last executing test programs: 42.487599279s ago: executing program 2 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d000000000014"], 0x38}}, 0x0) 42.481140779s ago: executing program 2 (id=554): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001000000407d1e38310000000000010902240001000040b10904000001030001000921010100012205000905810b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x5, "89dfec7e"}]}}, 0x0}, 0x0) 41.762732056s ago: executing program 2 (id=562): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) pwritev2(r0, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) 41.663533675s ago: executing program 2 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b189a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 41.658211085s ago: executing program 2 (id=565): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x6000000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 41.329515026s ago: executing program 2 (id=573): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 41.329352936s ago: executing program 32 (id=573): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 6.165776959s ago: executing program 4 (id=790): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e8, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH71p0k0/qj1EPFgQEyaNNYKIuYiInqyRw/G/Kilm0aSFWwIqCjeevPqQfHg3+BJwf9AEE+epRAkLehxZXZn4prspt1u1sHs5wNT3ps3y3sz333zmjfzNoC+NRkRn0TEcESsRsRovj/Jt3i1sWXH3d3dXsq2JGq1t/9I6uV3dreXoukzmdPZP2nEVBqRfh5xvkW9mze3ri9WKisbeX6muvbBzObNreevrS1eXbm6cmPu4ouz85fmLs2+cGTneuv85Zeenn/j11uvfbP0y5Xv3svaeyYvaz6PozKZXbW0ddmFo66sZGfKbgAPJPt6DkTEYL3/j8ZAPdUwGh+/U2rjAICeqNVqA/vyAMCxlxjzAaDPFH/339ndXiq2UiYiKMXOQkScaMS/eL7bKBncexI01MPne5MR8X76/US2RY+ewwIAAAD0sx8WIuJyq/m/NJ5qOu5sRDyUrw8Yi4jxiHg4Ih7psv7JffmD8z/p7S6r4BA7CxEvN63tuNsU/9zYQJ47W4/9ULJ6rbJyIf8+TMXQSJafPaSOP7euf9GurHn+L9uy+ou5wLwdtwdH/v2Z5cXqYjfnzD92Po14crBV/JO9+d8kIia6qOPH8bWv2pXdO/70Uu3riGdb9v9k75jk8PVZM/X7wUxxVzjorZ8+e7dd/eJfrqz/nzo8/mNJ83q9zc7rePzcbxvtyh70/j+cXKk3cDjf99FitboxGzGcvHlw/1znbT6uiutRXK8s/lPPtB7/iyBkF/TRiHgsi2VEPBER5zqo89vxv062K9P/y5XFf7mj/t954pWJ139uV//99f/5emOm8j3+/3dv9xugstsJAAAAAAAAwNFI62u7k3R6L52m09ON3/CeiFNpZX2z+tzq+oc3lhtrwMdiKC3e9Bpteh90Nn8vuMjP7ctfzN8Z/nLkZD0/vbReWS775AGgT51uM/5nfh8pu3UAQM+cKLsBAMB/zvgPAP3H+A8A/cf4DwD9x/gPAP3H+A8AfaWb3/WXkJA4romy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/b38HAAD//78JzGY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r0, &(0x7f0000000000)="c0", 0x1, 0x8080c61) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x8000c61) fallocate(r0, 0x3, 0x8080007, 0x8000c60) 5.988628766s ago: executing program 4 (id=792): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="4e354f54f68d5a3fc044c1264dea3b23c3213fd62972754279c027d02faf46753953bc03f0e3bcd94605fb94537fed5dee7dcdc520e21505bf33154cd388cbeee19dba79cb9dcfd385cdcc389fcc4c21f3039fd4825dddb8dc263a9357c2bc6f977309e30e0b1ab66cbaae86a26e2c849c4e576c84d1728d415d0dc60bd2e4c11526e107b3460db8fd3b8fe698e488ae5e15a13fb55bd0a2e9f1ad8f990a0e1dc94b91b26221288e64f27ca7afe8875edfb1a4eca888342f9d9621dcebf1681d52dbb3bda2921d3d40f0fc0fa04f453039bb3ff9399d7ee31a975da7c23f6dfd007636cc21f0", 0xe6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x0, 0x3) 5.853921538s ago: executing program 3 (id=796): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, 0x0) lseek(0xffffffffffffffff, 0x339, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00007fe000/0x1000)=nil, 0x1000, 0x300000c, 0x50, 0xffffffffffffffff, 0x3b766000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) syz_open_dev$usbfs(0x0, 0xf, 0x8041) socket$inet6(0xa, 0x6, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) getresgid(&(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780)) 5.559590255s ago: executing program 4 (id=798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 5.070111931s ago: executing program 4 (id=804): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 4.931514184s ago: executing program 3 (id=805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x44}}, 0x4000000) 4.843508291s ago: executing program 3 (id=808): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0xb, 0x7, 0x7, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x1, 0x700, 0xe784, 0x5}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) syz_open_dev$vcsa(&(0x7f0000000040), 0x1005, 0xe0882) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) 3.795469989s ago: executing program 4 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) socket(0x11, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3.648211182s ago: executing program 1 (id=817): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xb, &(0x7f0000000900)={0x2, 0x4}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 3.618802455s ago: executing program 4 (id=818): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r0}, 0x18) lremovexattr(0x0, 0x0) io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0xd38a, 0x40, 0x2, 0x1ec}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, &(0x7f0000013000), &(0x7f00000003c0)) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) accept(r1, 0x0, 0x0) 3.308855954s ago: executing program 5 (id=823): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x181800, 0x0) read(r0, 0x0, 0x0) 3.289116976s ago: executing program 5 (id=824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048016a00309047f0e01ff2dde700ad7077208000000000024050543"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$poke(0xd7c16c1c2ef5e447, 0x0, &(0x7f0000000180), 0xfffffffffffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.235384411s ago: executing program 0 (id=826): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000fdffffff95"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84102, 0x95) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xfffffffd}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1d, 0xffffffff, 0xed, 0x55b6, 0x10100, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x2, 0x4, 0x4, 0x18, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) socket$inet6(0xa, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.791608232s ago: executing program 0 (id=827): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 2.758587615s ago: executing program 1 (id=828): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) 2.733503887s ago: executing program 1 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.659521914s ago: executing program 0 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x5409, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 2.659283504s ago: executing program 1 (id=831): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2.636634496s ago: executing program 1 (id=832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000580)=""/156) r6 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, r6) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 2.135724162s ago: executing program 5 (id=833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@acl}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.991431665s ago: executing program 5 (id=834): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8084) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000000200000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r11, 0x0, &(0x7f0000000500)=""/216}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) 1.843475879s ago: executing program 3 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r1, r1, 0x5, r4, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) 1.823342421s ago: executing program 0 (id=836): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, 0x0, 0x0, 0x14f0e8, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x200050cd, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x6, 0x332, 0x0, r2}, &(0x7f0000000100), &(0x7f0000ff4000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.751427158s ago: executing program 5 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0xfffffffffffffffa, 0x0) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50) unshare(0x24020400) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) io_uring_enter(r7, 0x4f81, 0x455c, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xf2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x200000000000000, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000074d2000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x442, &(0x7f0000000300)="$eJzs28tvG0UYAPBv/Wjpi4SqPPoAAgVR8UiatJQeuIBA4gASEhzKMSRpVeo2qAkSrSooCJUTQpW4I44I/gJOcEHACYkr3FGlCuXSwslo7d3Edhw3MU6c4N9P2nZmd6z5Pu+OPbsTBzCwRtJ/kojdEfF7RAzVq80NRur/3V64MvX3wpWpJKrVN/5Kau1uLVyZypvmr9uVV0oRhU+SONim37lLl89NViozF7P62Pz5d8fmLl1+5uz5yTMzZ2YuTJw8efzY+HMnJp7tSZ5pXrcOfDB7aP8rb11/berU9bd//jbJ82/Jo0dGOh18vFrtcXf9taehnJT6GAhrUqwP0yjXxv9QFGPp5A3Fyx/3NThgXVWr1ep9Kx++WgX+x5LodwRAf+Rf9On9b75t0NRjU7j5Qv0GKM37drbVj5SikLUpt9zf9tJIRJy6+s+X6Rbr8xwCAKDJ9+n85+l2879CND4XujtbQxmOiHsiYm9EnIiIfRFxb0St7f0R8cAa+29dJFk+/ync6CqxVUrnf89na1vN87989hfDxay2p5Z/OTl9tjJzNHtPjkR5e1of79DHDy/99vlKxxrnf+mW9p/PBbM4bpS2N79menJ+sjnE7t38KOJAqV3+yeJKQBIR+yPiQJd9nH3y60MrHbtz/h30YJ2p+lXEE/XzfzVa8s8lndcnx+6KyszRsfyqWO6XX6+9vlL//yn/HkjP/8621/9i/sNJ43rt3Nr7uPbHpyve03R7/W9L3mza9/7k/PzF8Yhtyav1oBv3T7S0m1hqn+Z/5HD78b83lt6JgxGRXsQPRsRDEfFwFvsjEfFoRBzukP9PLz72Tvf5r680/+k1nf+lwrZo3dO+UDz343dNnQ6vJf/0/B+vlY5kexY//zpYTVzdXc0AAACw9RQiYneSFEbzchQKo6P1v+HfFzsLldm5+adOz753Ybr+G4HhKBfyJ11DDc9Dx7Pb+rw+0VI/lj03/qK4o1YfnZqtTPc7eRhwu6IUu2P5+E/9Wex3dMC683stGFzGPwwu4x8Gl/EPg6vN+N/RjziAjdfu+//DPsQBbLyG8f9NP+MANp77fxhcxj8MLuMfBtLcjrjzj+QVtkQhPZ8b12kUNkHKqy58Vt4UYWyhQr8/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//oWblhg==") open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) 1.114971287s ago: executing program 0 (id=838): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xb, &(0x7f0000000900)={0x2, 0x4}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 1.08129757s ago: executing program 1 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xfffffffe}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 239.492408ms ago: executing program 3 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$nl_route(r3, 0x0, 0x4040000) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x2, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 29.945517ms ago: executing program 0 (id=841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x4e1d, 0x0, @remote}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x95, 0x10000) 29.728767ms ago: executing program 5 (id=842): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d58}}]}, 0x0, 0x46a, &(0x7f0000001040)="$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") 0s ago: executing program 3 (id=843): mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x2, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x90, 0xbf, 0x10, 0x7c0, 0x1506, 0xaebc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x6, 0x4, 0x5a, 0x83, 0xeb, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x400, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xc4, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x24, 0x86, 0x7}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): x timeout [ 27.051111][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.097798][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.139433][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.140600][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.194319][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.196330][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.203987][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.205940][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.211355][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.214781][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.223950][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.225514][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.230526][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.231734][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.233284][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.234782][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.236063][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.237201][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.240576][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.242023][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.243487][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.245070][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.246601][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.247774][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.257939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.259568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.260907][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.262007][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.263270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.276008][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.278042][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.279641][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.281276][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.282772][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.284354][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.285920][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.289743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.296400][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.298263][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.301827][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.310731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.312438][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.313925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.315532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.318418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.319973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.321392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.325680][ T4318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.328704][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.331245][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.332804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.334290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.335827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.338894][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.349067][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.352374][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.353819][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.356067][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.368371][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.369798][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.372354][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.379102][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.384071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.385476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.392612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.394282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.395857][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.397022][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.409435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.412776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.414689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.416036][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.417231][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.419241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.420900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.422383][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.423404][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.424690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.426514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.432036][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.435472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.438966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.440598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.442045][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.443155][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.444444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.446304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.450933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.462144][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.471950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.473696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.475484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.478796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.480433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.481638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.482821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.484238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.485506][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.486583][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.487982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.489523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.490956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.492264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.493672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.495453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.497645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.499085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.501877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.503388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.504819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.506364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.515783][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.517813][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.519217][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.520362][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.521640][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.523132][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.525555][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.533314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.534916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.536297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.539535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.541038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.542403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.543818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.545055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.546245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.549387][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.554470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.556009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.569932][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.574331][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.575960][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.581959][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.583408][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.588317][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.590841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.592291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.594087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.595454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.601198][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.602792][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.613000][ T4323] device veth0_vlan entered promiscuous mode [ 27.616314][ T4318] device veth0_vlan entered promiscuous mode [ 27.622225][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.623802][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.625505][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.628451][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.632807][ T4323] device veth1_vlan entered promiscuous mode [ 27.640762][ T4318] device veth1_vlan entered promiscuous mode [ 27.652931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.654607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.655973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.657976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.660541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.665475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.670521][ T4323] device veth0_macvtap entered promiscuous mode [ 27.672771][ T4323] device veth1_macvtap entered promiscuous mode [ 27.681079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.682675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.684183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.685385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.689985][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.691201][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.694856][ T4318] device veth0_macvtap entered promiscuous mode [ 27.699672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.701595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.703622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.707821][ T4318] device veth1_macvtap entered promiscuous mode [ 27.711422][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.715641][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.719766][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.722875][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.724445][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.725992][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.731794][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.733994][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.735392][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.738475][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.740090][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.742057][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.745574][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.747611][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.749053][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.750489][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.752706][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.754269][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.755742][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.759922][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.761945][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.763490][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.765380][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.770221][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.771730][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.774402][ T4318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.775788][ T4318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.777565][ T4318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.778895][ T4318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.783162][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.800277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.801894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.803797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.805264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.808054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.809559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.811682][ T4327] device veth0_vlan entered promiscuous mode [ 27.821604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.823157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.853783][ T4327] device veth1_vlan entered promiscuous mode [ 27.872892][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.874084][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.875742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.877296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.878725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.883237][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.884468][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.886126][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.892952][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.894537][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.897882][ T4327] device veth0_macvtap entered promiscuous mode [ 27.900280][ T4327] device veth1_macvtap entered promiscuous mode [ 27.913628][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.915296][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.917691][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.919343][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.920860][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.922257][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.931116][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.932390][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.935586][ T4319] device veth0_vlan entered promiscuous mode [ 27.939407][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.941734][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.943066][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.945845][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.947958][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.949453][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.951037][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.953374][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.955035][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.956453][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.958718][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.960301][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.963536][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.974163][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.975887][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.978074][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.979477][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.981651][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.984520][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.986162][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.990501][ T4319] device veth1_vlan entered promiscuous mode [ 27.993216][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.994734][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.996204][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.005885][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.008354][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.009602][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.012548][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.016390][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.018558][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.020125][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.021547][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.023076][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.026407][ T4332] device veth0_vlan entered promiscuous mode [ 28.034891][ T4332] device veth1_vlan entered promiscuous mode [ 28.048261][ T4319] device veth0_macvtap entered promiscuous mode [ 28.050958][ T4319] device veth1_macvtap entered promiscuous mode [ 28.085429][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.086856][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.088931][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.090651][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.092107][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.093566][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.094837][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.104834][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.106101][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.109319][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.120791][ T4435] loop2: detected capacity change from 0 to 512 [ 28.144213][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.145897][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.152292][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.154676][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.156281][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.168192][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.169764][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.176389][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.186507][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.188443][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.381030][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.391085][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.457443][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.468071][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.469544][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.471034][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.475499][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 28.477832][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.485578][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.488708][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.490081][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.500125][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.502355][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.503903][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.505439][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.514255][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.525397][ T4332] device veth0_macvtap entered promiscuous mode [ 28.527998][ T4332] device veth1_macvtap entered promiscuous mode [ 28.532492][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.542319][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.543840][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.545677][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.547375][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.548993][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.552978][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.554665][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.559834][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.563106][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.564670][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.566150][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.620642][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.661084][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.662644][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.664155][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.665675][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.671777][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.673683][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.675433][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.681891][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.683619][ T4442] loop2: detected capacity change from 0 to 40427 [ 28.684172][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.981045][ T4442] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3840) blocks(1024) [ 28.982650][ T4442] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.009826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.011576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.013375][ T4442] F2FS-fs (loop2): invalid crc value [ 29.024827][ T4442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.026272][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.028555][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.030109][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.031426][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.036906][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 29.039460][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 29.047092][ T4322] Bluetooth: hci3: command 0x041b tx timeout [ 29.048532][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 29.053977][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.055255][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.058143][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.062324][ T4442] F2FS-fs (loop2): Start checkpoint disabled! [ 29.065165][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.067309][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.069305][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.072465][ T4442] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 29.073787][ T4442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 29.117965][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 29.133777][ T1607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.135304][ T1607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.138503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.155962][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.160349][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.162422][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.263389][ T39] kworker/u4:2: attempt to access beyond end of device [ 29.263389][ T39] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 29.764129][ T4465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.765748][ T4465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.387726][ T4489] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 30.500757][ T4497] loop2: detected capacity change from 0 to 4096 [ 30.583873][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.595764][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.733522][ T4506] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 30.735586][ T4506] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 30.768923][ T4511] sctp: [Deprecated]: syz.0.25 (pid 4511) Use of int in max_burst socket option. [ 30.768923][ T4511] Use struct sctp_assoc_value instead [ 31.146887][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 31.146912][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 31.148969][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 31.150033][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 31.196824][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 31.463405][ T4523] loop3: detected capacity change from 0 to 16 [ 31.934572][ T4523] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 31.995498][ T4312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.051909][ T4532] loop2: detected capacity change from 0 to 1024 [ 32.492440][ T4541] loop0: detected capacity change from 0 to 4096 [ 32.494235][ T4541] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 32.519977][ T4541] ntfs: volume version 3.1. [ 32.554829][ T4545] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 32.569357][ T4547] loop4: detected capacity change from 0 to 512 [ 32.606197][ T4547] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.37: inode has both inline data and extents flags [ 32.609991][ T4547] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.37: couldn't read orphan inode 15 (err -117) [ 32.612907][ T4547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.665585][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 32.744674][ T4553] loop0: detected capacity change from 0 to 40427 [ 32.749165][ T4553] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(1) [ 32.750893][ T4553] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.753028][ T4561] block device autoloading is deprecated and will be removed. [ 32.755084][ T4553] F2FS-fs (loop0): invalid crc value [ 32.762415][ T4553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.773281][ T4553] F2FS-fs (loop0): Start checkpoint disabled! [ 32.786130][ T4553] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.787627][ T4553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 32.826413][ T4461] kworker/u4:8: attempt to access beyond end of device [ 32.826413][ T4461] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.932834][ T4573] loop2: detected capacity change from 0 to 256 [ 32.938977][ T4573] ======================================================= [ 32.938977][ T4573] WARNING: The mand mount option has been deprecated and [ 32.938977][ T4573] and is ignored by this kernel. Remove the mand [ 32.938977][ T4573] option from the mount to silence this warning. [ 32.938977][ T4573] ======================================================= [ 32.961775][ T4573] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 33.396011][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 33.396360][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 33.398246][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 33.398337][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 33.399222][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 33.413217][ T4579] loop3: detected capacity change from 0 to 32768 [ 33.444162][ T4579] XFS (loop3): Mounting V5 Filesystem [ 33.632258][ T4605] Bluetooth: MGMT ver 1.22 [ 33.889802][ T4579] XFS (loop3): Ending clean mount [ 33.905569][ T4579] XFS (loop3): Quotacheck needed: Please wait. [ 33.928207][ T4579] XFS (loop3): Quotacheck: Done. [ 33.950601][ T4319] XFS (loop3): Unmounting Filesystem [ 34.058680][ T4620] loop4: detected capacity change from 0 to 2048 [ 34.073730][ T4620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.086305][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.109050][ T4618] loop2: detected capacity change from 0 to 32768 [ 34.115384][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 34.145661][ T4618] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 34.160332][ T4618] XFS (loop2): Quotacheck needed: Please wait. [ 34.173984][ T4618] XFS (loop2): Quotacheck: Done. [ 34.181780][ T4632] loop4: detected capacity change from 0 to 512 [ 34.193395][ T4323] XFS (loop2): Unmounting Filesystem [ 34.259876][ T4632] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.261066][ T4632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.263000][ T4632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.287935][ T4632] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.61: bad orphan inode 131083 [ 34.289964][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.469915][ T4652] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 34.748880][ T4656] tipc: Started in network mode [ 34.749931][ T4656] tipc: Node identity 76d4fb35f3c1, cluster identity 4711 [ 34.751271][ T4656] tipc: Enabled bearer , priority 0 [ 34.753914][ T4656] device syzkaller0 entered promiscuous mode [ 34.754197][ T4646] loop0: detected capacity change from 0 to 32768 [ 34.765267][ T4646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.64 (4646) [ 34.792749][ T4646] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 34.794527][ T4646] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 34.801213][ T4646] BTRFS info (device loop0): metadata ratio 4 [ 34.802206][ T4646] BTRFS info (device loop0): setting nodatasum [ 34.803307][ T4646] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 34.804938][ T4646] BTRFS info (device loop0): trying to use backup root at mount time [ 34.811992][ T4646] BTRFS info (device loop0): use zlib compression, level 3 [ 34.813290][ T4646] BTRFS info (device loop0): enabling ssd optimizations [ 34.814944][ T4656] tipc: Resetting bearer [ 34.817433][ T4646] BTRFS info (device loop0): disabling tree log [ 34.818399][ T4646] BTRFS info (device loop0): using free space tree [ 34.822686][ T4654] tipc: Resetting bearer [ 34.862178][ T4665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.863817][ T4665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.909390][ T4654] tipc: Disabling bearer [ 34.934886][ T39] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 34.937809][ T4646] BTRFS warning (device loop0): couldn't read tree root [ 34.939230][ T4646] BTRFS warning (device loop0): try to load backup roots slot 1 [ 34.940712][ T1607] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 34.943064][ T4646] BTRFS warning (device loop0): couldn't read tree root [ 34.944204][ T4646] BTRFS warning (device loop0): try to load backup roots slot 2 [ 34.945635][ T4646] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 34.950413][ T4646] BTRFS warning (device loop0): couldn't read tree root [ 34.951630][ T4646] BTRFS warning (device loop0): try to load backup roots slot 3 [ 34.959056][ T4646] BTRFS info (device loop0): rebuilding free space tree [ 34.968200][ T4646] BTRFS info (device loop0): checking UUID tree [ 35.295312][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 35.380743][ T4327] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.513606][ T4684] loop1: detected capacity change from 0 to 40427 [ 35.522262][ T4684] F2FS-fs (loop1): invalid crc value [ 35.532225][ T4684] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.555005][ T4684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 35.582713][ T4318] syz-executor: attempt to access beyond end of device [ 35.582713][ T4318] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.677673][ T4328] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 35.679112][ T4328] Bluetooth: hci0: command 0x0c1a tx timeout [ 35.697999][ T4711] random: crng reseeded on system resumption [ 35.752957][ T4713] loop3: detected capacity change from 0 to 64 [ 35.763735][ T4713] MINIX-fs: mounting file system with errors, running fsck is recommended [ 35.786189][ T4709] loop1: detected capacity change from 0 to 32768 [ 35.902785][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.910897][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.974964][ T4715] loop3: detected capacity change from 0 to 32768 [ 36.002121][ T4715] XFS (loop3): Mounting V5 Filesystem [ 36.028739][ T4715] XFS (loop3): Ending clean mount [ 36.034494][ T4715] XFS (loop3): Quotacheck needed: Please wait. [ 36.055564][ T4715] XFS (loop3): Quotacheck: Done. [ 36.122069][ T4319] XFS (loop3): Unmounting Filesystem [ 36.474148][ T4737] loop2: detected capacity change from 0 to 4096 [ 36.480781][ T4737] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 36.491994][ T4737] ntfs: volume version 3.1. [ 36.494223][ T4737] ntfs: (device loop2): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 36.495991][ T4737] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 36.497821][ T4737] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 36.499921][ T4737] ntfs: (device loop2): load_system_files(): Failed to load $Secure. [ 36.501672][ T4737] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 36.714840][ T4755] binder: 4754:4755 tried to acquire reference to desc 0, got 1 instead [ 36.721017][ T4755] binder: 4754:4755 got reply transaction with bad transaction stack, transaction 5 has target 4754:0 [ 36.722946][ T4755] binder: 4754:4755 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2961 [ 36.724954][ T4403] binder: release 4754:4755 transaction 5 out, still active [ 36.726592][ T4403] binder: undelivered TRANSACTION_COMPLETE [ 36.977497][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.996732][ T4695] binder: send failed reply for transaction 5, target dead [ 37.183755][ T4775] loop3: detected capacity change from 0 to 32768 [ 37.207701][ T4775] (syz.3.100,4775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 37.211290][ T4775] (syz.3.100,4775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 37.213550][ T4777] loop1: detected capacity change from 0 to 32768 [ 37.243558][ T4775] JBD2: Ignoring recovery information on journal [ 37.252934][ T4777] XFS (loop1): Mounting V5 Filesystem [ 37.256375][ T4775] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 37.285321][ T4777] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 37.295907][ T4777] XFS (loop1): Starting recovery (logdev: internal) [ 37.303613][ T4777] XFS (loop1): Ending recovery (logdev: internal) [ 37.306946][ T4777] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 37.310169][ T4777] XFS (loop1): Failed to initialize disk quotas. [ 37.332856][ T4777] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 37.336768][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.376445][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 37.509500][ T4790] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 37.714610][ T4375] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 37.716168][ T4375] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 37.718481][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.720538][ T4375] usb 1-1: config 0 has no interfaces? [ 37.724710][ T4375] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 37.727547][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.734866][ T4791] loop3: detected capacity change from 0 to 512 [ 37.740206][ T4375] usb 1-1: config 0 descriptor?? [ 37.743420][ T4791] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.744712][ T4791] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.102: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 37.748139][ T4791] EXT4-fs error (device loop3): ext4_quota_enable:7020: comm syz.3.102: Bad quota inode: 4, type: 1 [ 37.754093][ T4791] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.764566][ T4791] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 37.765593][ T4791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.769679][ T4791] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 37.783926][ T4791] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.102: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 37.788021][ T4791] EXT4-fs error (device loop3): ext4_quota_enable:7020: comm syz.3.102: Bad quota inode: 4, type: 1 [ 37.794126][ T4791] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.820130][ T4801] device erspan0 entered promiscuous mode [ 37.822652][ T4795] loop4: detected capacity change from 0 to 8192 [ 37.830188][ T4795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.832122][ T4795] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 37.833587][ T4795] REISERFS (device loop4): using ordered data mode [ 37.834457][ T4795] reiserfs: using flush barriers [ 37.837158][ T4795] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.839936][ T4795] REISERFS (device loop4): checking transaction log (loop4) [ 37.852347][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 37.921684][ T4795] REISERFS (device loop4): Using tea hash to sort names [ 37.923529][ T4795] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 37.949603][ T4374] usb 1-1: USB disconnect, device number 2 [ 37.956280][ T4810] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 37.973606][ T4318] XFS (loop1): Unmounting Filesystem [ 38.085091][ T4819] ERROR: device name not specified. [ 38.128111][ T4816] loop2: detected capacity change from 0 to 32768 [ 38.172993][ T4816] XFS (loop2): Mounting V5 Filesystem [ 38.189979][ T4816] XFS (loop2): Ending clean mount [ 38.192466][ T4816] XFS (loop2): Quotacheck needed: Please wait. [ 38.218792][ T4816] XFS (loop2): Quotacheck: Done. [ 38.262592][ T4838] loop4: detected capacity change from 0 to 512 [ 38.284088][ T4838] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 38.285438][ T4838] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 38.331943][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 38.332860][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.340769][ T4838] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 4: comm syz.4.119: lblock 0 mapped to illegal pblock 4 (length 1) [ 38.367738][ T4838] EXT4-fs (loop4): Remounting filesystem read-only [ 38.390793][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 38.496004][ T4862] loop3: detected capacity change from 0 to 128 [ 38.545122][ T4866] xt_bpf: check failed: parse error [ 38.550278][ T4868] netlink: 300 bytes leftover after parsing attributes in process `syz.0.130'. [ 38.575563][ T4323] XFS (loop2): Unmounting Filesystem [ 38.691501][ T4881] binder: 4881:4878 cannot find target node [ 38.692531][ T4881] binder: 4878:4881 transaction call to 0:0 failed 7/29189/-22, size 0-0 line 3045 [ 38.700540][ T4375] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.735031][ T4883] loop1: detected capacity change from 0 to 4096 [ 38.864571][ T4318] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 38.865803][ T4318] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 39.036997][ T4912] loop0: detected capacity change from 0 to 8 [ 39.489785][ T4924] loop1: detected capacity change from 0 to 64 [ 40.031819][ T4936] loop0: detected capacity change from 0 to 128 [ 40.059794][ T4937] can0: slcan on ttyS3. [ 40.125886][ T4936] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 40.142211][ T4936] hpfs: filesystem error: improperly stopped [ 40.143327][ T4936] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 40.161159][ T4936] hpfs: You really don't want any checks? You are crazy... [ 40.162769][ T4936] hpfs: hpfs_map_sector(): read error [ 40.176139][ T4936] hpfs: code page support is disabled [ 40.188674][ T4936] hpfs: hpfs_map_4sectors(): unaligned read [ 40.200636][ T4936] hpfs: hpfs_map_4sectors(): unaligned read [ 40.209390][ T4936] hpfs: filesystem error: unable to find root dir [ 40.687909][ T4937] can0 (unregistered): slcan off ttyS3. [ 40.872268][ T4963] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 40.873443][ T4963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.882357][ T4963] vhci_hcd vhci_hcd.0: Device attached [ 40.902517][ T4971] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 40.903830][ T4971] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.165'. [ 40.909664][ T4968] block nbd0: shutting down sockets [ 40.957114][ T4976] loop0: detected capacity change from 0 to 64 [ 41.146911][ T4383] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 41.184056][ T4985] loop0: detected capacity change from 0 to 4096 [ 41.200974][ T4963] loop3: detected capacity change from 0 to 32768 [ 41.219413][ T4985] ntfs: volume version 3.1. [ 41.263811][ T4963] XFS (loop3): Mounting V5 Filesystem [ 41.332211][ T4963] XFS (loop3): Ending clean mount [ 41.344529][ T5008] loop2: detected capacity change from 0 to 512 [ 41.347643][ T4963] XFS (loop3): Quotacheck needed: Please wait. [ 41.377409][ T4963] XFS (loop3): Quotacheck: Done. [ 41.383535][ T5008] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 41.385372][ T4966] vhci_hcd: unknown pdu 1 [ 41.390421][ T4420] vhci_hcd: stop threads [ 41.391590][ T4420] vhci_hcd: release socket [ 41.392602][ T4420] vhci_hcd: disconnect device [ 41.404869][ T5008] EXT2-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 41.406236][ T5008] EXT2-fs (loop2): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 41.419978][ T5008] syz.2.174: attempt to access beyond end of device [ 41.419978][ T5008] loop2: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 41.602624][ T5006] loop0: detected capacity change from 0 to 32768 [ 41.613377][ T5006] (syz.0.173,5006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.616995][ T5006] (syz.0.173,5006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.640532][ T5006] JBD2: Ignoring recovery information on journal [ 41.670270][ T5006] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 41.724981][ T4327] ocfs2: Unmounting device (7,0) on (node local) [ 41.755601][ T5022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 41.795547][ T5026] loop1: detected capacity change from 0 to 1024 [ 41.825238][ T5026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.844587][ T5026] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.180: Attempting to read directory block (623) that is past i_size (638464) [ 41.881890][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.891269][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.930824][ T4319] XFS (loop3): Unmounting Filesystem [ 41.938956][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 42.809077][ T5065] tc_dump_action: action bad kind [ 42.811958][ T5063] binder: 5062:5063 tried to acquire reference to desc 0, got 1 instead [ 42.817539][ T5063] binder: cannot allocate buffer [ 42.817561][ T5063] binder: 5062:5063 transaction call to 5062:0 failed 12/29201/-22, size -735-64832 line 3230 [ 42.820332][ T4307] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.906263][ T5059] loop4: detected capacity change from 0 to 32768 [ 42.934014][ T5059] XFS (loop4): Mounting V5 Filesystem [ 42.960170][ T5059] XFS (loop4): Ending clean mount [ 42.963820][ T5059] XFS (loop4): Quotacheck needed: Please wait. [ 42.975628][ T5059] XFS (loop4): Quotacheck: Done. [ 43.021018][ T4332] XFS (loop4): Unmounting Filesystem [ 43.131155][ T5088] loop3: detected capacity change from 0 to 128 [ 43.485673][ T5109] loop4: detected capacity change from 0 to 8 [ 43.500090][ T5109] SQUASHFS error: zlib decompression failed, data probably corrupt [ 43.501444][ T5109] SQUASHFS error: Failed to read block 0x9b: -5 [ 43.502383][ T5109] SQUASHFS error: Unable to read metadata cache entry [99] [ 43.503432][ T5109] SQUASHFS error: Unable to read inode 0x127 [ 43.566336][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.571293][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.711415][ T5125] loop1: detected capacity change from 0 to 2048 [ 43.719839][ T5125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 43.756762][ T4698] atkbd serio0: keyboard reset failed on [ 43.925254][ T5131] loop1: detected capacity change from 0 to 32768 [ 43.931431][ T5131] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 43.932554][ T5131] (syz.1.220,5131,1):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 43.934164][ T5131] (syz.1.220,5131,1):ocfs2_check_volume:2420 ERROR: status = -22 [ 43.935412][ T5131] (syz.1.220,5131,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 43.937189][ T5131] (syz.1.220,5131,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 43.945330][ T5131] (syz.1.220,5131,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 43.982703][ T5139] loop3: detected capacity change from 0 to 1024 [ 44.098436][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.099998][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.944907][ T5156] loop0: detected capacity change from 0 to 2048 [ 44.951589][ T5156] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 44.953506][ T5159] netlink: 335 bytes leftover after parsing attributes in process `syz.4.230'. [ 44.955061][ T5159] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 44.961258][ T5162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 45.001530][ T5156] syz.0.229: attempt to access beyond end of device [ 45.001530][ T5156] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 45.005726][ T5164] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.028095][ T5156] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 45.078929][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.083788][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.096890][ T5156] Remounting filesystem read-only [ 45.101866][ T5179] loop3: detected capacity change from 0 to 1024 [ 45.122669][ T5153] hfsplus: b-tree write err: -5, ino 4 [ 45.489712][ T5191] netlink: 188 bytes leftover after parsing attributes in process `syz.0.240'. [ 45.491510][ T5184] netlink: 188 bytes leftover after parsing attributes in process `syz.0.240'. [ 45.582418][ T5201] loop3: detected capacity change from 0 to 1024 [ 45.588286][ T5201] EXT4-fs: Ignoring removed nobh option [ 45.591838][ T5201] EXT4-fs: Ignoring removed bh option [ 45.614538][ T5201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.650679][ T5210] loop2: detected capacity change from 0 to 256 [ 45.653114][ T5210] exfat: Deprecated parameter 'utf8' [ 45.655090][ T5201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.660845][ T5210] exfat: Deprecated parameter 'utf8' [ 45.673758][ T5201] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.248: Allocating blocks 449-513 which overlap fs metadata [ 45.680000][ T5201] EXT4-fs (loop3): Remounting filesystem read-only [ 45.689032][ T5210] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x97823c56, utbl_chksum : 0xe619d30d) [ 45.721146][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 45.976199][ T5215] loop3: detected capacity change from 0 to 32768 [ 45.977541][ T4375] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.049435][ T5219] loop2: detected capacity change from 0 to 32768 [ 46.053708][ T5219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.254 (5219) [ 46.062564][ T5215] XFS (loop3): Mounting V5 Filesystem [ 46.063801][ T5219] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.065905][ T5219] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 46.070137][ T5219] BTRFS info (device loop2): allowing degraded mounts [ 46.071277][ T5219] BTRFS info (device loop2): enabling ssd optimizations [ 46.072398][ T5219] BTRFS info (device loop2): allowing degraded mounts [ 46.073435][ T5219] BTRFS info (device loop2): using free space tree [ 46.096287][ T5215] XFS (loop3): Ending clean mount [ 46.098092][ T4698] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 46.100157][ T4698] XFS (loop3): Unmount and run xfs_repair [ 46.101020][ T4698] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 46.103811][ T4698] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 46.105224][ T4698] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 46.110806][ T5246] loop1: detected capacity change from 0 to 4096 [ 46.116171][ T5246] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 46.119165][ T4698] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 46.120610][ T4698] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 46.121976][ T4698] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 46.123261][ T4698] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 46.124539][ T4698] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 46.125814][ T4698] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 46.136563][ T5215] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x20 len 8 error 74 [ 46.138717][ T5215] XFS (loop3): Failed to initialize disk quotas. [ 46.156820][ T4375] usb 1-1: Using ep0 maxpacket: 16 [ 46.158947][ T4375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 46.162349][ T4375] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 46.164099][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.165369][ T4375] usb 1-1: Product: syz [ 46.166007][ T4375] usb 1-1: Manufacturer: syz [ 46.192575][ T4375] usb 1-1: SerialNumber: syz [ 46.195777][ T4375] usb 1-1: config 0 descriptor?? [ 46.210520][ T4375] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 46.225136][ T4375] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 46.239250][ T4383] vhci_hcd: vhci_device speed not set [ 46.243440][ T4319] XFS (loop3): Unmounting Filesystem [ 46.389341][ T4323] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.554954][ T5272] loop1: detected capacity change from 0 to 32768 [ 46.561011][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.562537][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.565736][ T5272] (syz.1.269,5272,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 46.575972][ T5272] (syz.1.269,5272,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 46.591299][ T5272] JBD2: Ignoring recovery information on journal [ 46.690173][ T5272] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 46.722433][ T4318] ocfs2: Unmounting device (7,1) on (node local) [ 46.802078][ T5295] loop2: detected capacity change from 0 to 1024 [ 46.814479][ T4375] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 46.857664][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.859117][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.875406][ T4447] hfsplus: b-tree write err: -5, ino 4 [ 46.876006][ T5299] loop1: detected capacity change from 0 to 128 [ 47.824575][ T4375] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 47.826281][ T4375] em28xx 1-1:0.0: board has no eeprom [ 47.896681][ T4375] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 47.898046][ T4375] em28xx 1-1:0.0: dvb set to bulk mode. [ 47.912286][ T4375] usb 1-1: USB disconnect, device number 3 [ 47.917874][ T4375] em28xx 1-1:0.0: Disconnecting em28xx [ 47.925257][ T4383] em28xx 1-1:0.0: Binding DVB extension [ 47.981364][ T4383] em28xx 1-1:0.0: Registering input extension [ 47.982683][ T4375] em28xx 1-1:0.0: Closing input extension [ 48.009398][ T4375] em28xx 1-1:0.0: Freeing device [ 48.463282][ T5336] loop4: detected capacity change from 0 to 32768 [ 48.503889][ T5341] loop0: detected capacity change from 0 to 40427 [ 48.506537][ T5341] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 48.507827][ T5341] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.510002][ T5341] F2FS-fs (loop0): invalid crc value [ 48.545811][ T5341] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.569734][ T5341] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.570925][ T5341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.581297][ T5336] XFS (loop4): Mounting V5 Filesystem [ 48.675733][ T5336] XFS (loop4): Ending clean mount [ 48.681709][ T5336] XFS (loop4): Quotacheck needed: Please wait. [ 48.717483][ T5336] XFS (loop4): Quotacheck: Done. [ 48.793689][ T5336] overlayfs: upper fs is r/o, try multi-lower layers mount [ 48.860321][ T4332] XFS (loop4): Unmounting Filesystem [ 49.257018][ T5365] loop3: detected capacity change from 0 to 24 [ 49.262116][ T5365] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 49.290795][ T5365] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 49.672582][ T5373] loop1: detected capacity change from 0 to 512 [ 49.684084][ T5373] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 49.691928][ T5373] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 49.693300][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.709787][ T5373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.879780][ T5397] loop0: detected capacity change from 0 to 256 [ 49.996786][ T4328] Bluetooth: hci0: command 0x0c20 tx timeout [ 50.035848][ T5403] loop3: detected capacity change from 0 to 32768 [ 50.049048][ T5403] XFS (loop3): Mounting V5 Filesystem [ 50.059822][ T5403] XFS (loop3): Ending clean mount [ 50.062327][ T5403] XFS (loop3): Quotacheck needed: Please wait. [ 50.092018][ T5403] XFS (loop3): Quotacheck: Done. [ 50.105156][ T4319] XFS (loop3): Unmounting Filesystem [ 50.333745][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 50.418515][ T5424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.420432][ T5424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.676101][ T5432] loop2: detected capacity change from 0 to 8192 [ 50.794799][ T27] audit: type=1326 audit(50.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.801565][ T27] audit: type=1326 audit(50.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.808211][ T27] audit: type=1326 audit(50.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.813933][ T27] audit: type=1326 audit(50.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.824901][ T27] audit: type=1326 audit(50.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.831608][ T27] audit: type=1326 audit(50.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 50.835527][ T27] audit: type=1326 audit(50.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 51.176273][ T27] audit: type=1326 audit(51.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 51.180193][ T27] audit: type=1326 audit(51.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 51.183945][ T27] audit: type=1326 audit(51.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=30 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 52.244066][ T5465] device lo entered promiscuous mode [ 52.245480][ T5465] device tunl0 entered promiscuous mode [ 52.252318][ T5465] device gre0 entered promiscuous mode [ 52.261284][ T5465] device gretap0 entered promiscuous mode [ 52.264556][ T5465] device erspan0 entered promiscuous mode [ 52.272318][ T5465] device ip_vti0 entered promiscuous mode [ 52.273779][ T5465] device ip6_vti0 entered promiscuous mode [ 52.275905][ T5465] device sit0 entered promiscuous mode [ 52.278120][ T5465] device ip6tnl0 entered promiscuous mode [ 52.283450][ T5465] device ip6gre0 entered promiscuous mode [ 52.287378][ T5465] device syz_tun entered promiscuous mode [ 52.288676][ T5465] device ip6gretap0 entered promiscuous mode [ 52.290976][ T5465] device bridge0 entered promiscuous mode [ 52.294335][ T5465] device vcan0 entered promiscuous mode [ 52.302335][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.303809][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.309394][ T5465] device bond0 entered promiscuous mode [ 52.310964][ T5465] device bond_slave_0 entered promiscuous mode [ 52.312381][ T5465] device bond_slave_1 entered promiscuous mode [ 52.319228][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.321355][ T5465] device team0 entered promiscuous mode [ 52.323568][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.325017][ T5465] device team_slave_0 entered promiscuous mode [ 52.326167][ T5465] device team_slave_1 entered promiscuous mode [ 52.327839][ T5465] device dummy0 entered promiscuous mode [ 52.329301][ T5465] device nlmon0 entered promiscuous mode [ 52.349352][ T5428] Set syz1 is full, maxelem 65536 reached [ 52.376832][ T5465] device caif0 entered promiscuous mode [ 52.377849][ T5465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.412507][ T5470] Zero length message leads to an empty skb [ 52.431804][ T5480] loop1: detected capacity change from 0 to 128 [ 52.471581][ T5480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.532981][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 53.442091][ T5508] loop1: detected capacity change from 0 to 1024 [ 53.488355][ T5513] loop2: detected capacity change from 0 to 64 [ 53.496092][ T4461] hfsplus: b-tree write err: -5, ino 4 [ 53.506449][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.516914][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.549449][ T5514] loop3: detected capacity change from 0 to 512 [ 53.581213][ T5514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.585365][ T5514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 53.588177][ T5514] System zones: 1-12 [ 53.591422][ T5514] EXT4-fs (loop3): 1 truncate cleaned up [ 53.592329][ T5514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.676703][ T4383] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 53.729449][ T5523] loop2: detected capacity change from 0 to 1024 [ 53.945875][ T5533] hfsplus: b-tree write err: -5, ino 3 [ 54.181776][ T4383] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.183432][ T4383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 54.184961][ T4383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 54.186380][ T4383] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 54.190793][ T4383] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 54.192222][ T4383] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 54.193339][ T4383] usb 1-1: Manufacturer: syz [ 54.196206][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.202756][ T4383] usb 1-1: config 0 descriptor?? [ 54.207547][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.251677][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 54.407774][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.409451][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.411579][ T4383] Registered IR keymap rc-hauppauge [ 54.579425][ T4383] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 54.581047][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.588830][ T4925] hfsplus: b-tree write err: -5, ino 3 [ 54.606800][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.647614][ T4383] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 54.650032][ T4383] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 54.658312][ T5542] loop2: detected capacity change from 0 to 1024 [ 54.675816][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.681303][ T5542] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.685489][ T5539] loop3: detected capacity change from 0 to 131072 [ 54.690374][ T5539] F2FS-fs (loop3): Test dummy encryption mode enabled [ 54.698011][ T5539] F2FS-fs (loop3): invalid crc value [ 54.698088][ T5542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.709364][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.739058][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.741236][ T5539] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.747523][ T5539] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 54.752380][ T5539] F2FS-fs (loop3): Failed to read root inode [ 54.752995][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 54.767356][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.806904][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.846761][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 54.889055][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 55.189267][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 55.217764][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 55.246943][ T4383] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 55.286419][ T5566] loop2: detected capacity change from 0 to 736 [ 55.288272][ T4383] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 55.289577][ T4383] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 55.293961][ T4383] usb 1-1: USB disconnect, device number 4 [ 55.332683][ T5566] rock: directory entry would overflow storage [ 55.334902][ T5566] rock: sig=0x3b10, size=4, remaining=3 [ 55.385882][ T5571] input: syz1 as /devices/virtual/input/input5 [ 56.194523][ T5613] loop2: detected capacity change from 0 to 32768 [ 56.226231][ T5613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 56.281634][ T4323] ocfs2: Unmounting device (7,2) on (node local) [ 56.389294][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.390881][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.402421][ T5620] loop3: detected capacity change from 0 to 40427 [ 56.429879][ T5620] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.445879][ T5620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.462223][ T5620] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value [ 56.552354][ T5642] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.554867][ T5640] dccp_invalid_packet: P.Data Offset(0) too small [ 56.610719][ T5646] loop3: detected capacity change from 0 to 512 [ 56.612181][ T5646] EXT4-fs: Ignoring removed bh option [ 56.615734][ T5646] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.637689][ T5646] EXT4-fs (loop3): 1 truncate cleaned up [ 56.638572][ T5646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.691481][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 56.751392][ T5655] Cannot find add_set index 0 as target [ 56.855623][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 56.855635][ T27] audit: type=1326 audit(56.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.862006][ T27] audit: type=1326 audit(56.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.865984][ T27] audit: type=1326 audit(56.850:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.870301][ T27] audit: type=1326 audit(56.850:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.873646][ T27] audit: type=1326 audit(56.850:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.884389][ T27] audit: type=1326 audit(56.850:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.888387][ T27] audit: type=1326 audit(56.850:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.892862][ T27] audit: type=1326 audit(56.850:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa855b9e8 code=0x7ffc0000 [ 56.921215][ T5668] netlink: 164 bytes leftover after parsing attributes in process `syz.0.404'. [ 56.923675][ T5668] netlink: 164 bytes leftover after parsing attributes in process `syz.0.404'. [ 56.925240][ T5668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.404'. [ 56.936558][ T5670] loop1: detected capacity change from 0 to 1024 [ 57.074515][ T5672] loop3: detected capacity change from 0 to 32768 [ 57.213616][ T5670] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 57.334942][ T5672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 57.761044][ T5670] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.762652][ T5670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.767290][ T5670] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.405: Inode bitmap for bg 0 marked uninitialized [ 57.779796][ T5670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.802610][ T5670] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.405: Block bitmap for bg 0 marked uninitialized [ 57.836104][ T5677] dccp_invalid_packet: P.Data Offset(0) too small [ 57.928616][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 58.032470][ T5681] sched: RT throttling activated [ 58.074975][ T5685] affs: No valid root block on device nullb0 [ 58.263939][ T5688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.268889][ T5688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.300524][ T4319] ocfs2: Unmounting device (7,3) on (node local) [ 58.360850][ T27] audit: type=1326 audit(58.350:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.2.413" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x0 [ 58.519664][ T5711] loop3: detected capacity change from 0 to 1024 [ 58.521065][ T5711] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.522176][ T5711] EXT4-fs: Ignoring removed oldalloc option [ 58.523201][ T5711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.533863][ T5713] loop2: detected capacity change from 0 to 128 [ 58.545538][ T5713] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 58.564932][ T4323] sysv_free_block: trying to free block not in datazone [ 58.569266][ T4323] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 58.580592][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.661893][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 58.667193][ T5723] dccp_invalid_packet: P.Data Offset(0) too small [ 58.815488][ T5719] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.817572][ T5719] MINIX-fs: unable to read superblock [ 59.156713][ T4698] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.336656][ T4698] usb 1-1: Using ep0 maxpacket: 32 [ 59.787919][ T4698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.233950][ T5760] loop1: detected capacity change from 0 to 64 [ 60.255334][ T4698] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 60.379579][ T5765] loop3: detected capacity change from 0 to 256 [ 60.460353][ T5767] dccp_invalid_packet: P.Data Offset(0) too small [ 60.483211][ T4698] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 60.484500][ T4698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.485658][ T4698] usb 1-1: Product: syz [ 60.486322][ T4698] usb 1-1: Manufacturer: syz [ 60.487387][ T4698] usb 1-1: SerialNumber: syz [ 60.703442][ T4698] usb 1-1: Cannot retrieve CPort count: -71 [ 60.704698][ T4698] usb 1-1: Cannot retrieve CPort count: -71 [ 60.877645][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 60.877673][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 60.982895][ T4698] es2_ap_driver: probe of 1-1:7.0 failed with error -71 [ 60.985407][ T4698] usb 1-1: USB disconnect, device number 5 [ 61.055164][ T5787] loop2: detected capacity change from 0 to 64 [ 61.067342][ T5787] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 61.109384][ T5791] loop2: detected capacity change from 0 to 512 [ 61.121131][ T5791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.153700][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 61.227943][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.232917][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.421354][ T5804] loop1: detected capacity change from 0 to 64 [ 61.659526][ T5808] dccp_invalid_packet: P.Data Offset(0) too small [ 61.661438][ T5807] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.876280][ T5817] loop0: detected capacity change from 0 to 1024 [ 61.890946][ T5817] EXT4-fs: Ignoring removed nobh option [ 61.894224][ T5817] EXT4-fs: inline encryption not supported [ 62.224670][ T5817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.555598][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 62.571636][ T5830] loop3: detected capacity change from 0 to 4096 [ 62.573845][ T5830] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 63.008985][ T5855] loop4: detected capacity change from 0 to 32768 [ 63.015039][ T5855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.474 (5855) [ 63.024837][ T5855] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.026722][ T5855] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 63.030977][ T5855] BTRFS info (device loop4): using free space tree [ 63.050827][ T5855] BTRFS info (device loop4): enabling ssd optimizations [ 63.073434][ T4332] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.261790][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.263200][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.361867][ T5881] loop2: detected capacity change from 0 to 32768 [ 63.966306][ T5911] loop2: detected capacity change from 0 to 4096 [ 63.974368][ T5911] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 63.986723][ T5909] autofs4:pid:5909:autofs_fill_super: called with bogus options [ 64.135559][ T5913] loop0: detected capacity change from 0 to 40427 [ 64.139115][ T5921] loop2: detected capacity change from 0 to 64 [ 64.145311][ T5913] F2FS-fs (loop0): invalid crc value [ 64.160372][ T5913] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.171104][ T5921] hfs: unable to load iocharset "cP936" [ 64.173502][ T5921] hfs: unable to parse mount options [ 64.188249][ T5913] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.224598][ T5913] syz.0.491: attempt to access beyond end of device [ 64.224598][ T5913] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 64.230207][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 64.234087][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 64.262531][ T4327] syz-executor: attempt to access beyond end of device [ 64.262531][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.269953][ T5932] loop3: detected capacity change from 0 to 256 [ 64.312171][ T5932] FAT-fs (loop3): Directory bread(block 64) failed [ 64.318979][ T5932] FAT-fs (loop3): Directory bread(block 65) failed [ 64.323333][ T5932] FAT-fs (loop3): Directory bread(block 66) failed [ 64.327610][ T5932] FAT-fs (loop3): Directory bread(block 67) failed [ 64.331546][ T5932] FAT-fs (loop3): Directory bread(block 68) failed [ 64.334890][ T5932] FAT-fs (loop3): Directory bread(block 69) failed [ 64.339232][ T5932] FAT-fs (loop3): Directory bread(block 70) failed [ 64.342540][ T5932] FAT-fs (loop3): Directory bread(block 71) failed [ 64.345938][ T5932] FAT-fs (loop3): Directory bread(block 72) failed [ 64.348179][ T5932] FAT-fs (loop3): Directory bread(block 73) failed [ 64.429227][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.436368][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.479265][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.480530][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.485660][ T112] cfg80211: failed to load regulatory.db [ 64.599423][ T5953] loop3: detected capacity change from 0 to 256 [ 64.651261][ T5955] device veth1_macvtap left promiscuous mode [ 64.652210][ T5955] device macsec0 entered promiscuous mode [ 64.669231][ T5955] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.670639][ T5955] vhci_hcd: invalid port number 96 [ 64.671456][ T5955] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 64.675576][ T5955] loop0: detected capacity change from 0 to 512 [ 64.914569][ T5953] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.928904][ T5953] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 65.094516][ T5953] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 65.505113][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.508682][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.513398][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.524186][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.735577][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.738690][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.563621][ T5979] loop3: detected capacity change from 0 to 1024 [ 66.565075][ T5979] EXT4-fs: Ignoring removed orlov option [ 66.799391][ T5979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.908749][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.380165][ T5979] EXT4-fs (loop3): unmounting filesystem. [ 67.412720][ T5990] loop2: detected capacity change from 0 to 1024 [ 67.437203][ T5993] loop4: detected capacity change from 0 to 4096 [ 67.446181][ T5990] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.461626][ T5993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.496593][ T5990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 67.498041][ T5990] System zones: 0-1, 3-36 [ 67.499071][ T5990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.524698][ T5990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 67.533600][ T5990] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 67.535139][ T6001] loop1: detected capacity change from 0 to 512 [ 67.541967][ T6001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.630105][ T6004] loop0: detected capacity change from 0 to 128 [ 67.631883][ T6004] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.744515][ T6004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.751015][ T6004] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 68.329339][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 68.348874][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 68.350316][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 68.662929][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 68.683862][ T6009] loop2: detected capacity change from 0 to 256 [ 68.739429][ T6015] device pim6reg1 entered promiscuous mode [ 68.742906][ T6009] FAT-fs (loop2): Directory bread(block 64) failed [ 68.744055][ T6009] FAT-fs (loop2): Directory bread(block 65) failed [ 68.745061][ T6009] FAT-fs (loop2): Directory bread(block 66) failed [ 68.746054][ T6009] FAT-fs (loop2): Directory bread(block 67) failed [ 68.748739][ T6009] FAT-fs (loop2): Directory bread(block 68) failed [ 68.749870][ T6009] FAT-fs (loop2): Directory bread(block 69) failed [ 68.752988][ T6009] FAT-fs (loop2): Directory bread(block 70) failed [ 68.754240][ T6009] FAT-fs (loop2): Directory bread(block 71) failed [ 68.755560][ T6009] FAT-fs (loop2): Directory bread(block 72) failed [ 68.769117][ T6009] FAT-fs (loop2): Directory bread(block 73) failed [ 69.185530][ T6014] loop0: detected capacity change from 0 to 40427 [ 69.211339][ T6014] F2FS-fs (loop0): Unrecognized mount option "#5UT>:'7 (ld&ý [ 69.211339][ T6014]  O&! UֱlvTlP&㯎UEP掹q"T9j" or missing value [ 69.810715][ T6048] loop1: detected capacity change from 0 to 16 [ 69.817048][ T6048] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.832240][ T6048] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 69.833800][ T6048] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 70.271984][ T6048] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 70.295801][ T4328] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 71.200485][ T6055] overlayfs: failed to clone lowerpath [ 71.938402][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.939924][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.970530][ T6069] loop0: detected capacity change from 0 to 512 [ 71.984215][ T6069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.024896][ T6067] loop2: detected capacity change from 0 to 40427 [ 72.029744][ T6067] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 72.039995][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 72.184057][ T6078] loop0: detected capacity change from 0 to 16 [ 72.193355][ T6078] erofs: (device loop0): mounted with root inode @ nid 36. [ 72.380951][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 72.519150][ T6081] syz.0.549: attempt to access beyond end of device [ 72.519150][ T6081] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 72.521201][ T6081] syz.0.549: attempt to access beyond end of device [ 72.521201][ T6081] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 73.229706][ T6089] netlink: 'syz.2.552': attribute type 29 has an invalid length. [ 73.255353][ T6091] sch_fq: defrate 0 ignored. [ 73.281986][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.283945][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.464323][ T6099] loop0: detected capacity change from 0 to 256 [ 73.467685][ T6099] exfat: Unknown parameter '' [ 73.700585][ T4558] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.924302][ T6111] loop4: detected capacity change from 0 to 512 [ 73.928930][ T6111] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 73.930704][ T6111] FAT-fs (loop4): Filesystem has been set read-only [ 74.251365][ T6130] loop1: detected capacity change from 0 to 512 [ 74.254524][ T6130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.289432][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 74.363491][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 74.364953][ T6137] device bridge_slave_1 left promiscuous mode [ 74.367435][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.422094][ T6137] device bridge_slave_0 left promiscuous mode [ 74.423540][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.724948][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.729319][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.731316][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.733234][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.734807][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.737533][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.775397][ T6150] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.776758][ T6150] vhci_hcd: invalid port number 96 [ 74.777586][ T6150] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 75.011234][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 75.013598][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 75.018499][ T6143] chnl_net:caif_netlink_parms(): no params data found [ 75.073489][ T6169] loop4: detected capacity change from 0 to 512 [ 75.089294][ T6169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.131272][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.132364][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.133855][ T6143] device bridge_slave_0 entered promiscuous mode [ 75.140416][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.143916][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.161565][ T6143] device bridge_slave_1 entered promiscuous mode [ 75.163815][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 75.240658][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.258348][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.279537][ T6143] team0: Port device team_slave_0 added [ 75.281577][ T6143] team0: Port device team_slave_1 added [ 75.293123][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.294387][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.298904][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.337311][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.338605][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.342628][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.398087][ T6143] device hsr_slave_0 entered promiscuous mode [ 75.467462][ T6143] device hsr_slave_1 entered promiscuous mode [ 75.676731][ T6143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.684165][ T6143] Cannot create hsr debugfs directory [ 76.163737][ T4367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.168151][ T6143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.221848][ T6143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.349710][ T6202] loop4: detected capacity change from 0 to 256 [ 76.797681][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 77.010378][ T4367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.070826][ T5277] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.086979][ T6201] process 'syz.3.590' launched './file0' with NULL argv: empty string added [ 77.129887][ T5277] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 77.168256][ T4367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.257731][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.288368][ T4367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.291408][ T6202] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.346901][ T6143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.385286][ T6210] loop4: detected capacity change from 0 to 512 [ 77.389264][ T6210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.405391][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 77.409095][ T6143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.475667][ T6213] device bridge_slave_1 left promiscuous mode [ 77.476996][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.518161][ T6213] device bridge_slave_0 left promiscuous mode [ 77.519277][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.566344][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.570794][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.052559][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 79.604534][ T6247] loop0: detected capacity change from 0 to 256 [ 79.624193][ T6247] FAT-fs (loop0): Directory bread(block 64) failed [ 79.625645][ T6247] FAT-fs (loop0): Directory bread(block 65) failed [ 79.627885][ T6247] FAT-fs (loop0): Directory bread(block 66) failed [ 79.629079][ T6247] FAT-fs (loop0): Directory bread(block 67) failed [ 79.630577][ T6247] FAT-fs (loop0): Directory bread(block 68) failed [ 79.631992][ T6247] FAT-fs (loop0): Directory bread(block 69) failed [ 79.633159][ T6247] FAT-fs (loop0): Directory bread(block 70) failed [ 79.634299][ T6247] FAT-fs (loop0): Directory bread(block 71) failed [ 79.635246][ T6247] FAT-fs (loop0): Directory bread(block 72) failed [ 79.636549][ T6247] FAT-fs (loop0): Directory bread(block 73) failed [ 79.691128][ T6250] overlayfs: failed to clone upperpath [ 79.702672][ T6250] overlayfs: failed to clone upperpath [ 79.822683][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.252267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.253879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.268467][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.341445][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.343332][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.344952][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.346087][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.360483][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.362080][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.363700][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.365262][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.366297][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.371992][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.384349][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.394493][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.399501][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.402304][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.404015][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.405625][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.413841][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.415615][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.417646][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.419646][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.475166][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.921052][ T6301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 80.959479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.961132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.978260][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.098282][ T6313] loop0: detected capacity change from 0 to 256 [ 81.116984][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 81.341217][ T6306] loop0: detected capacity change from 0 to 128 [ 82.749437][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.751495][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.772715][ T6143] device veth0_vlan entered promiscuous mode [ 82.776588][ T6143] device veth1_vlan entered promiscuous mode [ 82.785934][ T6143] device veth0_macvtap entered promiscuous mode [ 82.831830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.833500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.835124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.836696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.838956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.840953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.858799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.860897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.875223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.923858][ T6358] loop1: detected capacity change from 0 to 16 [ 82.947665][ T6358] erofs: (device loop1): mounted with root inode @ nid 36. [ 83.089378][ T6361] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 83.090860][ T6361] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 83.101187][ T4334] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 83.197770][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 84.603811][ T6381] loop4: detected capacity change from 0 to 128 [ 84.671712][ T6381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.716212][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 85.027351][ T6360] device ipip0 entered promiscuous mode [ 85.038900][ T6143] device veth1_macvtap entered promiscuous mode [ 85.043346][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.044951][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046364][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.068212][ T6389] loop0: detected capacity change from 0 to 16 [ 85.071142][ T6389] erofs: (device loop0): mounted with root inode @ nid 36. [ 85.071549][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.073850][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.075523][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.080380][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.081997][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.083382][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.084980][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.115993][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.121227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.122906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.124396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.180275][ T6398] loop0: detected capacity change from 0 to 512 [ 85.261234][ T6401] loop1: detected capacity change from 0 to 256 [ 85.269942][ T6401] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.271622][ T6401] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 85.289208][ T6401] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 86.000199][ T6398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.006972][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.025345][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.034933][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.036501][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.050489][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.054093][ T6398] EXT4-fs (loop0): 1 truncate cleaned up [ 86.054934][ T6398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.066722][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.068218][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.069685][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.071107][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.123719][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.145364][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.238642][ T6143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.240094][ T6143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.268977][ T6143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.270497][ T6143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.274245][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 87.417389][ T6422] loop4: detected capacity change from 0 to 1024 [ 87.418819][ T6422] EXT4-fs: inline encryption not supported [ 87.426846][ T6422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.440125][ T27] audit: type=1326 audit(93.422:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.647" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75b9e8 code=0x0 [ 87.450358][ T6422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.503367][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 87.520059][ T6436] ipt_CLUSTERIP: Please specify destination IP [ 87.560070][ T6441] loop4: detected capacity change from 0 to 512 [ 87.575012][ T6442] raw_sendmsg: syz.0.649 forgot to set AF_INET. Fix it! [ 87.580845][ T6441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.623595][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 87.651877][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.653568][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.660500][ T6430] netem: change failed [ 87.848315][ T4367] device hsr_slave_0 left promiscuous mode [ 87.907245][ T4367] device hsr_slave_1 left promiscuous mode [ 87.992421][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.994128][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.000245][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.001586][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.004878][ T4367] device bridge_slave_1 left promiscuous mode [ 88.007493][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.190190][ T4367] device bridge_slave_0 left promiscuous mode [ 88.194328][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.327800][ T4367] device veth1_macvtap left promiscuous mode [ 88.331334][ T4367] device veth0_macvtap left promiscuous mode [ 88.332903][ T4367] device veth1_vlan left promiscuous mode [ 88.333896][ T4367] device veth0_vlan left promiscuous mode [ 88.852962][ T6467] overlayfs: failed to clone lowerpath [ 89.819110][ T6478] loop0: detected capacity change from 0 to 512 [ 89.843409][ T6479] overlayfs: failed to clone upperpath [ 89.846932][ T6478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.871113][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 89.921734][ T6485] loop0: detected capacity change from 0 to 256 [ 90.197850][ T6491] loop1: detected capacity change from 0 to 16 [ 90.206508][ T6491] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.830540][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 91.019204][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 91.237477][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.744048][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.233487][ T6522] loop1: detected capacity change from 0 to 512 [ 92.596354][ T6522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.676: inode #1: comm syz.1.676: iget: illegal inode # [ 92.602026][ T6522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.676: error while reading EA inode 1 err=-117 [ 92.609204][ T6522] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.612270][ T6522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.676: inode #1: comm syz.1.676: iget: illegal inode # [ 92.620596][ T6522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.676: error while reading EA inode 1 err=-117 [ 92.626762][ T6522] EXT4-fs (loop1): 1 orphan inode deleted [ 92.627773][ T6522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.163837][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 93.202878][ T6530] overlayfs: failed to clone upperpath [ 93.205177][ T6532] loop1: detected capacity change from 0 to 512 [ 93.230766][ T6532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.308953][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 94.106288][ T6543] overlayfs: failed to clone upperpath [ 95.592556][ T4367] bond0 (unregistering): Released all slaves [ 95.868113][ T6461] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 95.881220][ T6462] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 95.907868][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.909191][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.920873][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.922678][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.924042][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.934906][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.041410][ T6559] loop1: detected capacity change from 0 to 1024 [ 96.047638][ T6559] EXT4-fs: inline encryption not supported [ 96.051738][ T6559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.075662][ T6562] loop4: detected capacity change from 0 to 256 [ 96.102007][ T6562] FAT-fs (loop4): Directory bread(block 64) failed [ 96.103067][ T6562] FAT-fs (loop4): Directory bread(block 65) failed [ 96.103789][ T6566] loop5: detected capacity change from 0 to 512 [ 96.104210][ T6562] FAT-fs (loop4): Directory bread(block 66) failed [ 96.106146][ T6562] FAT-fs (loop4): Directory bread(block 67) failed [ 96.119481][ T6566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.121348][ T6562] FAT-fs (loop4): Directory bread(block 68) failed [ 96.121575][ T6566] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 96.122415][ T6562] FAT-fs (loop4): Directory bread(block 69) failed [ 96.124838][ T6562] FAT-fs (loop4): Directory bread(block 70) failed [ 96.125861][ T6562] FAT-fs (loop4): Directory bread(block 71) failed [ 96.146845][ T6562] FAT-fs (loop4): Directory bread(block 72) failed [ 96.147850][ T6562] FAT-fs (loop4): Directory bread(block 73) failed [ 96.168310][ T6559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.234730][ T6556] loop0: detected capacity change from 0 to 40427 [ 96.249591][ T4312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.261318][ T6556] F2FS-fs (loop0): invalid crc value [ 96.280092][ T6556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.282934][ T4420] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.591669][ T6556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.606183][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.611116][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.633780][ T4327] syz-executor: attempt to access beyond end of device [ 96.633780][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.845715][ T6590] loop0: detected capacity change from 0 to 512 [ 96.866413][ T6590] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.870677][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 96.949590][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 96.955022][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 97.731726][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 97.966492][ T6647] xt_hashlimit: size too large, truncated to 1048576 [ 98.316717][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 98.317327][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.976492][ T6698] netlink: 44 bytes leftover after parsing attributes in process `syz.4.709'. [ 100.104456][ T6718] loop5: detected capacity change from 0 to 40427 [ 100.534048][ T6736] loop4: detected capacity change from 0 to 256 [ 100.552013][ T6718] F2FS-fs (loop5): Found nat_bits in checkpoint [ 100.564430][ T6736] FAT-fs (loop4): Directory bread(block 64) failed [ 100.569386][ T6718] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 100.575195][ T6736] FAT-fs (loop4): Directory bread(block 65) failed [ 100.577397][ T6718] F2FS-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value [ 100.584292][ T6736] FAT-fs (loop4): Directory bread(block 66) failed [ 100.596942][ T6736] FAT-fs (loop4): Directory bread(block 67) failed [ 100.604414][ T6736] FAT-fs (loop4): Directory bread(block 68) failed [ 100.616574][ T6736] FAT-fs (loop4): Directory bread(block 69) failed [ 100.624156][ T6736] FAT-fs (loop4): Directory bread(block 70) failed [ 100.629547][ T6736] FAT-fs (loop4): Directory bread(block 71) failed [ 100.633865][ T6736] FAT-fs (loop4): Directory bread(block 72) failed [ 100.636085][ T6736] FAT-fs (loop4): Directory bread(block 73) failed [ 102.641667][ T6771] loop0: detected capacity change from 0 to 512 [ 102.685676][ T6771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.739661][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 102.791438][ T6779] loop0: detected capacity change from 0 to 128 [ 102.819966][ T6779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.871222][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 103.057803][ T6788] loop2: detected capacity change from 0 to 7 [ 103.060683][ T4558] Dev loop2: unable to read RDB block 7 [ 103.061681][ T4558] loop2: AHDI p1 p2 p3 [ 103.062250][ T4558] loop2: partition table partially beyond EOD, truncated [ 103.063525][ T4558] loop2: p1 start 1818582900 is beyond EOD, truncated [ 103.064524][ T4558] loop2: p3 start 335544320 is beyond EOD, truncated [ 103.080712][ T6788] Dev loop2: unable to read RDB block 7 [ 103.081563][ T6788] loop2: AHDI p1 p2 p3 [ 103.082191][ T6788] loop2: partition table partially beyond EOD, truncated [ 103.094040][ T6788] loop2: p1 start 1818582900 is beyond EOD, truncated [ 103.095114][ T6788] loop2: p3 start 335544320 is beyond EOD, truncated [ 103.119720][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 103.121076][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 103.259892][ T6799] loop0: detected capacity change from 0 to 1024 [ 103.321569][ T6799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.366983][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 103.414816][ T6806] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 103.483653][ T6809] loop4: detected capacity change from 0 to 512 [ 103.490117][ T6809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.802769][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 103.962565][ T6824] loop5: detected capacity change from 0 to 128 [ 104.463174][ T6824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 104.494148][ T6831] loop0: detected capacity change from 0 to 1024 [ 104.501703][ T6831] EXT4-fs: Ignoring removed nobh option [ 104.502816][ T6831] EXT4-fs: Ignoring removed bh option [ 104.504123][ T6831] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.513698][ T6143] EXT4-fs (loop5): unmounting filesystem. [ 104.529922][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 104.531602][ T6833] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 104.542184][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.544666][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.551698][ T6831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.668818][ T6840] netlink: 'syz.0.748': attribute type 2 has an invalid length. [ 104.692583][ T6846] loop1: detected capacity change from 0 to 512 [ 104.702267][ T6846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.731260][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 104.774787][ T6851] loop1: detected capacity change from 0 to 256 [ 104.883068][ T6855] xt_hashlimit: size too large, truncated to 1048576 [ 105.355013][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 105.612811][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 105.620864][ T6872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.622388][ T6872] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.422104][ T6886] loop5: detected capacity change from 0 to 512 [ 106.505548][ T6886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 106.568892][ T6143] EXT4-fs (loop5): unmounting filesystem. [ 106.643541][ T6899] loop4: detected capacity change from 0 to 128 [ 107.343384][ T6918] netlink: 260 bytes leftover after parsing attributes in process `syz.5.774'. [ 107.353989][ T6918] netlink: 104 bytes leftover after parsing attributes in process `syz.5.774'. [ 107.360580][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 107.511490][ T4367] kworker/u4:5: attempt to access beyond end of device [ 107.511490][ T4367] loop4: rw=1, sector=138, nr_sectors = 112 limit=128 [ 107.564195][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 107.565670][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 107.641226][ T6935] loop4: detected capacity change from 0 to 512 [ 107.681253][ T6935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.780530][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 108.139401][ T6948] netlink: 216 bytes leftover after parsing attributes in process `syz.4.781'. [ 108.140957][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.781'. [ 109.685953][ T6970] loop4: detected capacity change from 0 to 512 [ 109.713862][ T6970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.800558][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 110.136748][ T112] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.151057][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.153713][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.317904][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 110.321745][ T112] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 110.323105][ T112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.324641][ T112] usb 1-1: config 0 has no interface number 0 [ 110.325707][ T112] usb 1-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.332429][ T112] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 110.334102][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.335387][ T112] usb 1-1: Product: syz [ 110.336090][ T112] usb 1-1: Manufacturer: syz [ 110.340865][ T112] usb 1-1: SerialNumber: syz [ 110.345556][ T112] usb 1-1: config 0 descriptor?? [ 110.381278][ T112] snd-usb-audio: probe of 1-1:0.16 failed with error -2 [ 110.395246][ T4558] udevd[4558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.535810][ T7046] loop1: detected capacity change from 0 to 512 [ 110.546061][ T7046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.554382][ T4694] usb 1-1: USB disconnect, device number 6 [ 110.587125][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 110.619958][ T7049] loop1: detected capacity change from 0 to 4096 [ 110.625868][ T7049] EXT2-fs (loop1): error: couldn't mount because of unsupported optional features (142c0) [ 110.732891][ T7049] loop1: detected capacity change from 0 to 512 [ 110.784533][ T7049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.841982][ T4318] EXT4-fs (loop1): unmounting filesystem. [ 110.966550][ T7070] tipc: Started in network mode [ 110.967500][ T7070] tipc: Node identity 4, cluster identity 4711 [ 110.968404][ T7070] tipc: Node number set to 4 [ 110.991859][ T7068] device wg2 entered promiscuous mode [ 111.308439][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.321681][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.840735][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.857010][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.038189][ T7101] loop1: detected capacity change from 0 to 40427 [ 112.045397][ T7101] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x3ffff [ 112.063080][ T7101] fuse: Bad value for 'user_id' [ 112.347475][ T7141] loop0: detected capacity change from 0 to 256 [ 112.349374][ T7141] exfat: Deprecated parameter 'utf8' [ 112.363589][ T7141] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 112.493359][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.504761][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.615026][ T7195] loop5: detected capacity change from 0 to 512 [ 113.644363][ T7195] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.648765][ T7195] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.653375][ T7195] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 113.655500][ T7195] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 113.660221][ T7195] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.833: Failed to acquire dquot type 1 [ 113.662470][ T7195] EXT4-fs (loop5): Remounting filesystem read-only [ 113.666021][ T7195] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.833: bg 0: block 40: padding at end of block bitmap is not set [ 113.673101][ T7195] EXT4-fs (loop5): Remounting filesystem read-only [ 113.674340][ T7195] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 113.675983][ T7195] EXT4-fs (loop5): Remounting filesystem read-only [ 113.679260][ T7195] EXT4-fs (loop5): 1 truncate cleaned up [ 113.680593][ T7195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 113.706537][ T6143] EXT4-fs (loop5): unmounting filesystem. [ 114.782417][ T7213] loop5: detected capacity change from 0 to 512 [ 114.960518][ T7213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.301102][ T7213] EXT4-fs (loop5): 1 truncate cleaned up [ 115.302127][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 115.536691][ T7213] EXT4-fs (loop5): unmounting filesystem. [ 115.548715][ T7216] device syzkaller0 entered promiscuous mode [ 115.710867][ T7222] tipc: Enabled bearer , priority 0 [ 115.730322][ T7212] tipc: Resetting bearer [ 115.745579][ T7224] loop5: detected capacity change from 0 to 512 [ 115.762993][ T7224] ------------[ cut here ]------------ [ 115.763863][ T7224] WARNING: CPU: 0 PID: 7224 at fs/ext4/xattr.c:1875 ext4_xattr_block_set+0x2010/0x2810 [ 115.765490][ T7224] Modules linked in: [ 115.766101][ T7224] CPU: 0 PID: 7224 Comm: syz.5.842 Not tainted syzkaller #0 [ 115.767263][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.768706][ T7224] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 115.769839][ T7224] pc : ext4_xattr_block_set+0x2010/0x2810 [ 115.770731][ T7224] lr : ext4_xattr_block_set+0x2010/0x2810 [ 115.771579][ T7224] sp : ffff800021a06ec0 [ 115.772227][ T7224] x29: ffff800021a07030 x28: ffff0000c3817b00 x27: ffff800021a07180 [ 115.773398][ T7224] x26: dfff800000000000 x25: ffff0000fe09c910 x24: ffff0000c3817b00 [ 115.774636][ T7224] x23: 1ffff00004340e32 x22: 1ffff00004340e31 x21: 0000000000000000 [ 115.775966][ T7224] x20: ffff800021a07190 x19: ffff800021a07188 x18: ffff800011a5bd40 [ 115.777128][ T7224] x17: ffff800018184000 x16: ffff8000082d2558 x15: 0000000000000002 [ 115.778322][ T7224] x14: 00000000ffffffc3 x13: 00000000ffffffc3 x12: 0000000000080000 [ 115.779519][ T7224] x11: 0000000000030e3d x10: ffff800021b29000 x9 : ffff800008e53990 [ 115.780724][ T7224] x8 : 0000000000030e3e x7 : ffff0000ffcbd000 x6 : ffff0000ffcbd020 [ 115.782029][ T7224] x5 : ffff800021a06fc0 x4 : ffff0000c3817b28 x3 : ffff800008e51a38 [ 115.783172][ T7224] x2 : 0000000000000028 x1 : 0000000000000000 x0 : 0000000000000000 [ 115.784410][ T7224] Call trace: [ 115.784942][ T7224] ext4_xattr_block_set+0x2010/0x2810 [ 115.785764][ T7224] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 115.786611][ T7224] __ext4_expand_extra_isize+0x298/0x358 [ 115.787570][ T7224] __ext4_mark_inode_dirty+0x3e4/0x790 [ 115.788426][ T7224] ext4_evict_inode+0xb58/0x1270 [ 115.789188][ T7224] evict+0x3c8/0x810 [ 115.789774][ T7224] iput+0x764/0x7f4 [ 115.790378][ T7224] ext4_process_orphan+0x240/0x2b4 [ 115.791126][ T7224] ext4_orphan_cleanup+0x908/0x104c [ 115.791896][ T7224] ext4_fill_super+0x6440/0x68a8 [ 115.792587][ T7224] get_tree_bdev+0x358/0x544 [ 115.793249][ T7224] ext4_get_tree+0x28/0x38 [ 115.793989][ T7224] vfs_get_tree+0x90/0x274 [ 115.794643][ T7224] do_new_mount+0x228/0x810 [ 115.795340][ T7224] path_mount+0x5b4/0xe78 [ 115.795987][ T7224] __arm64_sys_mount+0x49c/0x584 [ 115.796779][ T7224] invoke_syscall+0x98/0x2bc [ 115.797507][ T7224] el0_svc_common+0x138/0x258 [ 115.798245][ T7224] do_el0_svc+0x58/0x13c [ 115.798936][ T7224] el0_svc+0x58/0x138 [ 115.799601][ T7224] el0t_64_sync_handler+0x84/0xf0 [ 115.800421][ T7224] el0t_64_sync+0x18c/0x190 [ 115.801083][ T7224] irq event stamp: 3024 [ 115.801671][ T7224] hardirqs last enabled at (3023): [] __find_get_block+0x1c8/0xdfc [ 115.803113][ T7224] hardirqs last disabled at (3024): [] el1_dbg+0x24/0x80 [ 115.804484][ T7224] softirqs last enabled at (1704): [] local_bh_enable+0x10/0x34 [ 115.805892][ T7224] softirqs last disabled at (1702): [] local_bh_disable+0x10/0x34 [ 115.807340][ T7224] ---[ end trace 0000000000000000 ]--- [ 115.820467][ T7224] ------------[ cut here ]------------ [ 115.821601][ T7224] EA inode 11 i_nlink=2 [ 115.822727][ T7224] WARNING: CPU: 1 PID: 7224 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 115.824921][ T7224] Modules linked in: [ 115.825488][ T7224] CPU: 1 PID: 7224 Comm: syz.5.842 Tainted: G W syzkaller #0 [ 115.826827][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 115.828256][ T7224] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 115.829463][ T7224] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 115.830373][ T7224] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 115.831289][ T7224] sp : ffff800021a06e00 [ 115.831898][ T7224] x29: ffff800021a06ea0 x28: 0000000000000000 x27: dfff800000000000 [ 115.833035][ T7224] x26: 1fffe0001eb4f6da x25: ffff700004340dc4 x24: 0000000000000000 [ 115.834214][ T7224] x23: ffff800017a15000 x22: ffff0000f5a7b518 x21: 0000000000000002 [ 115.835442][ T7224] x20: 0000000000000001 x19: ffff0000f5a7b4d8 x18: ffff800011a5bd40 [ 115.836665][ T7224] x17: 1fffe00033eebd7e x16: ffff8000082d3a08 x15: ffff80001504d000 [ 115.837950][ T7224] x14: 0000000000000100 x13: 1ffff00002a0a0b1 x12: 0000000000000001 [ 115.839175][ T7224] x11: 1fffe0001a858910 x10: 0000000000000000 x9 : 5c9871cd4b211500 [ 115.840405][ T7224] x8 : 5c9871cd4b211500 x7 : ffff8000082532dc x6 : 0000000000000000 [ 115.841642][ T7224] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008242238 [ 115.842865][ T7224] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 115.844053][ T7224] Call trace: [ 115.844509][ T7224] ext4_xattr_inode_update_ref+0x42c/0x470 [ 115.845404][ T7224] ext4_xattr_set_entry+0x918/0x15ac [ 115.846156][ T7224] ext4_xattr_ibody_set+0x204/0x600 [ 115.846892][ T7224] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 115.847724][ T7224] __ext4_expand_extra_isize+0x298/0x358 [ 115.848515][ T7224] __ext4_mark_inode_dirty+0x3e4/0x790 [ 115.849248][ T7224] ext4_evict_inode+0xb58/0x1270 [ 115.849937][ T7224] evict+0x3c8/0x810 [ 115.850478][ T7224] iput+0x764/0x7f4 [ 115.851007][ T7224] ext4_process_orphan+0x240/0x2b4 [ 115.851689][ T7224] ext4_orphan_cleanup+0x908/0x104c [ 115.852384][ T7224] ext4_fill_super+0x6440/0x68a8 [ 115.853091][ T7224] get_tree_bdev+0x358/0x544 [ 115.853751][ T7224] ext4_get_tree+0x28/0x38 [ 115.854336][ T7224] vfs_get_tree+0x90/0x274 [ 115.854980][ T7224] do_new_mount+0x228/0x810 [ 115.855645][ T7224] path_mount+0x5b4/0xe78 [ 115.856225][ T7224] __arm64_sys_mount+0x49c/0x584 [ 115.856945][ T7224] invoke_syscall+0x98/0x2bc [ 115.857620][ T7224] el0_svc_common+0x138/0x258 [ 115.858304][ T7224] do_el0_svc+0x58/0x13c [ 115.858945][ T7224] el0_svc+0x58/0x138 [ 115.859527][ T7224] el0t_64_sync_handler+0x84/0xf0 [ 115.860276][ T7224] el0t_64_sync+0x18c/0x190 [ 115.860983][ T7224] irq event stamp: 3310 [ 115.861589][ T7224] hardirqs last enabled at (3309): [] finish_lock_switch+0xb0/0x1c4 [ 115.863099][ T7224] hardirqs last disabled at (3310): [] el1_dbg+0x24/0x80 [ 115.864397][ T7224] softirqs last enabled at (3296): [] handle_softirqs+0xaf8/0xc6c [ 115.865826][ T7224] softirqs last disabled at (3231): [] __do_softirq+0x14/0x20 [ 115.867243][ T7224] ---[ end trace 0000000000000000 ]--- [ 116.157464][ T7224] EXT4-fs (loop5): 1 orphan inode deleted [ 116.158434][ T7224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 116.185632][ T6143] EXT4-fs (loop5): unmounting filesystem. [ 116.187677][ T7212] tipc: Disabling bearer