last executing test programs: 5m47.941435166s ago: executing program 0 (id=50): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x8000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5m46.828886466s ago: executing program 0 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r4) accept4(r3, 0x0, 0x0, 0x800) 5m45.339394696s ago: executing program 0 (id=56): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x4000000000000c8, 0x40894) listen(r0, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$inet(r5, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0x1}], 0x1}}], 0x2, 0x20048045) 5m44.738756686s ago: executing program 0 (id=57): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m42.088579946s ago: executing program 0 (id=62): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000000000000000000000001042065580002892f00000000000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000813e76bd5220e4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x5, 0x0, 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'hsr0\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000001dc0), 0x213, 0x0) 5m40.997449546s ago: executing program 0 (id=66): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x21, 0xc25, &(0x7f00000031c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xfffffffe}]) 5m40.384535366s ago: executing program 32 (id=66): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x21, 0xc25, &(0x7f00000031c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xfffffffe}]) 24.324399904s ago: executing program 5 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.766718194s ago: executing program 5 (id=761): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f000085a000/0x4000)=nil, 0x4000) 19.709904993s ago: executing program 5 (id=771): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x200000001) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 15.230111272s ago: executing program 5 (id=775): openat$tun(0xffffffffffffff9c, 0x0, 0x60240, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x114, &(0x7f0000000300)={0x0, 0x0, 0x1}, &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = getpgid(r0) kcmp(r0, r6, 0x0, r3, 0xffffffffffffffff) 13.133993462s ago: executing program 5 (id=779): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB='iocharset=koi8-r,noadinicb,lastblock=00000000000000000034,uid=forget,gid=', @ANYRESOCT=0x0, @ANYBLOB="2c73686f727461642c756e64656c6574652c756d61736b3d30303030303030303030303030303030303030303031312c756e686964652c00440c75c891c097786cb179aaf2bf042c54664b24e89e417b353c3e629ff7f5ae9f04e3333fbe6fb128047138060364a8e168332a941e5159ebad4544f81b91efadcd590ae07f01346c3249361dc9a7caa2d0cb9a50119639a16045c0fb4c59067ab0dfa5b5eb31f5663bc936e0d20d98022eca16bf9032a65281ecd3b2aa00"/196], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f0000002140)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) r3 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r3, 0x8002007ffb) r4 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_dccp(0xa, 0x6, 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) 11.518969452s ago: executing program 5 (id=787): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') pread64(r4, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) timer_delete(0x0) dup(0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) 9.620971271s ago: executing program 3 (id=791): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x138, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x124, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xc1, 0x6, "a7d7fca4bb14c5c6b14377320989c49729c7bb68b81e4e2eed95fb834b79c7e5b94bad4a8bf8e1ab7bf109000000000000000d0d60230a81f1e0406ff9286a1bf2a243010000004a70b3de97003467855a9aa1d1685958f7ef1d8e45b3d688e2fdc1e0ac97e0f0e8a0fd3f7f9198c4a723027a43bf358822d3ea7b6cb44df30143c95eebd070c7090e0b1fc04f54d04fd3de3d3226cd7b29c8017f0d0dc052eb9f94ebb0165ba3fcab030407c560d4ab6690e9b39c6b3b383bbab4f8ae"}, {0xc}, {0xc}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 9.597497581s ago: executing program 1 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000001880)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$vcsa(0x0, 0x1, 0x42200) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 8.998934251s ago: executing program 4 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.705277261s ago: executing program 2 (id=794): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x12, 0x8, 0x3, 0x7}}) 8.544129031s ago: executing program 1 (id=795): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040)}) 8.322524261s ago: executing program 3 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 7.705649081s ago: executing program 2 (id=797): accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") mount$bind(0x0, 0x0, 0x0, 0x1000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x2, [0x5a2, 0x5]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xf94, @local, 0x9}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) 6.28933995s ago: executing program 2 (id=798): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[], 0x86) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 6.180385181s ago: executing program 4 (id=799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.0780478s ago: executing program 4 (id=800): io_setup(0xa42, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) 4.21931511s ago: executing program 4 (id=801): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) syz_open_dev$video4linux(0x0, 0x5d7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x100000001, 0xffffffffffffffff, 0x0, {0x8, 0x7}, 0xbe}, 0x1) 3.8660747s ago: executing program 2 (id=802): io_setup(0xa42, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x5}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) sendto$inet(r4, 0x0, 0x4d, 0x200047ee, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 2.72541899s ago: executing program 1 (id=803): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x400000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r0, 0x1, 0x70bd2a, 0xbef, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0xc000) 2.56622851s ago: executing program 2 (id=804): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000005100)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}], 0x1, 0x850) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000a14050727bd7000fbdb"], 0x20}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11e, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "00000000008000", "a5776c4416d4ab083d9a96513dfe0c75", '\b\x00', "9bd8162d242321f1"}, 0x28) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x90000000) fsopen(0x0, 0x0) close(0x3) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.56468704s ago: executing program 4 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040)}) 2.47991021s ago: executing program 3 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16=r3, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)}}, {{0x0, 0x0, &(0x7f0000002d00)}}], 0x3, 0x0, 0x0) 1.65395422s ago: executing program 2 (id=807): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x12, 0x8, 0x3, 0x7}}) 1.65290884s ago: executing program 1 (id=808): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000001340)={0x11, @remote, 0xffff, 0x0, 'wrr\x00'}, 0x2c) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.53170778s ago: executing program 3 (id=809): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) 1.42269111s ago: executing program 1 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82080, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@huge_always}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e2ffffffe10000000000000063010000000000009500000002000000bcccc83106b9ae0651668a9cc611ec5cbb48430b7ef6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000005c0)={0x1d, r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB='F'], 0x6a) io_setup(0x9, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x28, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x0) 205.19941ms ago: executing program 3 (id=811): socket(0x2000000000000021, 0x802, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="019c69c38d480ca2ca2f775afad182a67ab6e00358c62a66b370b125572078e1b597e1a41a1c9bbd554c", @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0xd, 0x1a6, &(0x7f00000003c0)="$eJzs282u0kAUwPFTeqVw/UJRF8ZEEhe6kRZUEnf6KAiVEIoacQNxgbyAz+D7ycK4cWXNDC1om1YhoVMv/9+CDj0z0zOQwhkSBMDJeiEtscSSinpyr9b43LRMpwSgIGF0/BkCOD32j82xZToRAAVbvxRd+3/99nEgdnVbF8QtFV/G8YqTqh/Wn0TunonoXYNVk3qyvvgi8jAeb50nh39XZ8638cuJcFXP/+hBfP0rclWuyXVpyA25Kc3o+sPt+Dv7lj/pBQEAcAIsaf8tntHhkn6sy+tx4HsSVQC/e/VU91LxTub8VR3v5sbt+9n5OXp8e/A2GOauA0Ba5eD7f8NW99/Ky+mRf/8DMGc2X0z6QeC/L0Gj9mc+oSNyxIs6ZVjy/9twJHnmbNIPwugHlX+aR73fqVA9c9Qq3Xk2X6hJzL8a+zaWyTOqmi5BYvYuDdOfTACOzf0wfefO5ovH42l/5I/8N13Pe9579qTT67p6Z+/G+3sAF83u2990JgAAAAAAAAAAAAAA4FC35LbpFAAAAAAUpIj/FZleIwAApfMrAAD//z9MD3E=") r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 192.86166ms ago: executing program 1 (id=812): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) umount2(&(0x7f0000000400)='./file0\x00', 0x1) 124.364889ms ago: executing program 3 (id=813): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040)}) 0s ago: executing program 4 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000004, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRESHEX], 0xfe, 0x1d1, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): TU to 1560 would solve the problem. [ 55.802588][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.855770][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.868444][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.908277][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.934982][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.946189][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.984372][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.006637][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.014624][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.047532][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.068535][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.077123][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.106760][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.123018][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.134775][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.146451][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178576][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.190507][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 56.199067][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 56.221187][ T4173] device hsr_slave_0 entered promiscuous mode [ 56.229777][ T4173] device hsr_slave_1 entered promiscuous mode [ 56.242401][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.269373][ T1334] Bluetooth: hci2: command 0x0409 tx timeout [ 56.279027][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 56.300777][ T4169] device hsr_slave_0 entered promiscuous mode [ 56.310434][ T4169] device hsr_slave_1 entered promiscuous mode [ 56.318182][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.330344][ T4169] Cannot create hsr debugfs directory [ 56.348869][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 56.371437][ T4172] device hsr_slave_0 entered promiscuous mode [ 56.380185][ T4172] device hsr_slave_1 entered promiscuous mode [ 56.387639][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.395998][ T4172] Cannot create hsr debugfs directory [ 56.413249][ T4175] team0: Port device team_slave_0 added [ 56.438632][ T4165] device hsr_slave_0 entered promiscuous mode [ 56.447430][ T4165] device hsr_slave_1 entered promiscuous mode [ 56.456559][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.465647][ T4165] Cannot create hsr debugfs directory [ 56.479295][ T4175] team0: Port device team_slave_1 added [ 56.558769][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.566058][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.595949][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.642067][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.650386][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.678906][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.820539][ T4175] device hsr_slave_0 entered promiscuous mode [ 56.828165][ T4175] device hsr_slave_1 entered promiscuous mode [ 56.836658][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.846868][ T4175] Cannot create hsr debugfs directory [ 56.976661][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.996872][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.007674][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.025750][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.051540][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.063371][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.074934][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.088094][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.170843][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.182487][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.193370][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.226052][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.271743][ T4165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.284901][ T4165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.297909][ T4165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.331614][ T4165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.388343][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.417312][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.442136][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.461863][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.473098][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.492283][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.507250][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.523087][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.541950][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.555334][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.569000][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.578149][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.589973][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.633873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.647010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.657803][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.665526][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.674542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.690095][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.717555][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.743711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.757524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.770628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.790189][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.804269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.814112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.826036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.838160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.849367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.859099][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.867484][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.886131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.906262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.915913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.937420][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.952183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.963572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.975088][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.985353][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.995123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.017122][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.035911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.047463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.064469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.076674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.089515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.102314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.117436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.128789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.141671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.157454][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.167563][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.223315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.235214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.253162][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.264564][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.269286][ T4204] Bluetooth: hci0: command 0x041b tx timeout [ 58.275265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.289140][ T4204] Bluetooth: hci1: command 0x041b tx timeout [ 58.296589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.311993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.325333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.337389][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347682][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.349007][ T4204] Bluetooth: hci3: command 0x041b tx timeout [ 58.357380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.370443][ T4204] Bluetooth: hci2: command 0x041b tx timeout [ 58.377699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.396855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.411701][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.420017][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.430913][ T4204] Bluetooth: hci4: command 0x041b tx timeout [ 58.431008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.452123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.465724][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.475656][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.487473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.499572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.511700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.524226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.536141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.546484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.558331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.578498][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.592649][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.616710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.630295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.646507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.692680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.705311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.731470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.750581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.773630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.786529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.805311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.816305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.833066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.852556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.872426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.891680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.917469][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.942921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.964286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.991713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.003385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.025713][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.042417][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.060353][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.068594][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.078531][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.088991][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.104262][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.116204][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.138926][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.156871][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.175207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.186352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.211843][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.226657][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.240630][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.250010][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.267126][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.290989][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.303667][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.314781][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.323968][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.337801][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.396392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.414380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.426096][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.434578][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.447455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.458005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.468225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.477557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.488410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.496279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.512835][ T4173] device veth0_vlan entered promiscuous mode [ 59.533045][ T4173] device veth1_vlan entered promiscuous mode [ 59.554892][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.573683][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.597194][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.607391][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.617959][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.631420][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.644612][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.656434][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.670963][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.683904][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.714133][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.727453][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.742328][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.754378][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.783769][ T4169] device veth0_vlan entered promiscuous mode [ 59.798295][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.815373][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.843329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.856049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.872758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.889398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.903435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.915599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.937253][ T4173] device veth0_macvtap entered promiscuous mode [ 59.956051][ T4169] device veth1_vlan entered promiscuous mode [ 59.982764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.997340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.009066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.024143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.038010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.053018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.066573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.083661][ T4173] device veth1_macvtap entered promiscuous mode [ 60.110605][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.153123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.165958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.189394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.216946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.231929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.247231][ T4165] device veth0_vlan entered promiscuous mode [ 60.265827][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.282044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.292980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.305080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.317030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.331776][ T4169] device veth0_macvtap entered promiscuous mode [ 60.346965][ T4165] device veth1_vlan entered promiscuous mode [ 60.352541][ T4204] Bluetooth: hci1: command 0x040f tx timeout [ 60.372858][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.386252][ T4204] Bluetooth: hci0: command 0x040f tx timeout [ 60.395168][ T4169] device veth1_macvtap entered promiscuous mode [ 60.406204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.418853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.429914][ T4203] Bluetooth: hci2: command 0x040f tx timeout [ 60.438606][ T4203] Bluetooth: hci3: command 0x040f tx timeout [ 60.443526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.464032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.473459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.482759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.492650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.510405][ T4203] Bluetooth: hci4: command 0x040f tx timeout [ 60.524978][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.535063][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.544813][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.555649][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.578233][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.625767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.636554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.647296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.670925][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.682775][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.696789][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.715074][ T4165] device veth0_macvtap entered promiscuous mode [ 60.744551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.756056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.766501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.780279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.789773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.803922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.816252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.834036][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.851018][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.865130][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.884143][ T4165] device veth1_macvtap entered promiscuous mode [ 60.896966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.908003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.927119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.938435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.949432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.960770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.971051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.986929][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.996791][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.007516][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.017184][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.037795][ T4172] device veth0_vlan entered promiscuous mode [ 61.086849][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.090345][ T4175] device veth0_vlan entered promiscuous mode [ 61.112548][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.121906][ T4172] device veth1_vlan entered promiscuous mode [ 61.140487][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.159512][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.176238][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.189163][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.206604][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.218084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.230698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.243018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.253388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.263791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.273903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.282720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.330013][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.345005][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.355496][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.367406][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.381911][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.393973][ T4175] device veth1_vlan entered promiscuous mode [ 61.401560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.410502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.419568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.429989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.439464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.454148][ T4172] device veth0_macvtap entered promiscuous mode [ 61.473386][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.482693][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.497772][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.507244][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527991][ T4172] device veth1_macvtap entered promiscuous mode [ 61.578273][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.596290][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.614725][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.641085][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.643621][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.656785][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.667652][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.677244][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.686897][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.700705][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.716286][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.732926][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.751924][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.764209][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.777174][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.791435][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.818242][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.833130][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.847935][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.860987][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.885179][ T4175] device veth0_macvtap entered promiscuous mode [ 61.896982][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.915809][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.926941][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.964468][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.980105][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.991723][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.009926][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.026615][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.049950][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.071964][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.119963][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.225431][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.335473][ T4242] team0: Port device virt_wifi0 added [ 62.399415][ T4175] device veth1_macvtap entered promiscuous mode [ 62.431003][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 62.491071][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.508893][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 62.530047][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.541293][ T4203] Bluetooth: hci3: command 0x0419 tx timeout [ 62.542540][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.548067][ T4203] Bluetooth: hci2: command 0x0419 tx timeout [ 62.562643][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.578828][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.592806][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 62.673430][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.694747][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.705309][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.717790][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.731246][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.742415][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.754146][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.766064][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.778217][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.787999][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.812375][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.816766][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 62.886310][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.915547][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.918384][ T4250] loop1: detected capacity change from 0 to 4096 [ 62.927183][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.944428][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.955804][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.966134][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.978176][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.990413][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.005767][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.023271][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.037646][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.055523][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.069652][ T4250] ======================================================= [ 63.069652][ T4250] WARNING: The mand mount option has been deprecated and [ 63.069652][ T4250] and is ignored by this kernel. Remove the mand [ 63.069652][ T4250] option from the mount to silence this warning. [ 63.069652][ T4250] ======================================================= [ 63.156124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.185509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.211742][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.228604][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.246773][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.250544][ T4251] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.261789][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.333770][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.387768][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.453337][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.465697][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.482405][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.585183][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.649067][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.701900][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.739298][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.886861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.266871][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.331955][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.342830][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.373315][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.403032][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.626570][ T4282] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.979947][ T4287] sched: RT throttling activated [ 72.025138][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.038201][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.452305][ T4324] ALSA: seq fatal error: cannot create timer (-22) [ 72.547818][ T4324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 72.666073][ T4329] loop2: detected capacity change from 0 to 2048 [ 72.689089][ T26] audit: type=1326 audit(1741184570.798:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 73.698564][ T26] audit: type=1326 audit(1741184570.798:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 73.722219][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.772929][ T26] audit: type=1326 audit(1741184570.798:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 73.829298][ T4329] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,bsddf,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: none. [ 73.976560][ T26] audit: type=1326 audit(1741184570.798:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 74.001657][ T26] audit: type=1326 audit(1741184570.798:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 74.021607][ T4329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.22: bg 0: block 234: padding at end of block bitmap is not set [ 74.067818][ T4329] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 194 with error 28 [ 74.091675][ T4329] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.091675][ T4329] [ 74.106767][ T4329] EXT4-fs (loop2): Total free blocks count 0 [ 74.116162][ T4329] EXT4-fs (loop2): Free/Dirty block details [ 74.203258][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.216887][ T4329] EXT4-fs (loop2): free_blocks=0 [ 75.224690][ T4329] EXT4-fs (loop2): dirty_blocks=208 [ 75.257775][ T4329] EXT4-fs (loop2): Block reservation details [ 75.328723][ T4329] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 75.360668][ T4351] loop1: detected capacity change from 0 to 512 [ 76.520429][ T4351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.972604][ T4351] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.113737][ T4351] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.27: iget: bad extended attribute block 512 [ 77.124644][ T4361] loop0: detected capacity change from 0 to 4096 [ 77.144989][ T4351] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 77.429799][ T4351] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.070690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.346556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 79.377897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.712988][ T4388] loop1: detected capacity change from 0 to 1024 [ 79.800731][ T4361] EXT4-fs (loop0): Test dummy encryption mode enabled [ 79.909931][ T4388] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.920959][ T4361] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 80.151684][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,block_validity,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 80.987367][ T4399] loop2: detected capacity change from 0 to 256 [ 81.725159][ T7] cfg80211: failed to load regulatory.db [ 82.632737][ T4403] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 83.445733][ T4402] loop4: detected capacity change from 0 to 256 [ 83.697484][ T4402] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.709459][ T4402] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 84.038129][ T4429] loop1: detected capacity change from 0 to 512 [ 84.086066][ T4428] loop0: detected capacity change from 0 to 4096 [ 84.104550][ T4402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 84.140114][ T4429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.167202][ T4428] NILFS (loop0): unrecognized mount option "ery" [ 84.442299][ T4429] EXT4-fs (loop1): 1 orphan inode deleted [ 84.453797][ T4429] EXT4-fs (loop1): 1 truncate cleaned up [ 84.462402][ T4429] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 88.340801][ T4473] loop3: detected capacity change from 0 to 16 [ 88.375973][ T4473] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.790217][ T4490] syz.4.55 sent an empty control message without MSG_MORE. [ 91.533753][ T4495] loop2: detected capacity change from 0 to 1024 [ 93.057688][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 93.312515][ T4452] ODEBUG: Out of memory. ODEBUG disabled [ 93.482056][ T4512] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.491838][ T4512] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.501251][ T4512] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.511202][ T4512] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.523445][ T4512] device geneve2 entered promiscuous mode [ 94.265490][ T4440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.798952][ T4440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.936789][ T4440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.217445][ T4440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.175293][ T4565] loop2: detected capacity change from 0 to 256 [ 100.188990][ T4209] Bluetooth: hci0: command 0x0409 tx timeout [ 100.390006][ T4561] Zero length message leads to an empty skb [ 100.986468][ T4570] loop1: detected capacity change from 0 to 1024 [ 101.687178][ T4586] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.863578][ T4543] chnl_net:caif_netlink_parms(): no params data found [ 102.269788][ T4204] Bluetooth: hci0: command 0x041b tx timeout [ 102.986799][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.071887][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.214954][ T4543] device bridge_slave_0 entered promiscuous mode [ 103.390611][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.586697][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.595938][ T4543] device bridge_slave_1 entered promiscuous mode [ 103.674429][ T4543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.721764][ T4570] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 103.772367][ T4543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.781039][ T4609] loop3: detected capacity change from 0 to 128 [ 103.905310][ T4570] loop1: detected capacity change from 0 to 256 [ 103.959772][ T4570] FAT-fs (loop1): Unrecognized mount option "utf>=1" or missing value [ 103.972565][ T4543] team0: Port device team_slave_0 added [ 104.001199][ T4609] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 104.050570][ T4609] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.065468][ T4543] team0: Port device team_slave_1 added [ 104.124734][ T4543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.134532][ T4543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.174980][ T4543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.244403][ T4543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.307842][ T4543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.348908][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 105.098525][ T4543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.197617][ T4624] loop2: detected capacity change from 0 to 512 [ 105.329316][ T4624] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.458925][ T4624] EXT4-fs (loop2): 1 orphan inode deleted [ 105.466403][ T4624] EXT4-fs (loop2): 1 truncate cleaned up [ 105.485049][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 105.553545][ T4543] device hsr_slave_0 entered promiscuous mode [ 105.655314][ T4543] device hsr_slave_1 entered promiscuous mode [ 105.729313][ T4543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.736839][ T4623] kvm: emulating exchange as write [ 105.751750][ T4543] Cannot create hsr debugfs directory [ 106.256258][ T4204] libceph: connect (1)[c::]:6789 error -101 [ 106.275466][ T4204] libceph: mon0 (1)[c::]:6789 connect error [ 106.285437][ T4641] ceph: No mds server is up or the cluster is laggy [ 106.299944][ T4204] libceph: connect (1)[c::]:6789 error -101 [ 106.310188][ T4204] libceph: mon0 (1)[c::]:6789 connect error [ 106.428900][ T4204] Bluetooth: hci0: command 0x0419 tx timeout [ 107.692401][ T4543] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.802343][ T4543] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.824931][ T4543] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.055271][ T4543] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.685174][ T4665] loop3: detected capacity change from 0 to 1024 [ 108.706282][ T4440] device hsr_slave_0 left promiscuous mode [ 108.738573][ T4440] device hsr_slave_1 left promiscuous mode [ 108.780723][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.798797][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.829020][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.855140][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.907843][ T4440] device bridge_slave_1 left promiscuous mode [ 108.956107][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.994599][ T4440] device bridge_slave_0 left promiscuous mode [ 109.052122][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.243411][ T4665] EXT4-fs (loop3): Ignoring removed nobh option [ 109.393336][ T4665] EXT4-fs (loop3): Ignoring removed bh option [ 109.578759][ T4665] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.746137][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 109.821186][ T4686] loop2: detected capacity change from 0 to 128 [ 109.951916][ T4440] device veth1_macvtap left promiscuous mode [ 109.984002][ T4686] EXT4-fs (loop2): Invalid want_extra_isize 1779 [ 110.009097][ T4440] device veth0_macvtap left promiscuous mode [ 110.016998][ T4440] device veth1_vlan left promiscuous mode [ 110.024582][ T4440] device veth0_vlan left promiscuous mode [ 111.798439][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 111.833497][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 111.867839][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.894655][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.990349][ T4440] bond0 (unregistering): Released all slaves [ 112.182330][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.194276][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.204396][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.215996][ T4700] device bridge_slave_0 left promiscuous mode [ 112.226586][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.247461][ T4700] device bridge_slave_1 left promiscuous mode [ 112.255738][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.282400][ T4700] bond0: (slave bond_slave_0): Releasing backup interface [ 112.331471][ T4700] bond0: (slave bond_slave_1): Releasing backup interface [ 112.394133][ T4700] team0: Port device team_slave_0 removed [ 112.491711][ T4700] team0: Port device team_slave_1 removed [ 112.499744][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.510232][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.541111][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.550181][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.689757][ T4700] syz.1.100 (4700) used greatest stack depth: 19616 bytes left [ 113.593392][ T4543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.736589][ T4543] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.803458][ T4727] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 113.909168][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.974229][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.119011][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.200629][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.255870][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.264492][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.323661][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.655375][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.675853][ T4735] loop3: detected capacity change from 0 to 8192 [ 114.685398][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.730228][ T4735] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=uid<" [ 114.966558][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.974020][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.216854][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.694276][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.709864][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.722764][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.917839][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.273904][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.457941][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.514715][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.524058][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.533906][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.572554][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.805581][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.596911][ T4766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.602231][ T4766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.775163][ T4543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.793315][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.812416][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.940213][ T4789] syz.3.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.965178][ T4166] Bluetooth: Wrong link type (-22) [ 119.673882][ T4801] device  entered promiscuous mode [ 119.889012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.985962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.976161][ T4543] device veth0_vlan entered promiscuous mode [ 121.277839][ T9] Bluetooth: (null): Invalid header checksum [ 121.317417][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.399233][ T9] Bluetooth: (null): Invalid header checksum [ 121.416309][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.531011][ T9] Bluetooth: (null): Invalid header checksum [ 121.624943][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.675721][ T9] Bluetooth: (null): Invalid header checksum [ 121.717668][ T4823] loop4: detected capacity change from 0 to 512 [ 121.729312][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.737378][ T9] Bluetooth: (null): Invalid header checksum [ 121.777998][ T9] Bluetooth: (null): Invalid header checksum [ 121.794923][ T4543] device veth1_vlan entered promiscuous mode [ 121.807571][ T4823] EXT4-fs (loop4): Ignoring removed orlov option [ 121.815652][ T4823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.893329][ T4823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 121.961215][ T4823] System zones: 1-12 [ 122.069991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.109965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.174406][ T4823] EXT4-fs (loop4): 1 truncate cleaned up [ 122.182091][ T4823] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,debug,nogrpid,i_version,,errors=continue. Quota mode: none. [ 122.513715][ T4543] device veth0_macvtap entered promiscuous mode [ 122.983453][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.030550][ T4543] device veth1_macvtap entered promiscuous mode [ 123.080578][ T4836] loop2: detected capacity change from 0 to 16 [ 123.106841][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.218711][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.268850][ T4207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.278450][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.312571][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.163098][ T4851] loop1: detected capacity change from 0 to 16 [ 124.583679][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.908574][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.067172][ T4543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.195942][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.219647][ T4851] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.552843][ T4836] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.216662][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.250677][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.296303][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.473617][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.441105][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.738687][ T4543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.752774][ T4870] loop3: detected capacity change from 0 to 40427 [ 127.768957][ T4543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.808103][ T4543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.848255][ T4870] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.858613][ T4870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.876954][ T4543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.914722][ T4870] F2FS-fs (loop3): invalid crc value [ 127.955042][ T4870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.046373][ T4870] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 128.055435][ T4870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.132342][ T4888] attempt to access beyond end of device [ 129.132342][ T4888] loop3: rw=2049, want=78344, limit=40427 [ 129.705784][ T4207] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.758098][ T4543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.827597][ T4543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.849784][ T4543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.860389][ T4876] sctp: failed to load transform for md5: -2 [ 129.888117][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.938487][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.018836][ T4207] usb 5-1: Using ep0 maxpacket: 8 [ 130.101006][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.159507][ T4207] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.201553][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.220634][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.246349][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.322932][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.377036][ T4207] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.388924][ T4207] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.399895][ T4207] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.415117][ T4207] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.427286][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.039110][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.159309][ T4207] usb 5-1: can't set config #16, error -71 [ 131.188400][ T4207] usb 5-1: USB disconnect, device number 3 [ 131.928574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 131.941001][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 131.952990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 131.965561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 131.979098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 132.187790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 132.239174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 132.528089][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 132.543570][ T4924] device bond_slave_0 entered promiscuous mode [ 132.550934][ T4924] device bond_slave_1 entered promiscuous mode [ 132.599791][ T4924] device macvtap1 entered promiscuous mode [ 132.605895][ T4924] device bond0 entered promiscuous mode [ 132.650232][ T4924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.971561][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.991958][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.471942][ T4930] device bond0 left promiscuous mode [ 133.486930][ T4930] device bond_slave_0 left promiscuous mode [ 133.493231][ T4930] device bond_slave_1 left promiscuous mode [ 133.582309][ T4934] loop4: detected capacity change from 0 to 1764 [ 135.788817][ T4968] netlink: 92 bytes leftover after parsing attributes in process `syz.5.147'. [ 136.661407][ T4970] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 137.463319][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 138.987906][ T4975] device vlan2 entered promiscuous mode [ 139.020713][ T4957] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.788464][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 141.872383][ T4957] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 145.029988][ T4975] device hsr_slave_1 left promiscuous mode [ 145.070201][ T5031] loop6: detected capacity change from 0 to 524287999 [ 145.258843][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 147.112591][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.166'. [ 151.858869][ T5107] loop2: detected capacity change from 0 to 40427 [ 151.988969][ T5107] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 152.916344][ T5123] loop5: detected capacity change from 0 to 256 [ 153.479478][ T5123] exfat: Unknown parameter 'keep_last_dots' [ 154.496980][ T5138] loop1: detected capacity change from 0 to 128 [ 154.535499][ T5140] loop4: detected capacity change from 0 to 2048 [ 155.731632][ T5138] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.745428][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 155.783713][ T5154] loop2: detected capacity change from 0 to 512 [ 155.825156][ T5138] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.857841][ T5154] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 155.916388][ T5154] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 156.694516][ T26] audit: type=1800 audit(1741184654.497:7): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.187" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 157.590775][ T5163] netlink: 96 bytes leftover after parsing attributes in process `syz.2.190'. [ 159.801939][ T5189] loop5: detected capacity change from 0 to 512 [ 160.032264][ T5196] loop2: detected capacity change from 0 to 256 [ 160.593910][ T5189] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 160.621502][ T5196] exfat: Unknown parameter 'keep_last_dots' [ 160.650852][ T5189] EXT4-fs (loop5): invalid journal inode [ 160.656684][ T5189] EXT4-fs (loop5): can't get journal size [ 160.743039][ T5201] loop4: detected capacity change from 0 to 1024 [ 160.754856][ T5189] EXT4-fs (loop5): 1 truncate cleaned up [ 160.792971][ T5189] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 160.847210][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 161.319528][ T5209] loop2: detected capacity change from 0 to 736 [ 162.975293][ T5233] loop4: detected capacity change from 0 to 128 [ 163.053986][ T5232] io-wq is not configured for unbound workers [ 164.069660][ T5233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.171695][ T5233] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.554987][ T5261] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.626761][ T5271] device bridge1 entered promiscuous mode [ 166.982438][ T5290] loop4: detected capacity change from 0 to 512 [ 167.658796][ T5290] EXT4-fs (loop4): Unrecognized mount option "defcontext=sysadm_u" or missing value [ 169.099815][ T5313] loop1: detected capacity change from 0 to 512 [ 169.288043][ T5314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.221'. [ 170.712118][ T5313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.758403][ T5313] EXT4-fs (loop1): 1 truncate cleaned up [ 170.768952][ T5313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.093784][ T26] audit: type=1800 audit(1741184669.107:8): pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.220" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 176.696313][ T5404] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 176.696499][ T5404] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 179.356518][ T5410] loop4: detected capacity change from 0 to 4096 [ 181.569405][ T4209] Bluetooth: hci2: command 0x0406 tx timeout [ 181.575525][ T4209] Bluetooth: hci1: command 0x0406 tx timeout [ 181.582558][ T4209] Bluetooth: hci3: command 0x0406 tx timeout [ 181.588962][ T4209] Bluetooth: hci4: command 0x0406 tx timeout [ 181.732621][ T5442] ALSA: seq fatal error: cannot create timer (-22) [ 182.161455][ T4203] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.458743][ T4203] usb 5-1: Using ep0 maxpacket: 16 [ 182.611796][ T4203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 182.845165][ T4203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 183.588692][ T4203] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 183.598004][ T4203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.616781][ T4203] usb 5-1: Product: syz [ 183.621984][ T4203] usb 5-1: Manufacturer: syz [ 183.627107][ T4203] usb 5-1: SerialNumber: syz [ 183.664617][ T4203] usb 5-1: config 0 descriptor?? [ 183.722907][ T4203] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 183.972962][ T4203] usb 5-1: USB disconnect, device number 4 [ 184.058917][ T5489] xt_TCPMSS: Only works on TCP SYN packets [ 187.174088][ T5518] loop2: detected capacity change from 0 to 128 [ 190.620276][ T26] audit: type=1326 audit(1741184688.757:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 191.175315][ T26] audit: type=1326 audit(1741184688.757:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 191.877720][ C1] hrtimer: interrupt took 69379 ns [ 192.130293][ T26] audit: type=1326 audit(1741184688.757:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 192.152649][ T26] audit: type=1326 audit(1741184688.757:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 192.174844][ T26] audit: type=1326 audit(1741184688.757:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 192.215727][ T5550] loop2: detected capacity change from 0 to 2048 [ 192.250126][ T5554] ALSA: seq fatal error: cannot create timer (-22) [ 192.762321][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.635132][ T5550] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 193.898893][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 194.231361][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 194.652189][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.675478][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.742611][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 195.055708][ T5549] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 195.073132][ T5549] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 195.081119][ T5580] loop5: detected capacity change from 0 to 512 [ 195.085986][ T5549] EXT4-fs (loop2): This should not happen!! Data will be lost [ 195.085986][ T5549] [ 195.102867][ T5549] EXT4-fs (loop2): Total free blocks count 0 [ 195.109140][ T5549] EXT4-fs (loop2): Free/Dirty block details [ 195.116449][ T5549] EXT4-fs (loop2): free_blocks=66060288 [ 195.122216][ T5549] EXT4-fs (loop2): dirty_blocks=16 [ 195.128111][ T5549] EXT4-fs (loop2): Block reservation details [ 195.135914][ T5549] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 195.252421][ T5580] EXT4-fs (loop5): Ignoring removed bh option [ 195.278837][ T23] usb 2-1: string descriptor 0 read error: -71 [ 195.285463][ T23] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 195.327082][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.365874][ T5587] loop3: detected capacity change from 0 to 512 [ 195.369569][ T5580] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,nolazytime,,errors=continue. Quota mode: writeback. [ 195.491971][ T5580] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.505123][ T23] usb 2-1: config 0 descriptor?? [ 195.960528][ T23] usb 2-1: can't set config #0, error -71 [ 196.212838][ T23] usb 2-1: USB disconnect, device number 2 [ 197.021102][ T5587] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 197.049509][ T5587] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.785247][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.279: corrupted inode contents [ 197.825657][ T5587] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.279: mark_inode_dirty error [ 197.826778][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.279: corrupted inode contents [ 197.827742][ T5587] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.279: mark_inode_dirty error [ 197.955802][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 198.000852][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.514455][ T5633] xt_TCPMSS: Only works on TCP SYN packets [ 199.341950][ T5625] device bridge_slave_1 left promiscuous mode [ 199.383678][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.219694][ T5662] ALSA: seq fatal error: cannot create timer (-22) [ 201.686098][ T4248] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.173231][ T5666] loop1: detected capacity change from 0 to 8192 [ 202.333103][ T26] audit: type=1326 audit(1741184700.477:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 202.493970][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.799633][ T4248] usb 6-1: Using ep0 maxpacket: 16 [ 202.824893][ T5666] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 202.888941][ T5666] REISERFS (device loop1): using ordered data mode [ 202.895836][ T5666] reiserfs: using flush barriers [ 202.972164][ T5666] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.993713][ T26] audit: type=1326 audit(1741184700.477:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 203.053150][ T5666] REISERFS (device loop1): checking transaction log (loop1) [ 203.076047][ T26] audit: type=1326 audit(1741184700.477:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 203.099868][ T5666] REISERFS (device loop1): Using r5 hash to sort names [ 203.113169][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 203.127550][ T5666] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 203.147503][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 203.178363][ T26] audit: type=1326 audit(1741184700.477:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 203.341016][ T26] audit: type=1326 audit(1741184700.477:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 203.364809][ T4248] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 203.383287][ T4248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.490171][ T5694] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.810598][ T4248] usb 6-1: Product: syz [ 203.815144][ T4248] usb 6-1: Manufacturer: syz [ 203.825478][ T4248] usb 6-1: SerialNumber: syz [ 203.934632][ T4248] usb 6-1: config 0 descriptor?? [ 204.042107][ T4248] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 204.113473][ T5697] device vlan2 entered promiscuous mode [ 204.151852][ T5697] device nlmon0 entered promiscuous mode [ 204.163375][ T5697] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 204.197608][ T4248] usb 6-1: USB disconnect, device number 2 [ 207.670656][ T5729] libceph: resolve '. [ 207.670656][ T5729] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 207.670656][ T5729] ' (ret=-3): failed [ 211.639292][ T5774] UBIFS error (pid: 5774): cannot open "./file0", error -22 [ 212.718852][ T5789] tipc: Started in network mode [ 212.731996][ T5789] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 212.741657][ T5789] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 212.751550][ T5789] tipc: Enabled bearer , priority 10 [ 213.619263][ T5791] libceph: resolve '. [ 213.619263][ T5791] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 213.619263][ T5791] ' (ret=-3): failed [ 213.952813][ T4502] tipc: Node number set to 1 [ 217.898414][ T5856] loop4: detected capacity change from 0 to 512 [ 218.316951][ T5856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.423973][ T5856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.332: inode #255: comm syz.4.332: iget: illegal inode # [ 218.448999][ T5856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.332: error while reading EA inode 255 err=-117 [ 218.464029][ T5856] EXT4-fs (loop4): 1 orphan inode deleted [ 218.470141][ T5856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.844680][ T5873] loop2: detected capacity change from 0 to 16 [ 218.886629][ T5874] loop3: detected capacity change from 0 to 512 [ 218.963730][ T5873] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.971732][ T5874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.165867][ T5874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 219.290863][ T5874] System zones: 1-12 [ 219.616405][ T5874] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 219.713612][ T5874] EXT4-fs (loop3): 1 truncate cleaned up [ 219.737658][ T5874] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 221.950178][ T5912] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.028871][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 224.512672][ T5930] libceph: resolve '. [ 224.512672][ T5930] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 224.512672][ T5930] ' (ret=-3): failed [ 224.531674][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.190511][ T5966] loop4: detected capacity change from 0 to 64 [ 230.768787][ T6000] process 'syz.3.358' launched './file0' with NULL argv: empty string added [ 232.026826][ T5998] kernel profiling enabled (shift: 7) [ 233.449423][ T6010] loop3: detected capacity change from 0 to 256 [ 233.481320][ T6009] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 233.484166][ T6012] loop1: detected capacity change from 0 to 256 [ 233.490219][ T6009] FAT-fs (loop3): Filesystem has been set read-only [ 237.815199][ T6051] loop5: detected capacity change from 0 to 4096 [ 237.925017][ T6060] loop2: detected capacity change from 0 to 2048 [ 238.029308][ T6051] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 239.135515][ T6060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.402961][ T6060] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.467502][ T6051] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 239.532381][ T6051] ntfs3: loop5: Failed to load $Extend. [ 240.958154][ T6090] vxfs: WRONG superblock magic 00000000 at 1 [ 240.966842][ T6090] vxfs: WRONG superblock magic 00000000 at 8 [ 240.973157][ T6090] vxfs: can't find superblock. [ 242.162291][ T6104] sd 0:0:1:0: device reset [ 242.906052][ T6109] loop3: detected capacity change from 0 to 128 [ 243.462967][ T26] audit: type=1804 audit(1741184741.439:19): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.395" name="/newroot/90/file2/bus" dev="loop3" ino=1048612 res=1 errno=0 [ 245.897774][ T6128] loop3: detected capacity change from 0 to 1024 [ 247.501280][ T6147] loop2: detected capacity change from 0 to 128 [ 248.315303][ T6147] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 248.652966][ T6164] dccp_invalid_packet: invalid packet type [ 250.060820][ T6181] loop1: detected capacity change from 0 to 64 [ 250.567163][ T6193] loop2: detected capacity change from 0 to 2048 [ 250.604925][ T6193] UDF-fs: bad mount option "anchor=00000000002147483649" or missing value [ 252.336490][ T6207] syz.2.420 uses obsolete (PF_INET,SOCK_PACKET) [ 252.353955][ T6208] loop4: detected capacity change from 0 to 1024 [ 252.390691][ T6207] fuse: Unknown parameter 'v0x000000000000000a0000000000000000000000000000000000000000' [ 254.109353][ T6224] loop1: detected capacity change from 0 to 128 [ 254.519537][ T6202] Set syz1 is full, maxelem 65536 reached [ 255.682881][ T26] audit: type=1804 audit(1741184752.916:20): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.423" name="/newroot/79/file2/bus" dev="loop1" ino=1048613 res=1 errno=0 [ 256.553232][ T26] audit: type=1326 audit(1741184752.926:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 256.622052][ T6242] loop3: detected capacity change from 0 to 512 [ 256.685925][ T26] audit: type=1326 audit(1741184752.926:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 256.727811][ T6238] loop4: detected capacity change from 0 to 4096 [ 256.746487][ T6244] loop5: detected capacity change from 0 to 1024 [ 256.766072][ T26] audit: type=1326 audit(1741184752.926:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 256.795348][ T26] audit: type=1326 audit(1741184752.926:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 256.822399][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.828763][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.850316][ T6243] netlink: 'syz.5.429': attribute type 9 has an invalid length. [ 256.900027][ T6238] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 256.911137][ T26] audit: type=1326 audit(1741184752.926:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 256.967108][ T6242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.980920][ T6238] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,max_dir_size_kb=0x00000000000000da,init_itable,nojournal_checksum,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 257.070079][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.107953][ T6242] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.466755][ T6257] loop1: detected capacity change from 0 to 128 [ 258.033539][ T6257] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 258.065617][ T6257] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.343934][ T6280] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 260.352369][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 261.554258][ T6280] team0: Port device geneve0 added [ 261.787516][ T26] audit: type=1326 audit(1741184758.519:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 261.870981][ T6280] syz.2.438 (6280) used greatest stack depth: 18872 bytes left [ 262.017154][ T26] audit: type=1326 audit(1741184758.519:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 262.040957][ T26] audit: type=1326 audit(1741184758.519:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 262.065484][ T26] audit: type=1326 audit(1741184758.519:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 262.088849][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.096086][ T26] audit: type=1326 audit(1741184758.519:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 263.479897][ T6308] xt_TCPMSS: Only works on TCP SYN packets [ 264.315314][ T6313] loop5: detected capacity change from 0 to 256 [ 264.426248][ T6309] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 266.457000][ T6328] trusted_key: encrypted_key: insufficient parameters specified [ 268.117763][ T6347] loop3: detected capacity change from 0 to 256 [ 269.408696][ T26] audit: type=1326 audit(1741184764.871:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 269.908094][ T6347] FAT-fs (loop3): Directory bread(block 64) failed [ 269.943272][ T4248] Bluetooth: hci1: command 0x0c24 tx timeout [ 269.994927][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 270.021185][ T26] audit: type=1326 audit(1741184764.871:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7b8c4127 code=0x7ffc0000 [ 270.047060][ T6347] FAT-fs (loop3): Directory bread(block 65) failed [ 270.091486][ T26] audit: type=1326 audit(1741184764.871:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7b869359 code=0x7ffc0000 [ 270.184973][ T6347] FAT-fs (loop3): Directory bread(block 66) failed [ 270.323744][ T6347] FAT-fs (loop3): Directory bread(block 67) failed [ 270.495354][ T6347] FAT-fs (loop3): Directory bread(block 68) failed [ 270.549731][ T6347] FAT-fs (loop3): Directory bread(block 69) failed [ 270.688786][ T26] audit: type=1326 audit(1741184764.871:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 270.779277][ T6347] FAT-fs (loop3): Directory bread(block 70) failed [ 270.786225][ T6347] FAT-fs (loop3): Directory bread(block 71) failed [ 270.828677][ T6347] FAT-fs (loop3): Directory bread(block 72) failed [ 271.797052][ T6347] FAT-fs (loop3): Directory bread(block 73) failed [ 271.812621][ T26] audit: type=1326 audit(1741184764.880:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 271.868782][ T6378] trusted_key: encrypted_key: insufficient parameters specified [ 271.886697][ T26] audit: type=1326 audit(1741184764.880:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 271.933054][ T26] audit: type=1326 audit(1741184764.880:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 271.961883][ T26] audit: type=1326 audit(1741184764.880:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef7b8ffa25 code=0x7ffc0000 [ 272.009156][ T26] audit: type=1326 audit(1741184764.889:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7b8c4127 code=0x7ffc0000 [ 272.071368][ T26] audit: type=1326 audit(1741184764.889:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7b869359 code=0x7ffc0000 [ 272.093906][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.116741][ T6383] loop2: detected capacity change from 0 to 512 [ 272.657895][ T6383] EXT4-fs (loop2): 1 orphan inode deleted [ 272.744476][ T6383] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 272.765952][ T6383] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.589691][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.599291][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.607374][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.744512][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 275.744531][ T26] audit: type=1326 audit(1741184771.662:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 276.164704][ T26] audit: type=1326 audit(1741184771.662:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 276.213374][ T26] audit: type=1326 audit(1741184771.662:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 278.060901][ T26] audit: type=1326 audit(1741184771.662:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 278.090147][ T26] audit: type=1326 audit(1741184771.662:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 278.114352][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.230063][ T6429] trusted_key: encrypted_key: insufficient parameters specified [ 279.274387][ T6424] loop4: detected capacity change from 0 to 1024 [ 280.633572][ T6423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.291109][ T6486] loop5: detected capacity change from 0 to 256 [ 285.864859][ T6508] bridge0: port 3(erspan0) entered blocking state [ 285.872144][ T6508] bridge0: port 3(erspan0) entered disabled state [ 285.880040][ T6508] device erspan0 entered promiscuous mode [ 285.886399][ T6508] bridge0: port 3(erspan0) entered blocking state [ 285.893184][ T6508] bridge0: port 3(erspan0) entered forwarding state [ 286.882415][ T6507] loop3: detected capacity change from 0 to 2048 [ 286.886109][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 286.939479][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 287.032664][ T6512] device bond0 entered promiscuous mode [ 287.096473][ T6512] device bond_slave_0 entered promiscuous mode [ 287.113432][ T6512] device bond_slave_1 entered promiscuous mode [ 287.149960][ T6511] device bond0 left promiscuous mode [ 287.168780][ T6511] device bond_slave_0 left promiscuous mode [ 287.204668][ T6511] device bond_slave_1 left promiscuous mode [ 288.050445][ T6528] loop4: detected capacity change from 0 to 1024 [ 288.164600][ T6532] loop2: detected capacity change from 0 to 4096 [ 288.375089][ T6534] i2c i2c-0: Invalid block write size 131 [ 288.610358][ T6528] EXT4-fs (loop4): Ignoring removed nobh option [ 288.701894][ T6528] EXT4-fs (loop4): Ignoring removed bh option [ 288.842558][ T6528] EXT4-fs (loop4): Ignoring removed oldalloc option [ 288.932481][ T6535] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.443785][ T6528] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue. Quota mode: writeback. [ 289.783073][ T6549] loop3: detected capacity change from 0 to 128 [ 289.924203][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.016691][ T6554] kAFS: No cell specified [ 290.106224][ T6554] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.501: Allocating blocks 497-513 which overlap fs metadata [ 290.135218][ T6554] EXT4-fs (loop4): pa ffff88807e012620: logic 1104, phys. 305, len 13 [ 290.144402][ T6554] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 290.290683][ T6549] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.820947][ T6560] ip6t_rpfilter: unknown options [ 295.508382][ T6600] sd 0:0:1:0: device reset [ 297.750034][ T4207] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.077640][ T6677] loop3: detected capacity change from 0 to 128 [ 308.306530][ T6677] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.384168][ T6677] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.341131][ T6677] fscrypt (loop3, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 311.555781][ T150] block nbd2: Attempted send on invalid socket [ 311.562797][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.577681][ T6728] (syz.2.551,6728,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 311.585869][ T6728] (syz.2.551,6728,0):ocfs2_sb_probe:750 ERROR: status = -5 [ 311.593129][ T6728] (syz.2.551,6728,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 311.601775][ T6728] (syz.2.551,6728,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 311.624648][ T6733] loop3: detected capacity change from 0 to 2048 [ 312.108640][ T6741] netlink: 80 bytes leftover after parsing attributes in process `syz.4.554'. [ 312.962140][ T6749] loop1: detected capacity change from 0 to 512 [ 312.991222][ T26] audit: type=1326 audit(1741184806.524:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 313.027189][ T26] audit: type=1326 audit(1741184806.524:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 313.215019][ T26] audit: type=1326 audit(1741184806.524:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 313.233576][ T6749] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 313.250235][ T26] audit: type=1326 audit(1741184806.524:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 314.134646][ T6749] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 1: comm syz.1.556: invalid block [ 314.262975][ T6749] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.556: couldn't read orphan inode 11 (err -117) [ 314.444606][ T6749] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,noinit_itable,bsddf,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,usrquota,noauto_da_alloc,journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 314.993591][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 315.349316][ T6766] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2840 [ 315.371681][ T6764] libceph: resolve '. [ 315.371681][ T6764] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 315.371681][ T6764] ' (ret=-3): failed [ 315.592333][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 315.644951][ T23] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 315.772622][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.780366][ T23] usb 3-1: can't read configurations, error -61 [ 316.017394][ T6775] capability: warning: `syz.5.563' uses deprecated v2 capabilities in a way that may be insecure [ 316.047356][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 316.743747][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 318.183306][ T6794] loop1: detected capacity change from 0 to 4096 [ 318.281790][ T6797] siw: device registration error -23 [ 318.486673][ T6794] ntfs3: Bad value for 'uid' [ 319.749345][ T26] audit: type=1326 audit(1741184812.801:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 319.860427][ T6787] loop1: detected capacity change from 0 to 1024 [ 319.886787][ T26] audit: type=1326 audit(1741184812.801:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 319.933957][ T26] audit: type=1326 audit(1741184812.801:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 320.099287][ T6787] EXT4-fs (loop1): Ignoring removed bh option [ 320.171269][ T6787] EXT4-fs (loop1): Ignoring removed oldalloc option [ 321.688123][ T26] audit: type=1326 audit(1741184812.801:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 321.714504][ T6787] EXT4-fs (loop1): inline encryption not supported [ 321.725689][ T6787] EXT4-fs (loop1): Unrecognized mount option "obj_role=usrquota" or missing value [ 322.315819][ T6826] loop4: detected capacity change from 0 to 2048 [ 322.540911][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.572967][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.235340][ T6835] loop1: detected capacity change from 0 to 128 [ 323.553174][ T6835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.571328][ T6835] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.029908][ T6847] ip6t_rpfilter: unknown options [ 329.404643][ T26] audit: type=1326 audit(1741184821.883:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 329.427755][ T26] audit: type=1326 audit(1741184821.883:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 329.447906][ T6864] loop1: detected capacity change from 0 to 4096 [ 329.449926][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.456796][ T26] audit: type=1326 audit(1741184821.893:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 329.485245][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.495632][ T26] audit: type=1326 audit(1741184821.893:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 329.522861][ T6878] loop4: detected capacity change from 0 to 128 [ 329.695772][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 329.740081][ T6878] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.755759][ T26] audit: type=1326 audit(1741184821.893:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 329.787795][ T6882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.185149][ T6887] tipc: Enabling of bearer rejected, media not registered [ 330.831086][ T6878] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 330.934946][ T6893] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 331.304883][ T6902] loop1: detected capacity change from 0 to 2048 [ 333.168839][ T6918] loop3: detected capacity change from 0 to 512 [ 333.320642][ T26] audit: type=1326 audit(1741184825.541:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 333.417060][ T6918] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 333.431825][ T6918] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.722655][ T26] audit: type=1326 audit(1741184825.634:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 334.836476][ T26] audit: type=1326 audit(1741184825.634:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 334.882312][ T26] audit: type=1326 audit(1741184825.634:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6362b169 code=0x7ffc0000 [ 334.905543][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.999378][ T6937] loop5: detected capacity change from 0 to 4096 [ 335.440952][ T6946] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.916621][ T6943] loop3: detected capacity change from 0 to 2048 [ 336.124276][ T6943] EXT4-fs (loop3): Ignoring removed bh option [ 336.234431][ T6943] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 336.576457][ T6943] EXT4-fs (loop3): Ignoring removed nobh option [ 336.763620][ T6943] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,nodiscard,norecovery,nobh,,errors=continue. Quota mode: none. [ 336.915473][ T6943] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #15: comm syz.3.606: inline data xattr refers to an external xattr inode [ 338.274150][ T6975] loop5: detected capacity change from 0 to 2048 [ 339.226683][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 343.323498][ T7011] sp0: Synchronizing with TNC [ 344.329150][ T7025] bridge0: port 2(erspan0) entered blocking state [ 344.335915][ T7025] bridge0: port 2(erspan0) entered disabled state [ 344.350340][ T7025] device erspan0 entered promiscuous mode [ 344.358193][ T7025] bridge0: port 2(erspan0) entered blocking state [ 344.364889][ T7025] bridge0: port 2(erspan0) entered forwarding state [ 344.945501][ T7026] loop2: detected capacity change from 0 to 2048 [ 345.123425][ T7030] loop1: detected capacity change from 0 to 1024 [ 345.633816][ T7030] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 345.641850][ T7030] EXT4-fs (loop1): write access will be enabled during recovery [ 345.666634][ T7030] JBD2: no valid journal superblock found [ 345.672617][ T7030] EXT4-fs (loop1): error loading journal [ 346.050531][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 346.323315][ T7043] loop2: detected capacity change from 0 to 256 [ 346.347536][ T4209] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 346.504499][ T7043] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.625696][ T4209] usb 6-1: Using ep0 maxpacket: 16 [ 346.754472][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 346.834222][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 347.350933][ T7048] loop4: detected capacity change from 0 to 512 [ 347.459801][ T4209] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 347.476055][ T4209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.519281][ T4209] usb 6-1: Product: syz [ 347.530095][ T4209] usb 6-1: Manufacturer: syz [ 347.558170][ T4209] usb 6-1: SerialNumber: syz [ 347.586801][ T4209] usb 6-1: config 0 descriptor?? [ 347.663306][ T4209] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 347.760836][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.082026][ T7048] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 348.226130][ T4209] usb 6-1: USB disconnect, device number 3 [ 348.245489][ T7048] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.607764][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.110005][ T7077] loop1: detected capacity change from 0 to 256 [ 351.771153][ T7088] bridge0: port 1(erspan0) entered blocking state [ 351.779005][ T7088] bridge0: port 1(erspan0) entered disabled state [ 351.807132][ T7088] device erspan0 entered promiscuous mode [ 351.819952][ T7088] bridge0: port 1(erspan0) entered blocking state [ 351.826485][ T7088] bridge0: port 1(erspan0) entered forwarding state [ 352.987571][ T7087] loop4: detected capacity change from 0 to 2048 [ 354.439372][ T7098] loop4: detected capacity change from 0 to 2048 [ 354.470437][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 354.654659][ T7104] usb usb1: usbfs: process 7104 (syz.1.647) did not claim interface 0 before use [ 354.675341][ T7098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.803865][ T4248] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 355.798050][ T4248] usb 3-1: Using ep0 maxpacket: 16 [ 356.003356][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 356.192269][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 357.316434][ T4248] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 357.331886][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.110952][ T4248] usb 3-1: Product: syz [ 358.139372][ T4248] usb 3-1: Manufacturer: syz [ 358.146888][ T7129] loop5: detected capacity change from 0 to 2048 [ 358.185824][ T4248] usb 3-1: SerialNumber: syz [ 358.243383][ T4248] usb 3-1: config 0 descriptor?? [ 358.289165][ T4248] usb 3-1: can't set config #0, error -71 [ 358.428933][ T7139] loop4: detected capacity change from 0 to 2048 [ 358.482050][ T4248] usb 3-1: USB disconnect, device number 4 [ 358.669122][ T7129] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 359.802131][ T7155] loop4: detected capacity change from 0 to 256 [ 362.307117][ T7171] loop4: detected capacity change from 0 to 512 [ 363.607206][ T7171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 363.835524][ T7184] netlink: 'syz.5.667': attribute type 7 has an invalid length. [ 363.859734][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.5.667'. [ 363.884240][ T7171] EXT4-fs (loop4): 1 truncate cleaned up [ 363.896973][ T7171] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 363.913355][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 363.919749][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.690580][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 365.868613][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 366.291701][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 366.302691][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 368.530753][ T21] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 368.552009][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.575196][ T21] usb 3-1: config 0 descriptor?? [ 369.060687][ T21] usb 3-1: can't set config #0, error -71 [ 369.069672][ T21] usb 3-1: USB disconnect, device number 5 [ 369.312810][ T26] audit: type=1326 audit(1741184860.213:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 370.523574][ T26] audit: type=1326 audit(1741184860.213:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 370.649062][ T26] audit: type=1326 audit(1741184860.213:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 370.675083][ T26] audit: type=1326 audit(1741184860.213:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d0d0169 code=0x7ffc0000 [ 370.718966][ T7271] loop2: detected capacity change from 0 to 512 [ 370.874225][ T7271] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 370.887645][ T7273] loop4: detected capacity change from 0 to 2048 [ 370.955297][ T7271] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.682: invalid block [ 371.033818][ T7271] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.682: couldn't read orphan inode 11 (err -117) [ 371.046793][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,noinit_itable,bsddf,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,usrquota,noauto_da_alloc,journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 371.390034][ T7285] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2840 [ 374.475696][ T7292] loop4: detected capacity change from 0 to 512 [ 374.771268][ T7292] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 374.874204][ T7292] EXT4-fs (loop4): mount failed [ 381.964091][ T7344] loop2: detected capacity change from 0 to 256 [ 382.337644][ T7344] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 384.618639][ T7369] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 385.512791][ T7372] loop1: detected capacity change from 0 to 256 [ 386.342122][ T7372] exfat: Deprecated parameter 'utf8' [ 386.347824][ T7372] exfat: Deprecated parameter 'namecase' [ 386.354425][ T7372] exfat: Deprecated parameter 'namecase' [ 386.380309][ T7372] exfat: Deprecated parameter 'utf8' [ 386.554207][ T7382] netem: incorrect gi model size [ 386.560555][ T7382] netem: change failed [ 387.355443][ T7370] loop2: detected capacity change from 0 to 512 [ 387.643554][ T7372] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 388.141141][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.149777][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.233744][ T7370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.340306][ T7370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 388.446774][ T7370] System zones: 1-12 [ 388.489808][ T7370] EXT4-fs: error -4 creating inode table initialization thread [ 388.563795][ T7370] EXT4-fs (loop2): mount failed [ 389.160539][ T7394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.256840][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 391.456717][ T7413] orangefs_mount: mount request failed with -4 [ 391.633866][ T7414] loop5: detected capacity change from 0 to 4096 [ 391.721416][ T7410] loop1: detected capacity change from 0 to 8192 [ 391.735167][ T7420] loop2: detected capacity change from 0 to 2048 [ 391.918251][ T7422] overlayfs: failed to clone upperpath [ 392.935594][ T7420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.408164][ T7438] loop1: detected capacity change from 0 to 40427 [ 394.670227][ T7438] F2FS-fs (loop1): invalid crc value [ 395.201279][ T7438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 395.246064][ T7438] F2FS-fs (loop1): Start checkpoint disabled! [ 395.356742][ T7438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 398.003241][ T4289] attempt to access beyond end of device [ 398.003241][ T4289] loop1: rw=2049, want=45112, limit=40427 [ 398.248739][ T7473] kvm [7470]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x71 [ 398.299205][ T7473] kvm [7470]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4071 [ 398.432367][ T7483] trusted_key: encrypted_key: insufficient parameters specified [ 400.304267][ T26] audit: type=1326 audit(1741184889.201:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9969ddd169 code=0x7ffc0000 [ 400.304312][ T26] audit: type=1326 audit(1741184889.201:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9969ddd169 code=0x7ffc0000 [ 400.304344][ T26] audit: type=1326 audit(1741184889.201:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f9969ddd169 code=0x7ffc0000 [ 400.304375][ T26] audit: type=1326 audit(1741184889.201:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9969ddd169 code=0x7ffc0000 [ 400.304406][ T26] audit: type=1326 audit(1741184889.201:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9969ddd169 code=0x7ffc0000 [ 400.822275][ T7504] loop5: detected capacity change from 0 to 1024 [ 400.925680][ T7504] EXT4-fs (loop5): inline encryption not supported [ 400.986711][ T7504] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 401.000449][ T7504] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 401.991637][ T7504] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,sysvgroups,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none. [ 403.705219][ T7510] Set syz1 is full, maxelem 65536 reached [ 403.847180][ T7523] loop2: detected capacity change from 0 to 4096 [ 405.183563][ T7531] trusted_key: encrypted_key: insufficient parameters specified [ 405.695722][ T7523] ntfs3: loop2: ino=3, Correct links count -> 2. [ 406.867665][ T26] audit: type=1326 audit(1741184895.328:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 406.890107][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.183879][ T26] audit: type=1326 audit(1741184895.328:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 408.206508][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.244783][ T26] audit: type=1326 audit(1741184895.346:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 408.290171][ T26] audit: type=1326 audit(1741184895.346:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 408.312979][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.335643][ T26] audit: type=1326 audit(1741184895.346:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7b8cd169 code=0x7ffc0000 [ 409.843391][ T7575] tipc: Started in network mode [ 409.868076][ T7575] tipc: Node identity ffffffff, cluster identity 4711 [ 409.887903][ T7575] tipc: Node number set to 4294967295 [ 410.842442][ T7582] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 410.909637][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.130106][ T7582] bond0: (slave rose0): Enslaving as an active interface with an up link [ 411.163453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 411.236849][ T7593] loop4: detected capacity change from 0 to 64 [ 411.410137][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 412.546212][ T7615] netlink: 892 bytes leftover after parsing attributes in process `syz.3.764'. [ 412.629410][ T4248] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 412.632096][ T7617] loop2: detected capacity change from 0 to 4096 [ 412.971958][ T7621] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 413.085539][ T7617] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 413.222131][ T7617] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,discard,init_itable,nojournal_checksum,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 413.632915][ T4248] usb 2-1: Using ep0 maxpacket: 16 [ 413.817651][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 413.927840][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 414.346897][ T4248] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 414.357475][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.375151][ T4248] usb 2-1: Product: syz [ 414.381606][ T4248] usb 2-1: Manufacturer: syz [ 414.403944][ T4248] usb 2-1: SerialNumber: syz [ 414.438747][ T4248] usb 2-1: config 0 descriptor?? [ 414.511829][ T4248] usb 2-1: can't set config #0, error -71 [ 414.544081][ T4248] usb 2-1: USB disconnect, device number 3 [ 414.649707][ T26] audit: type=1326 audit(1741184902.605:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 414.713692][ T26] audit: type=1326 audit(1741184902.614:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 414.762472][ T26] audit: type=1326 audit(1741184902.614:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 414.840558][ T26] audit: type=1326 audit(1741184902.614:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a5a25169 code=0x7ffc0000 [ 422.093053][ T7706] loop5: detected capacity change from 0 to 2048 [ 422.219774][ T7706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.781635][ T7745] loop2: detected capacity change from 0 to 128 [ 427.245136][ T7795] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 427.814840][ T7800] loop2: detected capacity change from 0 to 40427 [ 427.868527][ T7800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 427.876397][ T7800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 427.889951][ T7800] F2FS-fs (loop2): invalid crc value [ 427.955233][ T7800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 428.004102][ T7800] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 428.011665][ T7800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 429.286414][ T4276] attempt to access beyond end of device [ 429.286414][ T4276] loop5: rw=1, want=2049, limit=2048 [ 429.481606][ T4276] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 429.688197][ T4276] attempt to access beyond end of device [ 429.688197][ T4276] loop5: rw=1, want=2049, limit=2048 [ 429.938488][ T4276] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 430.167211][ T4276] attempt to access beyond end of device [ 430.167211][ T4276] loop5: rw=1, want=2049, limit=2048 [ 430.222141][ T4276] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 430.287357][ T7833] vivid-008: disconnect [ 430.300478][ T7833] vivid-008: reconnect [ 430.913352][ T4276] attempt to access beyond end of device [ 430.913352][ T4276] loop5: rw=1, want=2049, limit=2048 [ 431.012180][ T7827] ALSA: mixer_oss: invalid OSS volume '' [ 431.105435][ T4276] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 431.295989][ T4276] attempt to access beyond end of device [ 431.295989][ T4276] loop5: rw=1, want=2049, limit=2048 [ 431.308022][ T4276] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 431.317881][ T4276] attempt to access beyond end of device [ 431.317881][ T4276] loop5: rw=1, want=2050, limit=2048 [ 431.329524][ T4276] Buffer I/O error on dev loop5, logical block 2049, lost async page write [ 431.342914][ T4276] attempt to access beyond end of device [ 431.342914][ T4276] loop5: rw=1, want=2050, limit=2048 [ 431.362502][ T4276] Buffer I/O error on dev loop5, logical block 2049, lost async page write [ 431.376441][ T4276] attempt to access beyond end of device [ 431.376441][ T4276] loop5: rw=1, want=2050, limit=2048 [ 431.398557][ T4276] Buffer I/O error on dev loop5, logical block 2049, lost async page write [ 431.411782][ T4276] attempt to access beyond end of device [ 431.411782][ T4276] loop5: rw=1, want=2050, limit=2048 [ 431.545822][ T4276] Buffer I/O error on dev loop5, logical block 2049, lost async page write [ 431.621992][ T4276] attempt to access beyond end of device [ 431.621992][ T4276] loop5: rw=1, want=2050, limit=2048 [ 431.789881][ T4276] Buffer I/O error on dev loop5, logical block 2049, lost async page write [ 432.654346][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 435.191363][ T4276] ------------[ cut here ]------------ [ 435.211634][ T4276] WARNING: CPU: 1 PID: 4276 at fs/udf/truncate.c:208 udf_truncate_extents+0xf90/0x11a0 [ 435.221866][ T4276] Modules linked in: [ 435.225877][ T4276] CPU: 1 PID: 4276 Comm: kworker/u4:8 Not tainted 5.15.178-syzkaller #0 [ 435.240289][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 435.272056][ T4276] Workqueue: writeback wb_workfn (flush-7:5) [ 435.289063][ T4276] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 436.011772][ T4276] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 9c 6a 99 fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 80 6a 99 fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 436.141448][ T7885] loop4: detected capacity change from 0 to 16 [ 436.328939][ T7885] erofs: (device loop4): mounted with root inode @ nid 36. [ 436.513320][ T4276] RSP: 0018:ffffc9000332e5a0 EFLAGS: 00010293 [ 436.519465][ T4276] RAX: ffffffff82e71b10 RBX: 1ffff92000665ccc RCX: ffff888077c40000 [ 436.527794][ T4276] RDX: 0000000000000000 RSI: 0000008001da13fb RDI: 0000000000000000 [ 436.535956][ T4276] RBP: ffffc9000332e790 R08: ffffffff82e7100b R09: ffffffff82e4fb6b [ 436.544106][ T4276] R10: 0000000000000002 R11: ffff888077c40000 R12: dffffc0000000000 [ 436.581388][ T4276] R13: 0000008001da13fb R14: 0000000000000000 R15: 00000000000000ff [ 436.589666][ T4276] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 436.598859][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.605460][ T4276] CR2: 0000001b30610ff8 CR3: 0000000063771000 CR4: 00000000003506f0 [ 436.624396][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.645144][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.660948][ T4276] Call Trace: [ 436.667907][ T4276] [ 436.672200][ T4276] ? __warn+0x15b/0x300 [ 436.692234][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 436.708433][ T4276] ? report_bug+0x1b7/0x2e0 [ 436.724122][ T4276] ? handle_bug+0x3d/0x70 [ 436.734926][ T4276] ? exc_invalid_op+0x16/0x40 [ 436.752538][ T4276] ? asm_exc_invalid_op+0x16/0x20 [ 436.786657][ T4276] ? udf_current_aext+0x3ab/0xa50 [ 436.801127][ T4276] ? udf_truncate_extents+0x48b/0x11a0 [ 436.819575][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 436.832573][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 436.850805][ T4276] ? udf_discard_prealloc+0x860/0x860 [ 436.889521][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 436.894723][ T4276] ? do_raw_spin_lock+0x14a/0x370 [ 436.908856][ T4276] ? do_raw_spin_unlock+0x137/0x8b0 [ 436.914215][ T4276] udf_do_extend_file+0xdc9/0x1140 [ 436.920889][ T4276] ? udf_current_aext+0x5f9/0xa50 [ 436.926292][ T4276] ? udf_write_failed+0x1b0/0x1b0 [ 436.934034][ T4276] ? udf_next_aext+0x371/0x430 [ 436.938888][ T4276] udf_get_block+0x1727/0x5360 [ 436.943838][ T4276] ? udf_bread+0x600/0x600 [ 436.948382][ T4276] ? rcu_lock_acquire+0x30/0x30 [ 436.953809][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 436.959183][ T4276] ? reacquire_held_locks+0x660/0x660 [ 436.965156][ T4276] ? reacquire_held_locks+0x660/0x660 [ 436.970642][ T4276] ? __unlock_page_memcg+0xfd/0x110 [ 436.976178][ T4276] ? __lock_acquire+0x1295/0x1ff0 [ 436.982536][ T4276] __mpage_writepage+0x4f9/0x1c00 [ 436.988170][ T4276] ? mpage_writepages+0x2f0/0x2f0 [ 436.993371][ T4276] ? wait_on_page_writeback+0x1a0/0x1a0 [ 436.999047][ T4276] write_cache_pages+0xa97/0x1160 [ 437.004366][ T4276] ? mpage_writepages+0x2f0/0x2f0 [ 437.009499][ T4276] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 437.015253][ T4276] ? mark_lock+0x98/0x340 [ 437.019614][ T4276] ? udf_bread+0x600/0x600 [ 437.024053][ T4276] mpage_writepages+0x13c/0x2f0 [ 437.035960][ T4276] ? clean_buffers+0x2a0/0x2a0 [ 437.040931][ T4276] ? udf_bread+0x600/0x600 [ 437.045578][ T4276] ? udf_readpage+0x20/0x20 [ 437.061154][ T4276] do_writepages+0x481/0x730 [ 437.065837][ T4276] ? __writepage+0x120/0x120 [ 437.070568][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 437.076047][ T4276] ? writeback_sb_inodes+0x732/0x1a40 [ 437.087488][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.093534][ T4276] ? do_raw_spin_lock+0x14a/0x370 [ 437.099933][ T4276] __writeback_single_inode+0x15b/0xe30 [ 437.111254][ T4276] writeback_sb_inodes+0xbce/0x1a40 [ 437.116764][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.126372][ T4276] ? queue_io+0x560/0x560 [ 437.130833][ T4276] ? __writeback_inodes_wb+0x400/0x400 [ 437.137907][ T4276] ? queue_io+0x3d3/0x560 [ 437.155077][ T4276] wb_writeback+0x451/0xc50 [ 437.159653][ T4276] ? rcu_lock_release+0x20/0x20 [ 437.169345][ T4276] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.177303][ T4276] ? do_raw_spin_unlock+0x137/0x8b0 [ 437.182654][ T4276] wb_workfn+0x46c/0x1130 [ 437.191871][ T4276] ? mark_lock+0x98/0x340 [ 437.197655][ T4276] ? inode_wait_for_writeback+0x280/0x280 [ 437.203415][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 437.214979][ T4276] ? preempt_schedule+0xd9/0xe0 [ 437.221260][ T4276] ? schedule_preempt_disabled+0x20/0x20 [ 437.226950][ T4276] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.238326][ T4276] ? print_irqtrace_events+0x210/0x210 [ 437.245696][ T4276] ? preempt_schedule_thunk+0x16/0x18 [ 437.255732][ T4276] process_one_work+0x8a1/0x10c0 [ 437.263358][ T4276] ? worker_detach_from_pool+0x260/0x260 [ 437.269117][ T4276] ? _raw_spin_lock_irqsave+0x120/0x120 [ 437.280300][ T4276] ? kthread_data+0x4e/0xc0 [ 437.287132][ T4276] ? wq_worker_running+0x97/0x170 [ 437.292292][ T4276] worker_thread+0xaca/0x1280 [ 437.301912][ T4276] kthread+0x3f6/0x4f0 [ 437.307471][ T4276] ? rcu_lock_release+0x20/0x20 [ 437.312374][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 437.322505][ T4276] ret_from_fork+0x1f/0x30 [ 437.328595][ T4276] [ 437.331883][ T4276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.339261][ T4276] CPU: 1 PID: 4276 Comm: kworker/u4:8 Not tainted 5.15.178-syzkaller #0 [ 437.347687][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.358067][ T4276] Workqueue: writeback wb_workfn (flush-7:5) [ 437.364260][ T4276] Call Trace: [ 437.367892][ T4276] [ 437.370956][ T4276] dump_stack_lvl+0x1e3/0x2d0 [ 437.375649][ T4276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 437.381400][ T4276] ? panic+0x860/0x860 [ 437.385514][ T4276] ? udf_truncate_extents+0xf80/0x11a0 [ 437.391145][ T4276] ? udf_truncate_extents+0xf80/0x11a0 [ 437.396683][ T4276] panic+0x318/0x860 [ 437.400713][ T4276] ? __warn+0x16a/0x300 [ 437.404889][ T4276] ? fb_is_primary_device+0xd0/0xd0 [ 437.410177][ T4276] ? ret_from_fork+0x1f/0x30 [ 437.414984][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 437.420455][ T4276] __warn+0x2b2/0x300 [ 437.424460][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 437.429942][ T4276] report_bug+0x1b7/0x2e0 [ 437.434291][ T4276] handle_bug+0x3d/0x70 [ 437.438473][ T4276] exc_invalid_op+0x16/0x40 [ 437.442988][ T4276] asm_exc_invalid_op+0x16/0x20 [ 437.447861][ T4276] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 437.454224][ T4276] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 9c 6a 99 fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 80 6a 99 fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 437.474202][ T4276] RSP: 0018:ffffc9000332e5a0 EFLAGS: 00010293 [ 437.480280][ T4276] RAX: ffffffff82e71b10 RBX: 1ffff92000665ccc RCX: ffff888077c40000 [ 437.488281][ T4276] RDX: 0000000000000000 RSI: 0000008001da13fb RDI: 0000000000000000 [ 437.496267][ T4276] RBP: ffffc9000332e790 R08: ffffffff82e7100b R09: ffffffff82e4fb6b [ 437.504266][ T4276] R10: 0000000000000002 R11: ffff888077c40000 R12: dffffc0000000000 [ 437.512343][ T4276] R13: 0000008001da13fb R14: 0000000000000000 R15: 00000000000000ff [ 437.520338][ T4276] ? udf_current_aext+0x3ab/0xa50 [ 437.525376][ T4276] ? udf_truncate_extents+0x48b/0x11a0 [ 437.530843][ T4276] ? udf_truncate_extents+0xf90/0x11a0 [ 437.536514][ T4276] ? udf_discard_prealloc+0x860/0x860 [ 437.541921][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.547043][ T4276] ? do_raw_spin_lock+0x14a/0x370 [ 437.552098][ T4276] ? do_raw_spin_unlock+0x137/0x8b0 [ 437.557339][ T4276] udf_do_extend_file+0xdc9/0x1140 [ 437.562481][ T4276] ? udf_current_aext+0x5f9/0xa50 [ 437.567725][ T4276] ? udf_write_failed+0x1b0/0x1b0 [ 437.572764][ T4276] ? udf_next_aext+0x371/0x430 [ 437.577717][ T4276] udf_get_block+0x1727/0x5360 [ 437.582922][ T4276] ? udf_bread+0x600/0x600 [ 437.587611][ T4276] ? rcu_lock_acquire+0x30/0x30 [ 437.592552][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.597609][ T4276] ? reacquire_held_locks+0x660/0x660 [ 437.602996][ T4276] ? reacquire_held_locks+0x660/0x660 [ 437.608836][ T4276] ? __unlock_page_memcg+0xfd/0x110 [ 437.614255][ T4276] ? __lock_acquire+0x1295/0x1ff0 [ 437.619611][ T4276] __mpage_writepage+0x4f9/0x1c00 [ 437.624674][ T4276] ? mpage_writepages+0x2f0/0x2f0 [ 437.629764][ T4276] ? wait_on_page_writeback+0x1a0/0x1a0 [ 437.635418][ T4276] write_cache_pages+0xa97/0x1160 [ 437.640544][ T4276] ? mpage_writepages+0x2f0/0x2f0 [ 437.645607][ T4276] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 437.651466][ T4276] ? mark_lock+0x98/0x340 [ 437.656174][ T4276] ? udf_bread+0x600/0x600 [ 437.661155][ T4276] mpage_writepages+0x13c/0x2f0 [ 437.666019][ T4276] ? clean_buffers+0x2a0/0x2a0 [ 437.670799][ T4276] ? udf_bread+0x600/0x600 [ 437.675395][ T4276] ? udf_readpage+0x20/0x20 [ 437.680004][ T4276] do_writepages+0x481/0x730 [ 437.684607][ T4276] ? __writepage+0x120/0x120 [ 437.689259][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 437.694632][ T4276] ? writeback_sb_inodes+0x732/0x1a40 [ 437.700131][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.705334][ T4276] ? do_raw_spin_lock+0x14a/0x370 [ 437.710530][ T4276] __writeback_single_inode+0x15b/0xe30 [ 437.716137][ T4276] writeback_sb_inodes+0xbce/0x1a40 [ 437.721338][ T4276] ? __lock_acquire+0x1ff0/0x1ff0 [ 437.726556][ T4276] ? queue_io+0x560/0x560 [ 437.731294][ T4276] ? __writeback_inodes_wb+0x400/0x400 [ 437.736975][ T4276] ? queue_io+0x3d3/0x560 [ 437.741438][ T4276] wb_writeback+0x451/0xc50 [ 437.745968][ T4276] ? rcu_lock_release+0x20/0x20 [ 437.750840][ T4276] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.758112][ T4276] ? do_raw_spin_unlock+0x137/0x8b0 [ 437.763487][ T4276] wb_workfn+0x46c/0x1130 [ 437.768297][ T4276] ? mark_lock+0x98/0x340 [ 437.772901][ T4276] ? inode_wait_for_writeback+0x280/0x280 [ 437.778665][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 437.784038][ T4276] ? preempt_schedule+0xd9/0xe0 [ 437.789598][ T4276] ? schedule_preempt_disabled+0x20/0x20 [ 437.796494][ T4276] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.803168][ T4276] ? print_irqtrace_events+0x210/0x210 [ 437.809009][ T4276] ? preempt_schedule_thunk+0x16/0x18 [ 437.814833][ T4276] process_one_work+0x8a1/0x10c0 [ 437.819787][ T4276] ? worker_detach_from_pool+0x260/0x260 [ 437.825440][ T4276] ? _raw_spin_lock_irqsave+0x120/0x120 [ 437.830997][ T4276] ? kthread_data+0x4e/0xc0 [ 437.835605][ T4276] ? wq_worker_running+0x97/0x170 [ 437.840884][ T4276] worker_thread+0xaca/0x1280 [ 437.845803][ T4276] kthread+0x3f6/0x4f0 [ 437.849987][ T4276] ? rcu_lock_release+0x20/0x20 [ 437.854840][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 437.859455][ T4276] ret_from_fork+0x1f/0x30 [ 437.863898][ T4276] [ 437.867261][ T4276] Kernel Offset: disabled [ 437.871965][ T4276] Rebooting in 86400 seconds..