: padding at end of block bitmap is not set [ 1407.934186][T17173] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1407.954514][T17173] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1407.954514][T17173] [ 1407.967880][T17173] EXT4-fs (loop2): Total free blocks count 0 [ 1407.974120][T17173] EXT4-fs (loop2): Free/Dirty block details [ 1408.336910][T17173] EXT4-fs (loop2): free_blocks=0 [ 1409.702934][T17173] EXT4-fs (loop2): dirty_blocks=16 [ 1409.742686][T17173] EXT4-fs (loop2): Block reservation details [ 1409.763484][T17173] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1409.997234][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1412.015283][T17206] futex_wake_op: syz.6.2761 tries to shift op by 144; fix this program [ 1412.258112][T17196] loop6: detected capacity change from 0 to 512 [ 1413.150740][T17216] loop4: detected capacity change from 0 to 128 [ 1413.306033][T17216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1413.345348][T17216] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.442823][T17224] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2769'. [ 1413.524426][T17224] netlink: zone id is out of range [ 1413.536354][T17224] netlink: zone id is out of range [ 1413.541625][T17224] netlink: zone id is out of range [ 1413.542038][ T26] audit: type=1800 audit(1785698723.461:121): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2766" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 1413.567788][T17224] netlink: zone id is out of range [ 1413.573679][T17224] netlink: zone id is out of range [ 1413.579609][T11933] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1413.630514][T17224] netlink: zone id is out of range [ 1413.638272][T17224] netlink: zone id is out of range [ 1413.664926][T17224] netlink: zone id is out of range [ 1413.672937][T17224] netlink: zone id is out of range [ 1413.744990][T17224] netlink: zone id is out of range [ 1413.815080][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1414.322954][T17239] futex_wake_op: syz.2.2771 tries to shift op by 144; fix this program [ 1414.821661][T11933] usb 7-1: device not accepting address 16, error -71 [ 1415.343843][T17248] loop3: detected capacity change from 0 to 1024 [ 1415.363933][T17248] EXT4-fs: Ignoring removed bh option [ 1415.424725][T17239] loop2: detected capacity change from 0 to 512 [ 1415.436385][T17253] futex_wake_op: syz.6.2773 tries to shift op by 144; fix this program [ 1415.472793][T17253] team0: Device wg0 is of different type [ 1415.666269][T17248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1415.813856][T17248] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1416.275133][ T27] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1416.306678][T17248] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.2774: Freeing blocks not in datazone - block = 0, count = 16 [ 1416.327516][T17248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2774: bg 0: block 112: padding at end of block bitmap is not set [ 1416.388512][T17248] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1416.401927][T17248] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1416.401927][T17248] [ 1416.412008][T17248] EXT4-fs (loop3): Total free blocks count 0 [ 1416.419278][T17248] EXT4-fs (loop3): Free/Dirty block details [ 1416.426798][T17248] EXT4-fs (loop3): free_blocks=0 [ 1416.431862][T17248] EXT4-fs (loop3): dirty_blocks=16 [ 1416.441884][T17248] EXT4-fs (loop3): Block reservation details [ 1416.449300][T17248] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1416.494740][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1416.502445][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1416.523577][ T27] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1416.550028][ T27] usb 3-1: config 0 has no interface number 0 [ 1416.566230][ T27] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1416.602043][ T27] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1416.686232][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.752049][ T27] usb 3-1: config 0 descriptor?? [ 1416.805446][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 1416.822825][ T27] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1418.013545][T17272] netlink: 'syz.5.2779': attribute type 39 has an invalid length. [ 1419.411548][T17286] loop3: detected capacity change from 0 to 128 [ 1419.503338][T17286] FAT-fs (loop3): Directory bread(block 1048) failed [ 1419.593945][T17286] FAT-fs (loop3): Directory bread(block 1049) failed [ 1419.614238][T17289] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.2783'. [ 1419.634851][T17286] FAT-fs (loop3): Directory bread(block 1050) failed [ 1419.642145][T17286] FAT-fs (loop3): Directory bread(block 1051) failed [ 1419.659540][T17286] FAT-fs (loop3): Directory bread(block 1052) failed [ 1419.667462][T17289] net_ratelimit: 3536 callbacks suppressed [ 1419.667481][T17289] netlink: zone id is out of range [ 1419.689020][T17286] FAT-fs (loop3): Directory bread(block 1053) failed [ 1419.704792][T17286] FAT-fs (loop3): Directory bread(block 1054) failed [ 1419.715350][T17289] netlink: zone id is out of range [ 1419.720836][T17286] FAT-fs (loop3): Directory bread(block 1055) failed [ 1419.729332][T17289] netlink: zone id is out of range [ 1419.756882][T17289] netlink: zone id is out of range [ 1419.766384][T17286] FAT-fs (loop3): Directory bread(block 1048) failed [ 1419.774138][T17289] netlink: zone id is out of range [ 1419.782585][T17286] FAT-fs (loop3): Directory bread(block 1049) failed [ 1419.805357][T17289] netlink: zone id is out of range [ 1419.836710][T17289] netlink: zone id is out of range [ 1419.904926][T17289] netlink: zone id is out of range [ 1419.910421][T17289] netlink: zone id is out of range [ 1419.936409][T17289] netlink: zone id is out of range [ 1420.030834][ T5483] usb 3-1: USB disconnect, device number 42 [ 1420.174111][T17302] loop4: detected capacity change from 0 to 1024 [ 1420.183554][T17300] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1420.194593][T17302] EXT4-fs: Ignoring removed bh option [ 1420.273928][T17302] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1420.288045][T17302] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.405246][T17302] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.2788: Freeing blocks not in datazone - block = 0, count = 16 [ 1420.431288][T17302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2788: bg 0: block 112: padding at end of block bitmap is not set [ 1420.448660][T17302] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1420.456954][T17314] loop6: detected capacity change from 0 to 1024 [ 1420.467097][T17302] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1420.467097][T17302] [ 1420.477980][T17302] EXT4-fs (loop4): Total free blocks count 0 [ 1420.484736][T17302] EXT4-fs (loop4): Free/Dirty block details [ 1420.491309][T17302] EXT4-fs (loop4): free_blocks=0 [ 1420.497169][T17302] EXT4-fs (loop4): dirty_blocks=16 [ 1420.502816][T17302] EXT4-fs (loop4): Block reservation details [ 1420.514204][T17316] futex_wake_op: syz.2.2790 tries to shift op by 144; fix this program [ 1420.547755][T17316] team0: Device wg0 is of different type [ 1420.693834][T17302] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1420.814149][T17314] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1421.372758][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1422.913137][T17338] netlink: 'syz.3.2796': attribute type 39 has an invalid length. [ 1423.109407][T17343] futex_wake_op: syz.5.2806 tries to shift op by 144; fix this program [ 1423.572688][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.512036][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.806839][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1424.917584][T17353] netlink: 143932 bytes leftover after parsing attributes in process `syz.6.2797'. [ 1424.934786][T17353] net_ratelimit: 7077 callbacks suppressed [ 1424.934802][T17353] netlink: zone id is out of range [ 1425.000864][T17353] netlink: zone id is out of range [ 1425.015716][T17353] netlink: zone id is out of range [ 1425.020905][T17353] netlink: zone id is out of range [ 1425.050373][T17353] netlink: zone id is out of range [ 1425.075093][T17353] netlink: zone id is out of range [ 1425.080276][T17353] netlink: zone id is out of range [ 1425.104893][T17353] netlink: zone id is out of range [ 1425.124809][T17353] netlink: zone id is out of range [ 1425.150499][T17353] netlink: zone id is out of range [ 1425.550386][T17374] futex_wake_op: syz.5.2814 tries to shift op by 144; fix this program [ 1425.648478][T17374] loop5: detected capacity change from 0 to 512 [ 1425.742497][ T4446] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1426.204995][T11933] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1426.585190][T11933] usb 6-1: Using ep0 maxpacket: 32 [ 1426.775111][T11933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.837215][T11933] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1426.923315][T17386] netlink: 'syz.4.2808': attribute type 39 has an invalid length. [ 1426.939484][T11933] usb 6-1: config 0 has no interface number 0 [ 1426.949842][T17389] loop3: detected capacity change from 0 to 128 [ 1426.971352][T17389] FAT-fs (loop3): Directory bread(block 1048) failed [ 1426.979903][T11933] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1426.998536][T17389] FAT-fs (loop3): Directory bread(block 1049) failed [ 1427.024903][T17389] FAT-fs (loop3): Directory bread(block 1050) failed [ 1427.039810][T17389] FAT-fs (loop3): Directory bread(block 1051) failed [ 1427.053409][T11933] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1427.057488][T17389] FAT-fs (loop3): Directory bread(block 1052) failed [ 1427.095702][T11933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.113672][T17389] FAT-fs (loop3): Directory bread(block 1053) failed [ 1427.129950][T17389] FAT-fs (loop3): Directory bread(block 1054) failed [ 1427.131227][T11933] usb 6-1: config 0 descriptor?? [ 1427.141333][T17389] FAT-fs (loop3): Directory bread(block 1055) failed [ 1427.187581][T11933] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1427.279305][T17389] FAT-fs (loop3): FAT read failed (blocknr 128) [ 1427.301003][T17390] netlink: 'syz.6.2810': attribute type 1 has an invalid length. [ 1427.386508][T17390] device bond1 entered promiscuous mode [ 1427.413883][T17390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1427.567072][T17392] bond1: (slave bridge1): making interface the new active one [ 1427.594923][T17392] device bridge1 entered promiscuous mode [ 1427.601865][T17392] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1427.630674][T15684] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1427.759910][T17399] futex_wake_op: syz.3.2811 tries to shift op by 144; fix this program [ 1428.842430][T17407] netlink: 'syz.4.2813': attribute type 39 has an invalid length. [ 1429.060423][T17414] netlink: 'syz.6.2817': attribute type 39 has an invalid length. [ 1429.600054][T17425] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2820'. [ 1429.725346][T11933] usb 6-1: USB disconnect, device number 22 [ 1429.864266][T17429] loop5: detected capacity change from 0 to 128 [ 1429.913969][T17429] FAT-fs (loop5): Directory bread(block 1048) failed [ 1429.944039][T17429] FAT-fs (loop5): Directory bread(block 1049) failed [ 1429.982245][T17429] FAT-fs (loop5): Directory bread(block 1050) failed [ 1430.027012][T17429] FAT-fs (loop5): Directory bread(block 1051) failed [ 1430.055599][T17429] FAT-fs (loop5): Directory bread(block 1052) failed [ 1430.089396][T17429] FAT-fs (loop5): Directory bread(block 1053) failed [ 1430.308069][T17429] FAT-fs (loop5): Directory bread(block 1054) failed [ 1430.431616][T17429] FAT-fs (loop5): Directory bread(block 1055) failed [ 1430.783926][T17429] FAT-fs (loop5): Directory bread(block 1048) failed [ 1430.885235][T17429] FAT-fs (loop5): Directory bread(block 1049) failed [ 1431.027074][T17433] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2823'. [ 1431.068383][T17433] net_ratelimit: 3535 callbacks suppressed [ 1431.068399][T17433] netlink: zone id is out of range [ 1431.105472][T17433] netlink: zone id is out of range [ 1431.123415][T17437] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 1431.124710][T17433] netlink: zone id is out of range [ 1431.174832][T17433] netlink: zone id is out of range [ 1431.182510][T17433] netlink: zone id is out of range [ 1431.197940][T17437] device bond4 entered promiscuous mode [ 1431.204044][T17437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1431.222841][T17433] netlink: zone id is out of range [ 1431.257102][T17433] netlink: zone id is out of range [ 1431.262300][T17433] netlink: zone id is out of range [ 1431.290018][T17437] bond4: (slave bridge4): making interface the new active one [ 1431.294860][T17433] netlink: zone id is out of range [ 1431.305125][T17433] netlink: zone id is out of range [ 1431.313714][T17437] device bridge4 entered promiscuous mode [ 1431.330817][T17437] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1431.356702][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1431.590961][T17450] futex_wake_op: syz.2.2828 tries to shift op by 144; fix this program [ 1431.629564][T17450] team0: Device wg0 is of different type [ 1435.333110][ T5483] smpboot: CPU 1 is now offline [ 1435.381965][T17485] loop5: detected capacity change from 0 to 1024 [ 1435.406827][T17480] x86: Booting SMP configuration: [ 1435.432991][T17480] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1435.504057][T17485] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1436.587530][T17497] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2840'. [ 1436.886217][T17502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1436.899237][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 1437.009036][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1438.632913][T17510] futex_wake_op: syz.5.2844 tries to shift op by 144; fix this program [ 1440.566862][T17522] netlink: 'syz.3.2850': attribute type 39 has an invalid length. [ 1442.170812][T17530] device syzkaller0 entered promiscuous mode [ 1443.759298][T17535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1446.904954][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 9 is 1028 jiffies old. [ 1447.647251][T17557] futex_wake_op: syz.2.2859 tries to shift op by 144; fix this program [ 1447.706143][T17557] team0: Device wg0 is of different type [ 1447.806288][T17557] net_ratelimit: 3532 callbacks suppressed [ 1447.806305][T17557] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1449.889981][T17576] loop4: detected capacity change from 0 to 128 [ 1451.407406][T17576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1451.450541][T17576] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.776082][ T26] audit: type=1800 audit(1785698762.701:122): pid=17576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2868" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 1453.128878][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1453.183240][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1454.919761][T17618] futex_wake_op: syz.5.2878 tries to shift op by 144; fix this program [ 1455.291538][T17623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1455.302209][T17623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1455.310995][T17623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1455.319112][T17623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1455.330509][T17623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1455.344793][T17623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1455.627160][T17622] chnl_net:caif_netlink_parms(): no params data found [ 1455.723756][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.738418][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.749999][T17622] device bridge_slave_0 entered promiscuous mode [ 1455.763905][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.774205][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.790993][T17622] device bridge_slave_1 entered promiscuous mode [ 1455.845470][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.867528][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.928678][T17622] team0: Port device team_slave_0 added [ 1455.944724][T17622] team0: Port device team_slave_1 added [ 1455.984127][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.992538][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.028734][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.045121][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.052326][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.086187][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.153343][T17622] device hsr_slave_0 entered promiscuous mode [ 1456.168720][T17622] device hsr_slave_1 entered promiscuous mode [ 1457.384788][T17623] Bluetooth: hci4: command 0x0409 tx timeout [ 1458.680660][T17622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1458.701484][T17622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1458.716555][T17622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1458.734441][T17622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1458.854599][T17622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.887376][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1458.903849][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1458.919763][T17622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.940231][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1458.961834][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1458.973416][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.980595][T11843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.010369][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1459.023114][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1459.039791][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1459.058791][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.066000][T11843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.082621][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1459.109488][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1459.128697][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1459.150940][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1459.182314][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1459.192495][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1459.211511][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1459.224791][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1459.233496][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1459.258860][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1459.276010][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1459.295694][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1459.301817][T17650] netlink: 143932 bytes leftover after parsing attributes in process `syz.6.2887'. [ 1459.464946][T17623] Bluetooth: hci4: command 0x041b tx timeout [ 1459.734894][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1459.742498][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1459.768586][T17622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.805836][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1459.823418][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1459.858044][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1459.873742][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1459.887652][T17622] device veth0_vlan entered promiscuous mode [ 1459.901716][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1459.912198][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1459.934224][T17622] device veth1_vlan entered promiscuous mode [ 1459.983841][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1460.001336][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1460.014045][T17622] device veth0_macvtap entered promiscuous mode [ 1460.036320][T17622] device veth1_macvtap entered promiscuous mode [ 1460.063896][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.084472][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.096559][T17622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.109314][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1460.127456][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1460.143349][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1460.152636][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1460.171513][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.196070][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.215180][T17622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.225770][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1460.243850][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1460.257354][T17622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.283628][T17622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.298929][T17622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.313729][T17622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.461605][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.498673][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.522388][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1460.638612][T17650] netlink: zone id is out of range [ 1460.640789][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.659281][T17650] netlink: zone id is out of range [ 1460.661068][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.691968][T17650] netlink: zone id is out of range [ 1460.707820][T17650] netlink: zone id is out of range [ 1460.720470][T14372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1460.735451][T17650] netlink: zone id is out of range [ 1460.771330][T17650] netlink: zone id is out of range [ 1460.779026][T17650] netlink: zone id is out of range [ 1460.806079][T17650] netlink: zone id is out of range [ 1460.819415][T17650] netlink: zone id is out of range [ 1460.851645][T17650] netlink: zone id is out of range [ 1461.084437][T17669] loop6: detected capacity change from 0 to 128 [ 1461.123792][T17670] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2880'. [ 1461.197056][T17669] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1461.233498][T17669] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.397249][ T26] audit: type=1800 audit(1785698771.321:123): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2891" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 1461.526667][ T4384] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1461.547092][T17623] Bluetooth: hci4: command 0x040f tx timeout [ 1461.574667][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 102438) [ 1461.597688][ T4384] Buffer I/O error on device sda1, logical block 102400 [ 1461.609374][ T4384] device offline error, dev sda, sector 827694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1461.624177][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 103461) [ 1461.645255][ T4384] Buffer I/O error on device sda1, logical block 103423 [ 1461.652825][ T4384] device offline error, dev sda, sector 831566 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 1461.684034][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 103945) [ 1461.708320][ T4384] Buffer I/O error on device sda1, logical block 103907 [ 1461.726740][ T4384] Buffer I/O error on device sda1, logical block 103908 [ 1461.733774][ T4384] Buffer I/O error on device sda1, logical block 103909 [ 1461.756192][T11602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1461.768313][T11602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1461.777601][T11602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1461.786324][T11602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1461.795457][T11602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1461.845059][T11602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1461.911280][ T4384] Buffer I/O error on device sda1, logical block 103910 [ 1461.943566][ T4384] Buffer I/O error on device sda1, logical block 103911 [ 1461.957927][ T4384] Buffer I/O error on device sda1, logical block 103912 [ 1461.998295][ T4384] Buffer I/O error on device sda1, logical block 103913 [ 1462.027606][ T4384] Buffer I/O error on device sda1, logical block 103914 [ 1462.047089][ T4384] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1462.071081][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 90150) [ 1462.119723][ T4384] device offline error, dev sda, sector 729390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1462.143365][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 91173) [ 1462.172683][ T4384] device offline error, dev sda, sector 733222 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 1462.190806][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 91652) [ 1462.220112][ T4384] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1462.256064][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 94246) [ 1462.312005][ T4384] device offline error, dev sda, sector 762150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1462.326426][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 95268) [ 1462.381365][ T4384] device offline error, dev sda, sector 766030 op 0x1:(WRITE) flags 0x0 phys_seg 17 prio class 2 [ 1462.401272][T17676] chnl_net:caif_netlink_parms(): no params data found [ 1462.414704][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 95753) [ 1462.460049][ T4384] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1462.495990][ T4384] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 96294) [ 1462.641031][T17676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.657190][T17676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.674156][T17676] device bridge_slave_0 entered promiscuous mode [ 1462.687160][T17676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.694356][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.712007][T17676] device bridge_slave_1 entered promiscuous mode [ 1462.757806][T17676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.784212][T17676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.836092][T17676] team0: Port device team_slave_0 added [ 1462.856298][T17676] team0: Port device team_slave_1 added [ 1462.901438][T17676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.915295][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.951728][T17676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.966793][T17676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.973790][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.013558][T17676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.625255][T17623] Bluetooth: hci4: command 0x0419 tx timeout [ 1463.634097][ T3601] Aborting journal on device sda1-8. [ 1463.649711][ T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 1463.655617][T17674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2893: Detected aborted journal [ 1463.659422][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1463.671552][T13729] EXT4-fs (loop6): unmounting filesystem. [ 1463.689714][ T3601] JBD2: I/O error when updating journal superblock for sda1-8. [ 1463.733853][T17676] device hsr_slave_0 entered promiscuous mode [ 1463.777879][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1463.800308][ T4260] EXT4-fs (sda1): I/O error while writing superblock [ 1463.819235][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1463.826341][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1463.842535][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1463.854262][ T4260] EXT4-fs (sda1): I/O error while writing superblock [ 1463.859800][T17674] EXT4-fs (sda1): previous I/O error to superblock detected [ 1463.866965][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1463.875634][T17623] Bluetooth: hci6: command 0x0409 tx timeout [ 1463.890165][T17693] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2894: Detected aborted journal [ 1463.906811][T17676] device hsr_slave_1 entered promiscuous mode [ 1463.964927][T17676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1463.972562][T17676] Cannot create hsr debugfs directory [ 1463.984965][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1463.995619][T17693] EXT4-fs (sda1): previous I/O error to superblock detected [ 1464.003591][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1464.014199][T17674] EXT4-fs (sda1): I/O error while writing superblock [ 1464.022130][T17693] EXT4-fs (sda1): I/O error while writing superblock [ 1464.065316][T17674] EXT4-fs (sda1): Remounting filesystem read-only [ 1464.072914][T17674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2893: Detected aborted journal [ 1464.094748][T17693] EXT4-fs (sda1): Remounting filesystem read-only [ 1464.117154][T17693] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2894: Detected aborted journal [ 1464.166224][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1464.239824][T17695] futex_wake_op: syz.6.2894 tries to shift op by 144; fix this program [ 1464.251326][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1464.260975][T17674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2893: Detected aborted journal [ 1464.328620][T17693] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2894: Detected aborted journal [ 1464.340039][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1464.356612][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1464.680596][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 1464.691559][T17675] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1464.713617][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 1465.141440][T17676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1465.235244][T17676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1465.255634][T17676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1465.323851][T17676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1465.634127][T17676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.704096][T15684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1465.725566][T15684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1465.744374][T17676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.768906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1465.787601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1465.807385][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.814717][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.945022][T17623] Bluetooth: hci6: command 0x041b tx timeout [ 1465.963725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1465.972101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1465.992545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1466.003508][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.010691][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.045090][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1466.062088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1466.183029][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1466.200609][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1466.221018][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1466.241021][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1466.254712][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1466.263547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1466.282512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1466.293496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1466.313168][T17676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1466.337578][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1466.581547][T17716] loop5: detected capacity change from 0 to 1024 [ 1466.605671][T17716] EXT4-fs: Ignoring removed bh option [ 1466.716009][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1466.723593][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1466.800597][T17676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.839414][T17716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1466.867735][T17716] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1466.891726][T14372] device hsr_slave_0 left promiscuous mode [ 1466.932609][T17728] netlink: 143932 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1466.942288][T14372] device hsr_slave_1 left promiscuous mode [ 1466.949572][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.951488][T17716] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.2903: Freeing blocks not in datazone - block = 0, count = 16 [ 1466.980684][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.993239][T14372] device bridge_slave_1 left promiscuous mode [ 1466.994938][T17728] net_ratelimit: 7070 callbacks suppressed [ 1466.994952][T17728] netlink: zone id is out of range [ 1467.006124][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.034486][T17728] netlink: zone id is out of range [ 1467.046313][T17729] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2903: bg 0: block 112: padding at end of block bitmap is not set [ 1467.062512][T14372] device bridge_slave_0 left promiscuous mode [ 1467.065683][T17728] netlink: zone id is out of range [ 1467.078713][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.081202][T17728] netlink: zone id is out of range [ 1467.116918][T17728] netlink: zone id is out of range [ 1467.133929][T17729] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1467.146997][T17728] netlink: zone id is out of range [ 1467.171472][T17728] netlink: zone id is out of range [ 1467.179160][T14372] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 1467.197642][T14372] device bridge7 left promiscuous mode [ 1467.356290][T17728] netlink: zone id is out of range [ 1467.368685][T17729] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1467.368685][T17729] [ 1467.378768][T17728] netlink: zone id is out of range [ 1467.388945][T17728] netlink: zone id is out of range [ 1467.726225][T14372] bond7 (unregistering): Released all slaves [ 1467.820723][T17729] EXT4-fs (loop5): Total free blocks count 0 [ 1467.842021][T17729] EXT4-fs (loop5): Free/Dirty block details [ 1467.863418][T17729] EXT4-fs (loop5): free_blocks=0 [ 1467.880909][T17729] EXT4-fs (loop5): dirty_blocks=16 [ 1467.895863][T17729] EXT4-fs (loop5): Block reservation details [ 1467.919114][T17729] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1468.024956][T17623] Bluetooth: hci6: command 0x040f tx timeout [ 1468.145145][T17739] loop2: detected capacity change from 0 to 128 [ 1468.164399][T17741] futex_wake_op: syz.3.2909 tries to shift op by 144; fix this program [ 1468.185965][T11601] EXT4-fs (loop5): unmounting filesystem. [ 1468.232817][T17739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1468.276609][T17739] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.312049][T14372] bond6 (unregistering): Released all slaves [ 1468.390659][T14372] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1468.399692][T14372] device bridge5 left promiscuous mode [ 1468.456684][ T26] audit: type=1800 audit(1785698778.381:124): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2911" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 1468.525301][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1468.711994][T14372] bond5 (unregistering): Released all slaves [ 1468.734031][T14372] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1468.742905][T14372] device bridge4 left promiscuous mode [ 1468.941106][T14372] bond4 (unregistering): Released all slaves [ 1468.963445][T14372] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1468.971639][T14372] device bridge3 left promiscuous mode [ 1469.164231][T14372] bond3 (unregistering): Released all slaves [ 1469.197377][T14372] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1469.206799][T14372] device bridge2 left promiscuous mode [ 1469.411670][T14372] bond2 (unregistering): Released all slaves [ 1469.432529][T14372] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1469.440721][T14372] device bridge1 left promiscuous mode [ 1469.629856][T14372] bond1 (unregistering): Released all slaves [ 1470.109137][T17623] Bluetooth: hci6: command 0x0419 tx timeout [ 1470.201465][T14372] team0 (unregistering): Port device team_slave_1 removed [ 1470.257441][T14372] team0 (unregistering): Port device team_slave_0 removed [ 1470.314004][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.371848][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.771177][T14372] bond0 (unregistering): Released all slaves [ 1470.883805][T17757] EXT4-fs error: 113 callbacks suppressed [ 1470.883825][T17757] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:8: reading directory lblock 0 [ 1470.905142][T17758] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:8: reading directory lblock 0 [ 1470.923390][T17746] team0: Device wg0 is of different type [ 1471.073195][T17759] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:3: reading directory lblock 0 [ 1471.077193][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1471.098209][T17760] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:3: reading directory lblock 0 [ 1471.177571][T17761] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2915: Detected aborted journal [ 1471.190151][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1471.191295][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1471.203737][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1471.233840][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1471.241191][T17761] EXT4-fs: 97 callbacks suppressed [ 1471.241208][T17761] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.254345][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1471.261878][T17762] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2916: Detected aborted journal [ 1471.278060][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.285230][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.293051][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1471.330249][T17761] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.336647][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1471.338907][T17762] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.357377][T17763] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.365775][T17765] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.373232][T17761] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.385605][T17765] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.397513][T17676] device veth0_vlan entered promiscuous mode [ 1471.399082][T17762] EXT4-fs (sda1): Remounting filesystem read-only [ 1471.406165][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1471.440042][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1471.478933][T17676] device veth1_vlan entered promiscuous mode [ 1471.508826][T17676] device veth0_macvtap entered promiscuous mode [ 1471.526537][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1471.544249][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1471.553247][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1471.572251][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1471.586226][T17676] device veth1_macvtap entered promiscuous mode [ 1471.603867][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1471.613833][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1471.633947][T17768] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1471.643214][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.669298][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.687939][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.703393][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.741507][T17676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.762200][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1471.774276][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1471.827511][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.847355][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.865755][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.886782][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.903528][T17676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.925000][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1471.943085][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1471.970103][T17676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.992160][T17676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.001618][T17676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.017745][T17676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.246444][ T4751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.254327][ T4751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.326517][T11843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1472.372542][T15684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.393222][T15684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.441771][T15684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1472.701166][T17785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1472.935357][T14372] tipc: Left network mode [ 1473.330770][T17800] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2927'. [ 1473.433912][T17803] device syzkaller0 entered promiscuous mode [ 1474.267514][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2937'. [ 1474.290010][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2937'. [ 1474.713691][T17834] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1474.743514][T17832] net_ratelimit: 7070 callbacks suppressed [ 1474.743536][T17832] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1474.981306][T14372] device hsr_slave_0 left promiscuous mode [ 1474.987839][T14372] device hsr_slave_1 left promiscuous mode [ 1474.994124][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.003994][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.012647][T14372] device bridge_slave_1 left promiscuous mode [ 1475.019377][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.028586][T14372] device bridge_slave_0 left promiscuous mode [ 1475.035065][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.283866][T14372] bond6 (unregistering): Released all slaves [ 1475.318131][T14372] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1475.335911][T14372] device bridge5 left promiscuous mode [ 1475.553763][T14372] bond5 (unregistering): Released all slaves [ 1475.759892][T14372] bond4 (unregistering): Released all slaves [ 1475.781507][T14372] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1475.800056][T14372] device bridge3 left promiscuous mode [ 1476.071812][T17839] EXT4-fs error: 118 callbacks suppressed [ 1476.071835][T17839] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2944: Detected aborted journal [ 1476.071954][T14372] bond3 (unregistering): Released all slaves [ 1476.117178][T14372] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1476.125571][T14372] device bridge2 left promiscuous mode [ 1476.340518][T14372] bond2 (unregistering): Released all slaves [ 1476.362663][T14372] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1476.371520][T14372] device bridge1 left promiscuous mode [ 1476.591234][T17855] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1476.598981][T17856] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2947: Detected aborted journal [ 1476.610450][T17855] EXT4-fs: 92 callbacks suppressed [ 1476.610463][T17855] EXT4-fs (sda1): Remounting filesystem read-only [ 1476.614406][T17856] EXT4-fs (sda1): Remounting filesystem read-only [ 1476.628224][T17855] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 1476.633837][T14372] bond1 (unregistering): Released all slaves [ 1476.653237][T17856] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2947: Detected aborted journal [ 1476.681077][T17856] EXT4-fs (sda1): Remounting filesystem read-only [ 1476.699064][T17857] ieee802154 phy0 wpan0: encryption failed: -22 [ 1477.273020][T14372] team0 (unregistering): Port device team_slave_1 removed [ 1477.328943][T14372] team0 (unregistering): Port device team_slave_0 removed [ 1477.382524][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.437794][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.503577][T17859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2948: Detected aborted journal [ 1477.511775][T17858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1477.516095][T17859] EXT4-fs (sda1): Remounting filesystem read-only [ 1477.532440][T17858] EXT4-fs (sda1): Remounting filesystem read-only [ 1477.544458][T17858] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 1477.563192][T17859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2948: Detected aborted journal [ 1477.589405][T17859] EXT4-fs (sda1): Remounting filesystem read-only [ 1477.604471][T17861] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:15: reading directory lblock 0 [ 1477.964096][T14372] bond0 (unregistering): Released all slaves [ 1478.086660][T17848] device batadv0 entered promiscuous mode [ 1478.101633][T17848] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1478.490133][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1478.506068][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1478.547845][T17866] EXT4-fs (sda1): Remounting filesystem read-only [ 1478.590386][T17869] EXT4-fs (sda1): Remounting filesystem read-only [ 1478.624539][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2950'. [ 1479.007976][T17875] netlink: 'syz.6.2950': attribute type 10 has an invalid length. [ 1479.038935][T17875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1479.195868][T14372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.268461][T14372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.325372][T14372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.381940][T14372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.698233][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1479.818084][T17892] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1479.911133][T17884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1480.664449][T14372] device hsr_slave_0 left promiscuous mode [ 1480.671356][T14372] device hsr_slave_1 left promiscuous mode [ 1480.678415][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1480.687402][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.698598][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.706503][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.714537][T14372] device bridge_slave_1 left promiscuous mode [ 1480.721073][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.731989][T14372] device bridge_slave_0 left promiscuous mode [ 1480.738639][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.785382][T14372] device veth1_macvtap left promiscuous mode [ 1480.792187][T14372] device veth0_macvtap left promiscuous mode [ 1480.810039][T14372] device veth1_vlan left promiscuous mode [ 1480.830561][T14372] device veth0_vlan left promiscuous mode [ 1481.081244][ T3935] EXT4-fs error: 90 callbacks suppressed [ 1481.081265][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1481.374117][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1481.529224][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1481.644174][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1481.679657][T14372] team0 (unregistering): Port device team_slave_1 removed [ 1481.741870][T14372] team0 (unregistering): Port device team_slave_0 removed [ 1481.791589][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.847578][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.062269][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1482.090193][ T4260] EXT4-fs: 26 callbacks suppressed [ 1482.090212][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.103239][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1482.134897][T17931] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1482.138100][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.168186][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1482.179927][T17931] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.188184][T17932] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2961: Detected aborted journal [ 1482.193928][T17931] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 1482.203401][T17933] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.220532][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.240457][T17934] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.247193][T17932] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.261166][T17934] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.270015][T17933] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.282088][T17932] EXT4-fs (sda1): Remounting filesystem read-only [ 1482.436494][T14372] bond0 (unregistering): Released all slaves [ 1482.634165][T17944] device batadv0 entered promiscuous mode [ 1482.709627][T17944] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1483.632285][T17953] xt_connbytes: Forcing CT accounting to be enabled [ 1483.674992][T17953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1483.750554][T17955] device syzkaller0 entered promiscuous mode [ 1484.586862][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.593285][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.572174][T17979] EXT4-fs error: 41 callbacks suppressed [ 1486.572192][T17979] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1486.602985][T17979] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 1486.622577][T17984] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2972: Detected aborted journal [ 1486.638429][T17981] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2975: Detected aborted journal [ 1486.651322][T17983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2974: Detected aborted journal [ 1486.666399][T17982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2973: Detected aborted journal [ 1486.681025][T17983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2974: Detected aborted journal [ 1486.699506][T17982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2973: Detected aborted journal [ 1486.711759][T17981] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2975: Detected aborted journal [ 1486.727438][T17984] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2972: Detected aborted journal [ 1488.252058][T17994] EXT4-fs: 33 callbacks suppressed [ 1488.252077][T17994] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.298060][T17995] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.306062][T17998] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.318232][T17997] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.327383][T17996] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.339428][T17995] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.352763][T17998] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.362331][T17997] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.370746][T17996] EXT4-fs (sda1): Remounting filesystem read-only [ 1488.399307][T18001] device syzkaller0 entered promiscuous mode [ 1488.447613][T18001] tipc: Enabled bearer , priority 0 [ 1488.495030][T18001] tipc: Resetting bearer [ 1488.513220][T17997] tipc: Resetting bearer [ 1488.552467][T17997] tipc: Disabling bearer [ 1490.013507][T18007] EXT4-fs (sda1): Remounting filesystem read-only [ 1490.077344][T18012] netlink: 'syz.3.2983': attribute type 12 has an invalid length. [ 1490.102920][T18012] netlink: 'syz.3.2983': attribute type 29 has an invalid length. [ 1490.149008][T18012] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2983'. [ 1490.166318][T18012] netlink: 'syz.3.2983': attribute type 1 has an invalid length. [ 1490.179893][T18012] netlink: 'syz.3.2983': attribute type 2 has an invalid length. [ 1490.188450][T18012] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2983'. [ 1491.584658][T18025] EXT4-fs error: 33 callbacks suppressed [ 1491.584677][T18025] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1491.746642][T18026] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1491.838299][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1491.849848][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1491.859411][T18027] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1491.861814][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1491.879459][T18027] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 1491.938915][T18030] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2987: Detected aborted journal [ 1491.952492][T18029] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2986: Detected aborted journal [ 1491.966814][T18028] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2984: Detected aborted journal [ 1493.853222][T18041] EXT4-fs: 18 callbacks suppressed [ 1493.853240][T18041] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.888809][T18044] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.897443][T18043] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.910398][T18045] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.919320][T18042] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.929223][T18042] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.940469][T18044] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.949390][T18043] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.959508][T18045] EXT4-fs (sda1): Remounting filesystem read-only [ 1493.966814][T18046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2991'. SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=4 req=2892 state=1 status=67 (errno 9: Bad file descriptor) [ 1495.890915][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 1496.717180][ T3639] EXT4-fs error: 46 callbacks suppressed [ 1496.717198][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 1496.739867][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1496.766164][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1496.778108][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 1496.796522][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 1496.810968][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 1497.097855][T17622] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 3, block_bitmap = 132 [ 1497.157424][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 1497.164737][T17622] EXT4-fs error (device sda1): ext4_discard_preallocations:5132: comm syz-executor: Error -5 reading block bitmap for 3 [ 1497.204940][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 1497.258275][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.372958][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.553837][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.660511][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.068906][ T47] bond0: (slave ip6gretap0): Releasing backup interface [ 1498.796837][ T47] device hsr_slave_0 left promiscuous mode [ 1498.803166][ T47] device hsr_slave_1 left promiscuous mode [ 1498.810291][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.819166][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.827420][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.835384][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.843245][ T47] device bridge_slave_1 left promiscuous mode [ 1498.849542][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.858698][ T47] device bridge_slave_0 left promiscuous mode [ 1498.865485][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.889012][ T47] device veth1_macvtap left promiscuous mode [ 1498.895463][ T47] device veth0_macvtap left promiscuous mode [ 1498.901669][ T47] device veth1_vlan left promiscuous mode [ 1498.909324][ T47] device veth0_vlan left promiscuous mode [ 1499.531732][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1499.585968][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1499.640619][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.697372][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.215717][ T47] bond0 (unregistering): Released all slaves [ 1500.894016][ T47] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.975122][ T47] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.026855][ T47] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.082555][ T47] bond0: (slave netdevsim0): Releasing backup interface [ 1501.092950][ T47] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.730594][ T3935] EXT4-fs error: 164 callbacks suppressed [ 1501.730606][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 1501.774910][T18121] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1501.791749][T18122] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1501.851877][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 1501.898849][T18123] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1501.930183][T18126] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1501.942066][ T47] tipc: Left network mode [ 1501.969725][ T47] tipc: Left network mode [ 1501.970665][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 1501.990840][T18128] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1502.028698][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 1502.043640][T18129] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 1503.773823][ T47] device hsr_slave_0 left promiscuous mode [ 1503.781512][ T47] device hsr_slave_1 left promiscuous mode [ 1503.789380][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.797094][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.807085][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.814514][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.822390][ T47] device bridge_slave_1 left promiscuous mode [ 1503.829240][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.837643][ T47] device bridge_slave_0 left promiscuous mode [ 1503.843878][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.863707][ T47] device hsr_slave_0 left promiscuous mode [ 1503.870798][ T47] device hsr_slave_1 left promiscuous mode [ 1503.877699][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.886345][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.893853][ T47] device bridge_slave_1 left promiscuous mode [ 1503.900469][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.908758][ T47] device bridge_slave_0 left promiscuous mode [ 1503.918545][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.940136][ T47] device hsr_slave_0 left promiscuous mode [ 1503.951637][ T47] device hsr_slave_1 left promiscuous mode [ 1503.959759][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.967691][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.975617][ T47] device bridge_slave_1 left promiscuous mode [ 1503.981799][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.990390][ T47] device bridge_slave_0 left promiscuous mode [ 1503.996890][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.024267][ T47] device veth1_vlan left promiscuous mode [ 1504.030585][ T47] device veth0_vlan left promiscuous mode [ 1504.117824][ T47] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1504.127698][ T47] device bridge1 left promiscuous mode [ 1504.349719][ T47] bond1 (unregistering): Released all slaves [ 1504.884479][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1504.943015][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1505.000560][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.062416][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.430690][ T47] bond0 (unregistering): Released all slaves [ 1505.759901][ T47] bond3 (unregistering): Released all slaves [ 1505.780988][ T47] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1505.789443][ T47] device bridge2 left promiscuous mode