last executing test programs: 2m50.364002089s ago: executing program 0 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 2m47.784424283s ago: executing program 0 (id=28): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) 2m47.734769052s ago: executing program 0 (id=29): socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000000000000aaaa8ad8ad70569d5c4b00000000000690780a210104ac1414aa44140a02ac1414bb0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 2m47.522437383s ago: executing program 0 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m45.629549395s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x700, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) 2m36.177041098s ago: executing program 0 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x8}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m21.048917617s ago: executing program 32 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x8}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m19.737822319s ago: executing program 1 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m18.64857689s ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x6, &(0x7f0000000480)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f00000004c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xc, 0xf3a, 0xffff7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r0], &(0x7f00000006c0)=[{0x456a, 0x4, 0x6, 0xc}, {0x4, 0x5, 0x2, 0xa}, {0x4, 0x1, 0x5, 0x9}, {0x3, 0x3, 0x1, 0x4}], 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000800)='mr_alloc\x00', r2, 0x0, 0x6}, 0x14) chdir(0x0) getresuid(&(0x7f0000000300), &(0x7f00000003c0), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r4, &(0x7f0000007700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r5) ppoll(&(0x7f0000000440)=[{r2, 0x10}, {r3, 0x1081}, {r1, 0x4354}], 0x3, &(0x7f0000000840), &(0x7f0000000880)={[0x5]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m18.485669111s ago: executing program 1 (id=151): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) 2m16.628698873s ago: executing program 1 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 2m16.458529483s ago: executing program 1 (id=163): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x4}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x29f, 0x40}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0x3, [0x21, 0x31, 0xd, 0x15, 0x19, 0x1f, 0xa, 0x3e, 0x1, 0x25, 0x11, 0x27, 0x52, 0x21, 0x26, 0x40], 0x2, 0x3, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 2m15.353926385s ago: executing program 1 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 2m15.147900635s ago: executing program 33 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1m6.874519173s ago: executing program 5 (id=417): io_setup(0xb, &(0x7f0000000280)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x8, 0x7, 0x5, r1, 0x0, 0x0, 0xfffffffffffffffd}]) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x30, 0x2, 'u\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x82, 0x2, "3ac3"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000fc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x84, 0x2, "a5bc"}, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}}, 0x0) io_uring_setup(0x1329, &(0x7f0000000c40)={0x0, 0xe394, 0x0, 0x0, 0xfffffffe}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m6.005630854s ago: executing program 5 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a00000000020000000000001800098008"], 0x34}], 0x1, 0x0, 0x0, 0x54}, 0x4000000) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x86, 0x4, 0x5, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r13}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000780)={[&(0x7f00000001c0)='\\@@\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000440)='GPL\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='+%$\\{}\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\\\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='sched_switch\x00']}, &(0x7f0000000700)={[&(0x7f0000000680)='^$\x00']}, 0x800) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 53.384061611s ago: executing program 5 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 53.010809821s ago: executing program 5 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r1 = dup(r0) write$FUSE_OPEN(r1, &(0x7f0000000280)={0x20}, 0x20) write$FUSE_DIRENTPLUS(r1, 0x0, 0x1f8) write$FUSE_LSEEK(r1, &(0x7f00000003c0)={0x18}, 0x18) r2 = io_uring_setup(0x2624, &(0x7f0000000280)={0x0, 0xfffffffc, 0x800}) r3 = epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) 52.939313671s ago: executing program 5 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x3, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) 50.965832084s ago: executing program 5 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 43.702769003s ago: executing program 2 (id=497): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 43.532401974s ago: executing program 2 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="28010000170001"], 0x128}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) 43.389654664s ago: executing program 2 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c59900dfd553cc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 43.206822574s ago: executing program 2 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x2304000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.907771194s ago: executing program 2 (id=506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x2304000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.510687495s ago: executing program 2 (id=507): ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 35.788770484s ago: executing program 34 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 27.362262044s ago: executing program 35 (id=507): ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 10.498836307s ago: executing program 6 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 9.547425128s ago: executing program 6 (id=578): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) io_setup(0x1, &(0x7f0000000140)) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="a2bf4c1a746ee4aaf507d9e1b85b158bb2c4fcca8fa7e93d3bc9ffbae6ab2ec646206361a21ab57f65aa13f4cd17e197868a0af8bc07f7535f0d1788004eca30c5654ac77c0c764af45154180cd676b0d1b368e5b8172153539731e7", 0x5c}], 0x1, &(0x7f0000000140)}, 0x40000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 3.746844515s ago: executing program 6 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.678424475s ago: executing program 3 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 3.598790865s ago: executing program 6 (id=584): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000700)=""/150, 0x96}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/151, 0x97}], 0x4) 3.524709765s ago: executing program 3 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.568325326s ago: executing program 4 (id=586): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)={0x2, 0x17, 0x9, 0x0, 0xb, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0xe, 0x9}, @sadb_lifetime={0x4, 0x2, 0x6, 0xc, 0xb11, 0x6}, @sadb_lifetime={0x4, 0x2, 0x6, 0x828, 0x1, 0x9}]}, 0x58}}, 0x40084) 2.309121977s ago: executing program 3 (id=587): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000003c0)=0x1e) 1.478825648s ago: executing program 4 (id=588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x1}, {0x1, 0xff, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 1.438591758s ago: executing program 3 (id=589): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000148000604"], 0x0) 1.331055558s ago: executing program 4 (id=590): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.158772738s ago: executing program 3 (id=591): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.124965848s ago: executing program 4 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.112708568s ago: executing program 6 (id=593): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{0x0}], 0x1, &(0x7f0000001880)}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x67e, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4c}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x2c}}, 0x0) 1.048928709s ago: executing program 3 (id=594): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@discard_unit_section}, {@checkpoint_diasble}, {@background_gc_on}, {@nouser_xattr}, {@data_flush}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) 794.832409ms ago: executing program 4 (id=595): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000002200)=""/4110, 0x29, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x28) 49.70168ms ago: executing program 6 (id=596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x81, 0x6, 0x2, 0x8, 0x197}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xcd, &(0x7f0000000140)=""/205, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x81, 0xe8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x2, 0x1, 0x6}, {0x2, 0x3, 0xe}], 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, r3, 0x8, 0x21, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffc3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) 0s ago: executing program 4 (id=597): mmap(&(0x7f0000092000/0x4000)=nil, 0x4000, 0xb635773f05ebbee4, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) add_key$fscrypt_provisioning(&(0x7f0000000300), 0x0, 0x0, 0x11, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x526, &(0x7f0000001b40)="$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") setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) kernel console output (not intermixed with test programs): e team_slave_1 added [ 34.885129][ T4295] team0: Port device team_slave_0 added [ 34.903084][ T4307] team0: Port device team_slave_0 added [ 34.913333][ T4295] team0: Port device team_slave_1 added [ 34.923383][ T4301] team0: Port device team_slave_0 added [ 34.931160][ T4307] team0: Port device team_slave_1 added [ 34.944563][ T4301] team0: Port device team_slave_1 added [ 34.950761][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.952275][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.957596][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.961422][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.962743][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.968207][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.971640][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.973045][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.978456][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.992296][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.993673][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.999790][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.020975][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.022416][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.028939][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.035419][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.038265][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.040498][ T4305] device bridge_slave_0 entered promiscuous mode [ 35.043238][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.044804][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.047809][ T4305] device bridge_slave_1 entered promiscuous mode [ 35.049915][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.051576][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.057904][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.060912][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.062361][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.069305][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.085214][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.086526][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.093017][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.112295][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.168815][ T4296] device hsr_slave_0 entered promiscuous mode [ 35.207140][ T4296] device hsr_slave_1 entered promiscuous mode [ 35.288660][ T4295] device hsr_slave_0 entered promiscuous mode [ 35.327114][ T4295] device hsr_slave_1 entered promiscuous mode [ 35.366918][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.368684][ T4295] Cannot create hsr debugfs directory [ 35.371338][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.458436][ T4307] device hsr_slave_0 entered promiscuous mode [ 35.508099][ T4307] device hsr_slave_1 entered promiscuous mode [ 35.546796][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.548411][ T4307] Cannot create hsr debugfs directory [ 35.563458][ T4305] team0: Port device team_slave_0 added [ 35.628417][ T4301] device hsr_slave_0 entered promiscuous mode [ 35.667567][ T4301] device hsr_slave_1 entered promiscuous mode [ 35.706854][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.708504][ T4301] Cannot create hsr debugfs directory [ 35.716083][ T4305] team0: Port device team_slave_1 added [ 35.775402][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.782096][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.787545][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.801271][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.802690][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.808306][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.938614][ T4305] device hsr_slave_0 entered promiscuous mode [ 35.977807][ T4305] device hsr_slave_1 entered promiscuous mode [ 36.017442][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.018980][ T4305] Cannot create hsr debugfs directory [ 36.081477][ T4295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.118806][ T4295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.160910][ T4295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.198684][ T4295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.292333][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.309820][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.337703][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 36.339240][ T4299] Bluetooth: hci4: command 0x0409 tx timeout [ 36.340644][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 36.342034][ T4299] Bluetooth: hci3: command 0x0409 tx timeout [ 36.342945][ T4297] Bluetooth: hci1: command 0x0409 tx timeout [ 36.355504][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.395105][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.463319][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.475093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.478107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.484903][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.511844][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.518886][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.558950][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.618895][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.667261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.669841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.671908][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.673493][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.678977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.694315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.697322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.699637][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.701143][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.712756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.725276][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.749710][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.799169][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.843659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.846054][ T4305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.900391][ T4305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.952849][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.004039][ T4305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.048723][ T4305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.092561][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.095143][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.104466][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.133941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.136278][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.142253][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.144301][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.165852][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.174775][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.177979][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.180221][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.242922][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.260083][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.278285][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.286106][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.289514][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.293460][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.314329][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.316074][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.319406][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.321599][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.323107][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.324896][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.332012][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.334811][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.337554][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.339504][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.340996][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.353004][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.355223][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.359151][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.369393][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.374998][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.378411][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.380716][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.382561][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.384665][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.386487][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.388160][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.391302][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.412683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.414935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.417837][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.419294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.421256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.424597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.427164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.429341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.431294][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.432725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.434565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.439171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.441374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.443416][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.444870][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.448155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.450194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.462346][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.464716][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.467759][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.469579][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.471247][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.473493][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.475978][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.479939][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.491373][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.492944][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.495716][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.498347][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.500513][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.505041][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.517997][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.524012][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.527605][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.530976][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.533187][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.535231][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.536838][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.540042][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.542268][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.561209][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.563471][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.565734][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.575033][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.578765][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.580791][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.582330][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.584212][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.592663][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.595033][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.598841][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.620163][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.622393][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.624596][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.631308][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.633830][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.635877][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.640969][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.658493][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.662377][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.664486][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.668090][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.670206][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.672430][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.674583][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.677878][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.680349][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.682377][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.696598][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.699689][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.701764][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.703815][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.712940][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.715350][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.718155][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.719766][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.730670][ T4296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.733510][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.742952][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.745284][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.750398][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.752676][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.761289][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.771109][ T4295] device veth0_vlan entered promiscuous mode [ 37.787343][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.800022][ T4295] device veth1_vlan entered promiscuous mode [ 37.826229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.831858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.834087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.872760][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.875018][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.877839][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.899158][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.900805][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.912665][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.915540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.917933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.921322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.923338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.925249][ T4301] device veth0_vlan entered promiscuous mode [ 37.938748][ T4295] device veth0_macvtap entered promiscuous mode [ 37.944379][ T4295] device veth1_macvtap entered promiscuous mode [ 37.960992][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.963744][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.965680][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.968264][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.976125][ T4301] device veth1_vlan entered promiscuous mode [ 37.984915][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.003599][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.015982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.018402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.020448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.022549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.024604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.026207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.037718][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.041450][ T4295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.043224][ T4295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.045065][ T4295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.048694][ T4295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.056323][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.060814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.063011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.081457][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.083917][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.124690][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.127452][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.129584][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.132883][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.139823][ T4307] device veth0_vlan entered promiscuous mode [ 38.157230][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.159374][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.171096][ T4301] device veth0_macvtap entered promiscuous mode [ 38.182920][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.185189][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.188656][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.215659][ T4301] device veth1_macvtap entered promiscuous mode [ 38.220943][ T4307] device veth1_vlan entered promiscuous mode [ 38.232778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.234868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.237179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.240235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.242470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.244631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.252119][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.254432][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.259376][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.268198][ T4296] device veth0_vlan entered promiscuous mode [ 38.273137][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.275288][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.283605][ T1603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.285330][ T1603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.293298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.295394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.300192][ T4296] device veth1_vlan entered promiscuous mode [ 38.303556][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.305763][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.308842][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.312819][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.314930][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.318171][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.319791][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.322079][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.345897][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.347918][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349838][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.351593][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.366025][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.368706][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.380766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.382938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.384937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.388513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.390719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.392970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.395216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.398298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.400467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.402731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.408715][ T4296] device veth0_macvtap entered promiscuous mode [ 38.412354][ T4307] device veth0_macvtap entered promiscuous mode [ 38.416945][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 38.418279][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 38.419482][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 38.420695][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 38.421885][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 38.440345][ T4305] device veth0_vlan entered promiscuous mode [ 38.462283][ T4307] device veth1_macvtap entered promiscuous mode [ 38.466461][ T4296] device veth1_macvtap entered promiscuous mode [ 38.494393][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.496580][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.500440][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.502415][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.505696][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.514995][ T4305] device veth1_vlan entered promiscuous mode [ 38.521359][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.523759][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.525877][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.529405][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.532567][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.552049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.554128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.556084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.573120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.575151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.589654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.591864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.594094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.596131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.721947][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.724231][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.726238][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.729723][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.731701][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.733714][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.737906][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.744453][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.746479][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.748763][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.750806][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.752636][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.754639][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.758038][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.762802][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.764493][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766106][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.769848][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.120634][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.122590][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.547172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.549268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.551809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.555334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.558044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.561631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.567564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.572662][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.574517][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.583233][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.585240][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.590410][ T4305] device veth0_macvtap entered promiscuous mode [ 39.628210][ T4305] device veth1_macvtap entered promiscuous mode [ 39.635878][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.639164][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.641043][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.643166][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.645171][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.651121][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.653394][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.655527][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.659896][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.733874][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.735507][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.789426][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.798481][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.800465][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.802564][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.804699][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.851144][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.853260][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.855241][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.859914][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.862440][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.864610][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.866563][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.059529][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.245215][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.618697][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 40.619990][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 40.621201][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 40.622549][ T4299] Bluetooth: hci2: command 0x040f tx timeout [ 40.623800][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 40.658367][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.660574][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.725649][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.733079][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.748938][ T4305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750660][ T4305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.752659][ T4305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.754367][ T4305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.785168][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.822688][ T4388] loop2: detected capacity change from 0 to 128 [ 40.832819][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.834558][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.843502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.855014][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.857441][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.859902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.922678][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.924302][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.930917][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.943419][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.945261][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.949601][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.999361][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.001130][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.005223][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.000483][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.002822][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.041283][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.043044][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.776811][ T4407] Bluetooth: MGMT ver 1.22 [ 43.550129][ T4401] sched: RT throttling activated [ 43.681478][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 43.681528][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 43.681557][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 43.681585][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 43.681612][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 44.577838][ T4414] loop0: detected capacity change from 0 to 256 [ 44.584081][ T4414] ======================================================= [ 44.584081][ T4414] WARNING: The mand mount option has been deprecated and [ 44.584081][ T4414] and is ignored by this kernel. Remove the mand [ 44.584081][ T4414] option from the mount to silence this warning. [ 44.584081][ T4414] ======================================================= [ 45.943301][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.953762][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.994979][ T4432] usb usb8: usbfs: process 4432 (syz.1.15) did not claim interface 0 before use [ 46.091410][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.093356][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.313256][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.315323][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.379240][ T4458] binder: 4457:4458 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 47.555174][ T4462] loop1: detected capacity change from 0 to 128 [ 47.817157][ T4467] loop4: detected capacity change from 0 to 128 [ 48.470903][ T4467] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.494066][ T4467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.558615][ T4481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.560813][ T4481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.967850][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.969875][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.156922][ T4513] syz.2.32 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.348334][ T4517] loop0: detected capacity change from 0 to 512 [ 51.396239][ T4517] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.34: corrupted xattr block 95 [ 51.399685][ T4517] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 51.402787][ T4517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.34: bg 0: block 7: invalid block bitmap [ 51.406125][ T4517] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 51.408811][ T4517] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.34: corrupted xattr block 95 [ 51.411915][ T4517] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 51.413858][ T4517] EXT4-fs (loop0): 1 orphan inode deleted [ 51.415026][ T4517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.628805][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.690445][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.672605][ T4460] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.674642][ T4460] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.682766][ T4460] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.684621][ T4460] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.095503][ T4527] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 53.198308][ T4530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.214595][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 53.222520][ T4530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.590954][ T4543] loop2: detected capacity change from 0 to 16 [ 53.621313][ T4543] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.614992][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.623742][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.167398][ T4553] input: syz0 as /devices/virtual/input/input2 [ 55.985223][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.998379][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.457815][ T4560] loop4: detected capacity change from 0 to 256 [ 56.562125][ T4560] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 56.565074][ T4560] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 56.617116][ T4563] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 57.695711][ T4583] random: crng reseeded on system resumption [ 57.919528][ T4587] loop2: detected capacity change from 0 to 256 [ 57.983216][ T4587] FAT-fs (loop2): Directory bread(block 64) failed [ 57.984786][ T4587] FAT-fs (loop2): Directory bread(block 65) failed [ 57.993934][ T4587] FAT-fs (loop2): Directory bread(block 66) failed [ 57.998693][ T4587] FAT-fs (loop2): Directory bread(block 67) failed [ 58.003390][ T4587] FAT-fs (loop2): Directory bread(block 68) failed [ 58.013256][ T4587] FAT-fs (loop2): Directory bread(block 69) failed [ 58.019116][ T4587] FAT-fs (loop2): Directory bread(block 70) failed [ 58.023958][ T4587] FAT-fs (loop2): Directory bread(block 71) failed [ 58.026435][ T4587] FAT-fs (loop2): Directory bread(block 72) failed [ 58.035612][ T4587] FAT-fs (loop2): Directory bread(block 73) failed [ 58.281605][ T4593] IPv6: NLM_F_REPLACE set, but no existing node found! [ 58.296101][ T27] audit: type=1326 audit(58.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.303562][ T27] audit: type=1326 audit(58.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=144 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.315401][ T27] audit: type=1326 audit(58.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.326513][ T27] audit: type=1326 audit(58.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.345987][ T27] audit: type=1326 audit(58.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.372213][ T27] audit: type=1326 audit(58.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.393038][ T27] audit: type=1326 audit(58.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.409770][ T27] audit: type=1326 audit(58.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.418400][ T27] audit: type=1326 audit(58.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.428244][ T27] audit: type=1326 audit(58.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 58.570997][ T4599] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 58.847589][ T4603] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 59.962721][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.012338][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.039384][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.041442][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.343680][ T4624] 9pnet_fd: Insufficient options for proto=fd [ 60.362647][ T4624] sch_fq: defrate 0 ignored. [ 60.620394][ T4629] Zero length message leads to an empty skb [ 60.766286][ T4642] loop4: detected capacity change from 0 to 512 [ 62.219729][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.80: inode #1: comm syz.4.80: iget: illegal inode # [ 62.231346][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.80: error while reading EA inode 1 err=-117 [ 62.244539][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.80: inode #1: comm syz.4.80: iget: illegal inode # [ 62.260264][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.80: error while reading EA inode 1 err=-117 [ 62.270584][ T4642] EXT4-fs (loop4): 1 orphan inode deleted [ 62.273935][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.075843][ T4657] loop1: detected capacity change from 0 to 256 [ 63.342876][ T4657] FAT-fs (loop1): Directory bread(block 64) failed [ 63.344665][ T4657] FAT-fs (loop1): Directory bread(block 65) failed [ 63.346709][ T4657] FAT-fs (loop1): Directory bread(block 66) failed [ 63.348401][ T4657] FAT-fs (loop1): Directory bread(block 67) failed [ 63.350339][ T4657] FAT-fs (loop1): Directory bread(block 68) failed [ 63.351868][ T4657] FAT-fs (loop1): Directory bread(block 69) failed [ 63.353836][ T4657] FAT-fs (loop1): Directory bread(block 70) failed [ 63.355314][ T4657] FAT-fs (loop1): Directory bread(block 71) failed [ 63.357355][ T4657] FAT-fs (loop1): Directory bread(block 72) failed [ 63.359026][ T4657] FAT-fs (loop1): Directory bread(block 73) failed [ 64.846850][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.848402][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.116241][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.118223][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.144314][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 68.547873][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 69.619174][ T24] cfg80211: failed to load regulatory.db [ 70.889873][ T4744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.891795][ T4744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.004985][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 71.065760][ T4747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.067325][ T4747] IPv6: NLM_F_CREATE should be set when creating new route [ 71.075206][ T4747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.076831][ T4747] IPv6: NLM_F_CREATE should be set when creating new route [ 71.294288][ T4753] loop3: detected capacity change from 0 to 1024 [ 71.339921][ T4753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.362964][ T4753] EXT4-fs (loop3): shut down requested (0) [ 71.448017][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.449954][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.557044][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 71.557066][ T27] audit: type=1326 audit(71.530:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.562771][ T27] audit: type=1326 audit(71.530:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.579600][ T4753] EXT4-fs (loop3): unmounting filesystem. [ 71.602800][ T27] audit: type=1326 audit(71.540:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.624124][ T27] audit: type=1326 audit(71.540:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.646745][ T27] audit: type=1326 audit(71.550:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.651017][ T27] audit: type=1326 audit(71.550:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.685647][ T27] audit: type=1326 audit(71.550:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.694068][ T27] audit: type=1326 audit(71.550:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=32 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.714290][ T27] audit: type=1326 audit(71.550:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.737847][ T27] audit: type=1326 audit(71.550:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb074d828 code=0x7ffc0000 [ 71.765119][ T4770] loop2: detected capacity change from 0 to 1024 [ 71.775995][ T4770] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.796822][ T4770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 71.799743][ T4770] EXT4-fs (loop2): invalid journal inode [ 72.063684][ T4785] loop1: detected capacity change from 0 to 256 [ 72.092443][ T4785] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 73.938412][ T4811] netlink: 'syz.1.140': attribute type 5 has an invalid length. [ 73.942320][ T4811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.098418][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.100316][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.140530][ T4814] UHID_CREATE from different security context by process 106 (syz.1.141), this is not allowed. [ 74.274560][ T4815] loop3: detected capacity change from 0 to 1024 [ 74.327319][ T4815] EXT4-fs: Ignoring removed orlov option [ 74.328596][ T4815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.402837][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.519038][ T4815] syz.3.139 uses obsolete (PF_INET,SOCK_PACKET) [ 76.590946][ T4832] input: syz0 as /devices/virtual/input/input3 [ 76.693821][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 76.712519][ T4297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.715471][ T4297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.719554][ T4312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.726348][ T4312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.728647][ T4312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.731329][ T4312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.899812][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 77.899826][ T27] audit: type=1326 audit(77.870:33): auid=4294967295 uid=1632045422 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.1.149" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d4d828 code=0x0 [ 78.309777][ T4833] chnl_net:caif_netlink_parms(): no params data found [ 78.496687][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.498438][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.500582][ T4833] device bridge_slave_0 entered promiscuous mode [ 78.504222][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.505595][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.522739][ T4833] device bridge_slave_1 entered promiscuous mode [ 78.611483][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.631853][ T4870] loop2: detected capacity change from 0 to 512 [ 78.632083][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.633686][ T4870] ext4: Unknown parameter 'smackfshat' [ 78.681820][ T4287] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.736088][ T4833] team0: Port device team_slave_0 added [ 78.745967][ T4833] team0: Port device team_slave_1 added [ 78.824774][ T4297] Bluetooth: hci5: command 0x0409 tx timeout [ 78.957579][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.959007][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.978124][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.834865][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.836308][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.849433][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.008679][ T4833] device hsr_slave_0 entered promiscuous mode [ 80.050541][ T4833] device hsr_slave_1 entered promiscuous mode [ 80.147894][ T4833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.149626][ T4833] Cannot create hsr debugfs directory [ 80.930672][ T4297] Bluetooth: hci5: command 0x041b tx timeout [ 81.120790][ T4833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.212521][ T4833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.323158][ T4833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.330774][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.340428][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.340567][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.354707][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.474453][ T4833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.528400][ T4297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.531113][ T4297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.533141][ T4297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.535379][ T4297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.545456][ T4297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.553131][ T4297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.624896][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 82.629935][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.631306][ T4915] netlink: 31 bytes leftover after parsing attributes in process `syz.2.174'. [ 82.653899][ T4915] netlink: 'syz.2.174': attribute type 3 has an invalid length. [ 82.655657][ T4915] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 82.666782][ T4915] netlink: 31 bytes leftover after parsing attributes in process `syz.2.174'. [ 82.888869][ T4918] loop3: detected capacity change from 0 to 2048 [ 82.977428][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 83.617301][ T4297] Bluetooth: hci1: command 0x0409 tx timeout [ 83.904624][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.974701][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.529200][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.767574][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.061389][ T4297] Bluetooth: hci5: command 0x0419 tx timeout [ 85.097618][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.099937][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.101753][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.103181][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.167486][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.169606][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.172084][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.186306][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.188715][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.232352][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.288178][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.290607][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.293132][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.298618][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.310285][ T4924] loop4: detected capacity change from 0 to 1024 [ 85.329114][ T4924] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.347007][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.349521][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.388464][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.411131][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.423233][ T4924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.435797][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.440978][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.476478][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.641917][ T4307] EXT4-fs (loop3): unmounting filesystem. [ 85.696909][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 85.827212][ T4939] xt_CONNSECMARK: invalid mode: 0 [ 86.595978][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.607011][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.664486][ T4940] device wg2 entered promiscuous mode [ 87.567394][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 87.599754][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.601690][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.776765][ T4312] Bluetooth: hci1: command 0x040f tx timeout [ 87.979709][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.021498][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.023255][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.216203][ T4902] chnl_net:caif_netlink_parms(): no params data found [ 88.653575][ T5008] loop4: detected capacity change from 0 to 2048 [ 88.701429][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.848095][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.865032][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.879284][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.881478][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.882981][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.885641][ T4902] device bridge_slave_0 entered promiscuous mode [ 89.142432][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.576978][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.578766][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.581789][ T4902] device bridge_slave_1 entered promiscuous mode [ 89.610387][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.612661][ T176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.695690][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 89.876807][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 90.760340][ T4902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.781035][ T4902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.105828][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.107834][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.135299][ T4833] device veth0_vlan entered promiscuous mode [ 91.173958][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.187739][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.195957][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.202467][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.285463][ T4902] team0: Port device team_slave_0 added [ 91.305719][ T4902] team0: Port device team_slave_1 added [ 91.779983][ T5062] Invalid ELF header magic: != ELF [ 92.464395][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.466445][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.503516][ T4833] device veth1_vlan entered promiscuous mode [ 92.508219][ T4902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.509595][ T4902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.514795][ T4902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.528173][ T4902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.529530][ T4902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.534581][ T4902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.555262][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.562142][ T5063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.564102][ T5063] IPv6: NLM_F_CREATE should be set when creating new route [ 92.658831][ T5068] loop4: detected capacity change from 0 to 256 [ 92.698263][ T4726] device hsr_slave_0 left promiscuous mode [ 92.720227][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.722013][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.734303][ T5068] FAT-fs (loop4): Directory bread(block 64) failed [ 92.735682][ T5068] FAT-fs (loop4): Directory bread(block 65) failed [ 92.737784][ T5068] FAT-fs (loop4): Directory bread(block 66) failed [ 92.739302][ T5068] FAT-fs (loop4): Directory bread(block 67) failed [ 92.740797][ T5068] FAT-fs (loop4): Directory bread(block 68) failed [ 92.743978][ T5068] FAT-fs (loop4): Directory bread(block 69) failed [ 92.745369][ T5068] FAT-fs (loop4): Directory bread(block 70) failed [ 92.753737][ T4726] device hsr_slave_1 left promiscuous mode [ 92.755390][ T5068] FAT-fs (loop4): Directory bread(block 71) failed [ 92.756858][ T5068] FAT-fs (loop4): Directory bread(block 72) failed [ 92.758159][ T5068] FAT-fs (loop4): Directory bread(block 73) failed [ 92.827076][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.830356][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.832498][ T4726] device bridge_slave_1 left promiscuous mode [ 92.834783][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.009131][ T4726] device bridge_slave_0 left promiscuous mode [ 93.010452][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.137883][ T5079] loop2: detected capacity change from 0 to 256 [ 94.164818][ T5079] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.180813][ T5077] loop3: detected capacity change from 0 to 40427 [ 94.185870][ T5077] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.187703][ T5077] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.203898][ T5077] F2FS-fs (loop3): invalid crc value [ 94.237925][ T5077] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.242717][ T5079] FAT-fs (loop2): Directory bread(block 64) failed [ 94.244301][ T5079] FAT-fs (loop2): Directory bread(block 65) failed [ 94.245617][ T5079] FAT-fs (loop2): Directory bread(block 66) failed [ 94.256250][ T5079] FAT-fs (loop2): Directory bread(block 67) failed [ 94.274790][ T5079] FAT-fs (loop2): Directory bread(block 68) failed [ 94.276196][ T5079] FAT-fs (loop2): Directory bread(block 69) failed [ 94.279233][ T5079] FAT-fs (loop2): Directory bread(block 70) failed [ 94.280474][ T5079] FAT-fs (loop2): Directory bread(block 71) failed [ 94.282357][ T5077] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.282639][ T5079] FAT-fs (loop2): Directory bread(block 72) failed [ 94.284033][ T5077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.285598][ T5079] FAT-fs (loop2): Directory bread(block 73) failed [ 94.932056][ T5087] loop3: detected capacity change from 0 to 256 [ 96.590963][ T4726] team0 (unregistering): Port device team_slave_1 removed [ 96.769469][ T4726] team0 (unregistering): Port device team_slave_0 removed [ 96.947503][ T4726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.148715][ T4726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.710661][ T4726] bond0 (unregistering): Released all slaves [ 100.013722][ T4902] device hsr_slave_0 entered promiscuous mode [ 100.067774][ T4902] device hsr_slave_1 entered promiscuous mode [ 100.154755][ T4833] device veth0_macvtap entered promiscuous mode [ 100.178420][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.180720][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.183022][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.241041][ T4833] device veth1_macvtap entered promiscuous mode [ 100.315257][ T5103] loop2: detected capacity change from 0 to 512 [ 100.345500][ T5103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.216: inode #1: comm syz.2.216: iget: illegal inode # [ 100.361320][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.364112][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.376677][ T5103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.216: error while reading EA inode 1 err=-117 [ 100.401136][ T5103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.216: inode #1: comm syz.2.216: iget: illegal inode # [ 100.411681][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.414169][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.416116][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.426800][ T5103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.216: error while reading EA inode 1 err=-117 [ 100.454178][ T5103] EXT4-fs (loop2): 1 orphan inode deleted [ 100.455475][ T5103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.462414][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.464672][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.467516][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.468264][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.470820][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.471372][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.474596][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.478043][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.486963][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.491137][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.493125][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.495119][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.499436][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.546858][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.550268][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.794667][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.797041][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.799456][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.822168][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 101.844491][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.847346][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.958335][ T4833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.960171][ T4833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.961819][ T4833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.963518][ T4833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.152681][ T4902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.198871][ T4902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.247561][ T4902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.257555][ T5092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.259358][ T5092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.278805][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.280929][ T4902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.446288][ T5092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.470647][ T5092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.476227][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.527948][ T5142] input: syz0 as /devices/virtual/input/input4 [ 102.785036][ T4902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.818079][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.820230][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.838522][ T4902] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.865886][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.868485][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.870945][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.872569][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.891994][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.894342][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.911030][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.918365][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.920020][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.930120][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.957542][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.960281][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.972449][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.980464][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.994824][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.003093][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.064220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.074982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.078316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.088752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.096917][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.405402][ T5139] loop4: detected capacity change from 0 to 40427 [ 103.520481][ T5139] F2FS-fs (loop4): invalid crc value [ 103.748588][ T5139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.369071][ T5183] loop2: detected capacity change from 0 to 1024 [ 104.438280][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.440015][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.446736][ T5139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.454156][ T4902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.485577][ T5183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.603096][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 105.605121][ T5210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.647309][ T5210] device batadv_slave_0 entered promiscuous mode [ 105.652133][ T5210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'. [ 105.767364][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 105.833556][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.847510][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.921527][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.923706][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.926110][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.929666][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.939143][ T4902] device veth0_vlan entered promiscuous mode [ 105.973683][ T4902] device veth1_vlan entered promiscuous mode [ 106.047592][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 106.059690][ T4902] device veth0_macvtap entered promiscuous mode [ 106.084111][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.086332][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.089286][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.097550][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.108813][ T4902] device veth1_macvtap entered promiscuous mode [ 106.112777][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.127311][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.155275][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.166766][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.175094][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.196681][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.198884][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.200949][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.202981][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.205022][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.249246][ T4902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.251433][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.253667][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.282844][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.285024][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.312791][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.314961][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.352701][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.354895][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.376669][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.378730][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.380695][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.382758][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.386160][ T4902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.478439][ T4902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.480149][ T4902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.482034][ T4902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.483760][ T4902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.560013][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.562365][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.021587][ T5238] loop2: detected capacity change from 0 to 128 [ 107.325512][ T5238] EXT4-fs: Mount option(s) incompatible with ext3 [ 107.526944][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.535578][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.553609][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.659917][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.661768][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.665406][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.416439][ T5259] loop6: detected capacity change from 0 to 256 [ 109.091545][ T5260] loop5: detected capacity change from 0 to 256 [ 109.397681][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.249'. [ 109.399580][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.249'. [ 110.040493][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 110.552887][ T5281] loop6: detected capacity change from 0 to 40427 [ 110.604146][ T5281] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 110.605522][ T5281] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 110.640020][ T5281] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.963240][ T5294] loop4: detected capacity change from 0 to 40427 [ 110.981960][ T5294] F2FS-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 111.379300][ T5332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 111.453963][ T5335] loop6: detected capacity change from 0 to 2048 [ 111.505025][ T5335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 111.560214][ T5287] loop3: detected capacity change from 0 to 40427 [ 111.635493][ T4902] EXT4-fs (loop6): unmounting filesystem. [ 111.899193][ T5287] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.953028][ T5349] loop2: detected capacity change from 0 to 128 [ 112.012209][ T5349] EXT4-fs: Mount option(s) incompatible with ext3 [ 112.017163][ T5287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.089364][ T5113] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.214935][ T5358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.225228][ T5358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.283551][ T5361] loop4: detected capacity change from 0 to 256 [ 112.306215][ T5361] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.311911][ T5361] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 112.336360][ T5361] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 112.379132][ T4307] syz-executor: attempt to access beyond end of device [ 112.379132][ T4307] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 114.929728][ T5391] serio: Serial port ptm0 [ 115.652345][ T5397] loop6: detected capacity change from 0 to 512 [ 115.654704][ T5397] EXT4-fs: Ignoring removed i_version option [ 115.655992][ T5397] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.669695][ T5398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.671601][ T5398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.688705][ T5397] ext4: Unknown parameter 'seclabel' [ 115.869337][ T5113] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.129040][ T5405] loop3: detected capacity change from 0 to 16 [ 117.186992][ T5405] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.271246][ T5409] loop6: detected capacity change from 0 to 512 [ 117.348965][ T5409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 117.808479][ T5432] loop3: detected capacity change from 0 to 256 [ 118.651841][ T5434] loop2: detected capacity change from 0 to 512 [ 118.729004][ T5434] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 118.731367][ T5434] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.733203][ T5434] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.294: Failed to acquire dquot type 0 [ 118.766484][ T5434] EXT4-fs (loop2): Remounting filesystem read-only [ 118.768282][ T5434] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 118.776133][ T5434] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.788597][ T5434] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.294: Failed to acquire dquot type 0 [ 118.797219][ T5434] EXT4-fs (loop2): Remounting filesystem read-only [ 118.809703][ T5434] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 118.819817][ T5434] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.821840][ T5434] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.294: Failed to acquire dquot type 0 [ 118.850550][ T5434] EXT4-fs (loop2): Remounting filesystem read-only [ 118.852887][ T5434] EXT4-fs (loop2): 1 orphan inode deleted [ 118.854159][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.857422][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.859285][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.191913][ T4902] EXT4-fs (loop6): unmounting filesystem. [ 119.279293][ T5454] fuse: Bad value for 'fd' [ 119.282391][ T5454] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 119.284674][ T5454] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 119.286434][ T5454] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.294: Failed to acquire dquot type 0 [ 119.325652][ T5456] loop6: detected capacity change from 0 to 512 [ 119.616398][ T5456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.961391][ T5454] EXT4-fs (loop2): Remounting filesystem read-only [ 119.992447][ T5456] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #3: comm syz.6.297: corrupted inode contents [ 120.038227][ T5456] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #3: comm syz.6.297: mark_inode_dirty error [ 120.043600][ T5456] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #3: comm syz.6.297: corrupted inode contents [ 120.076739][ T5456] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.297: mark_inode_dirty error [ 120.097464][ T5456] Quota error (device loop6): write_blk: dquota write failed [ 120.099361][ T5456] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 120.122156][ T5456] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.297: Failed to acquire dquot type 0 [ 120.151533][ T5456] EXT4-fs (loop6): 1 orphan inode deleted [ 120.157799][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 1 [ 120.160696][ T5456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 121.886986][ T5491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.306'. [ 122.610561][ T5505] loop5: detected capacity change from 0 to 512 [ 122.633233][ T5505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.649807][ T5505] EXT4-fs (loop5): 1 truncate cleaned up [ 122.651158][ T5505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 122.712575][ T4833] EXT4-fs (loop5): unmounting filesystem. [ 122.862311][ T5509] loop5: detected capacity change from 0 to 256 [ 122.891614][ T5509] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 123.083900][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 125.201854][ T4902] EXT4-fs (loop6): unmounting filesystem. [ 125.279306][ T5542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 126.230467][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.231914][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.351284][ T5558] loop2: detected capacity change from 0 to 512 [ 126.353115][ T5558] EXT4-fs: Ignoring removed i_version option [ 126.417716][ T5558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.474315][ T5558] EXT4-fs (loop2): 1 truncate cleaned up [ 126.475483][ T5558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.488011][ T5562] binder: 5561:5562 tried to acquire reference to desc 0, got 1 instead [ 126.709101][ T5570] loop4: detected capacity change from 0 to 512 [ 126.819537][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.821456][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.558364][ T4503] binder: release 5561:5562 transaction 5 out, still active [ 127.586459][ T4503] binder: undelivered TRANSACTION_COMPLETE [ 127.772447][ T5570] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.4.323: corrupted xattr block 95 [ 127.783922][ T5570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.323: bg 0: block 7: invalid block bitmap [ 127.794902][ T5570] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 127.816206][ T5570] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #11: comm syz.4.323: corrupted xattr block 95 [ 127.836584][ T5570] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 127.839566][ T5570] EXT4-fs (loop4): 1 orphan inode deleted [ 127.840981][ T5570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.894978][ T5570] x_tables: duplicate underflow at hook 1 [ 128.060338][ T4503] binder: send failed reply for transaction 5, target dead [ 128.172679][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 128.219005][ T5577] loop6: detected capacity change from 0 to 256 [ 128.302961][ T5577] FAT-fs (loop6): Directory bread(block 64) failed [ 128.311788][ T5577] FAT-fs (loop6): Directory bread(block 65) failed [ 128.313426][ T5577] FAT-fs (loop6): Directory bread(block 66) failed [ 128.336251][ T5577] FAT-fs (loop6): Directory bread(block 67) failed [ 128.352335][ T5577] FAT-fs (loop6): Directory bread(block 68) failed [ 128.364373][ T5577] FAT-fs (loop6): Directory bread(block 69) failed [ 128.366101][ T5577] FAT-fs (loop6): Directory bread(block 70) failed [ 128.371560][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.393615][ T5577] FAT-fs (loop6): Directory bread(block 71) failed [ 128.402081][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.405981][ T5577] FAT-fs (loop6): Directory bread(block 72) failed [ 128.415912][ T5577] FAT-fs (loop6): Directory bread(block 73) failed [ 129.284411][ T5589] loop6: detected capacity change from 0 to 2048 [ 131.616870][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 132.394126][ T5599] netlink: 'syz.4.331': attribute type 27 has an invalid length. [ 133.571682][ T5617] loop6: detected capacity change from 0 to 128 [ 134.199704][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.202248][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.842678][ T5599] device wg2 left promiscuous mode [ 135.114488][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.152622][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.455754][ T22] kernel write not supported for file /vcs (pid: 22 comm: kworker/1:0) [ 135.964569][ T5599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.966430][ T5599] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.968442][ T5599] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.970247][ T5599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.985140][ T5625] loop6: detected capacity change from 0 to 40427 [ 136.003774][ T5625] F2FS-fs (loop6): invalid crc value [ 136.042789][ T5625] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 136.086891][ T5625] F2FS-fs (loop6): Start checkpoint disabled! [ 136.113762][ T5625] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 136.374024][ T5600] tipc: Enabling of bearer rejected, failed to enable media [ 136.377194][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 136.542822][ T5639] loop2: detected capacity change from 0 to 512 [ 136.592230][ T5639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.613578][ T5639] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.343: bad orphan inode 131083 [ 136.616027][ T5639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.679187][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.681002][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.155479][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 137.567969][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 137.581324][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.583286][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.131398][ T4297] Bluetooth: hci6: sending frame failed (-49) [ 138.133933][ T4312] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 139.580692][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.370'. [ 139.651473][ T5748] loop5: detected capacity change from 0 to 128 [ 139.682783][ T5748] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.840030][ T4833] EXT4-fs (loop5): unmounting filesystem. [ 139.931943][ T5757] loop5: detected capacity change from 0 to 256 [ 139.992880][ T5757] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.050254][ T5761] process 'syz.6.372' launched './file1' with NULL argv: empty string added [ 140.448420][ T5743] loop2: detected capacity change from 0 to 40427 [ 140.468946][ T5743] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 140.470482][ T5743] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 140.599324][ T5743] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 140.736583][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.741310][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.759768][ T5743] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 140.761339][ T5743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.639111][ T4295] syz-executor: attempt to access beyond end of device [ 141.639111][ T4295] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.258162][ T5809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 143.123304][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 143.386049][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.397654][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.399211][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.401284][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.402759][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.404232][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.405853][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.418406][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.419801][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.421317][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.428544][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.430058][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.431427][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.432892][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.447621][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.450255][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.454747][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.459230][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.464133][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.469033][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.472885][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.478752][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.482581][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.488853][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.498797][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.503537][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.514587][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.519534][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.524496][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.535907][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.540916][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.545713][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.556132][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.560882][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.565780][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.577895][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.582748][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.588767][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.595431][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.600410][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.607540][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.612454][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.617275][ T4397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.645635][ T4397] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.736132][ T5843] loop6: detected capacity change from 0 to 512 [ 144.752005][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.395'. [ 144.841989][ T5098] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.829392][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.404'. [ 147.917860][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.919796][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.034946][ T5882] netlink: 68 bytes leftover after parsing attributes in process `syz.3.408'. [ 148.345778][ T5895] device pim6reg1 entered promiscuous mode [ 149.707678][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.715844][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.762271][ T5909] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 149.805853][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.029751][ T5915] tipc: Started in network mode [ 150.034236][ T5915] tipc: Node identity 0aa869e2bea2, cluster identity 4711 [ 150.040057][ T5915] tipc: Enabled bearer , priority 10 [ 150.091900][ T5915] tipc: Resetting bearer [ 150.135025][ T5914] tipc: Resetting bearer [ 150.612315][ T5930] loop5: detected capacity change from 0 to 1024 [ 150.621191][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.623627][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.653041][ T5930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.682325][ T5930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.752700][ T4509] tipc: Node number set to 3020581346 [ 151.995255][ T5942] loop4: detected capacity change from 0 to 1024 [ 152.006028][ T5942] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.040522][ T5942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.736736][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 158.736847][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 158.746792][ T4312] Bluetooth: hci4: command 0x0406 tx timeout [ 158.748156][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 162.753832][ T5914] tipc: Disabling bearer [ 162.987968][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 163.047203][ T5948] netlink: 'syz.6.430': attribute type 1 has an invalid length. [ 163.094189][ T4833] EXT4-fs (loop5): unmounting filesystem. [ 163.128094][ T5948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.787966][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.789894][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.093951][ T5996] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 164.136034][ T5996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.552282][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 166.552295][ T27] audit: type=1326 audit(166.520:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.569048][ T27] audit: type=1326 audit(166.540:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.586762][ T27] audit: type=1326 audit(166.550:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.591409][ T27] audit: type=1326 audit(166.550:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.635911][ T6029] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 166.636351][ T27] audit: type=1326 audit(166.550:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.642592][ T27] audit: type=1326 audit(166.550:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.652426][ T27] audit: type=1326 audit(166.550:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.662573][ T27] audit: type=1326 audit(166.550:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.664412][ T6029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.678770][ T27] audit: type=1326 audit(166.550:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 166.686575][ T27] audit: type=1326 audit(166.550:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa154d828 code=0x7ffc0000 [ 169.056349][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.059131][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.162484][ T6064] loop6: detected capacity change from 0 to 512 [ 169.174168][ T6064] EXT4-fs: Ignoring removed i_version option [ 169.201876][ T6064] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 169.203469][ T6064] System zones: 0-2, 18-18, 34-34 [ 169.212200][ T6064] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.468: Failed to acquire dquot type 0 [ 169.217024][ T6064] EXT4-fs (loop6): Remounting filesystem read-only [ 169.218483][ T6064] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.468: Failed to acquire dquot type 0 [ 169.227280][ T6064] EXT4-fs (loop6): Remounting filesystem read-only [ 169.234941][ T6064] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.468: Failed to acquire dquot type 0 [ 169.248044][ T6064] EXT4-fs (loop6): Remounting filesystem read-only [ 169.250624][ T6064] EXT4-fs (loop6): 1 orphan inode deleted [ 169.252926][ T6064] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 169.462940][ T6075] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 169.733746][ T6078] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.468: deleted inode referenced: 16 [ 169.831025][ T6078] EXT4-fs (loop6): Remounting filesystem read-only [ 169.848583][ T6077] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.468: deleted inode referenced: 16 [ 169.870538][ T6077] EXT4-fs (loop6): Remounting filesystem read-only [ 170.071919][ T6075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.178662][ T4902] EXT4-fs (loop6): unmounting filesystem. [ 170.400337][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.475'. [ 170.439326][ T6092] device pim6reg1 entered promiscuous mode [ 170.534584][ T6094] loop6: detected capacity change from 0 to 2048 [ 170.598391][ T6094] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 170.676490][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.480'. [ 170.767978][ T4902] EXT4-fs (loop6): unmounting filesystem. [ 170.897819][ T6109] netlink: 'syz.6.483': attribute type 1 has an invalid length. [ 170.927000][ T6109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.338798][ T6125] loop6: detected capacity change from 0 to 256 [ 171.355291][ T6125] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 171.798939][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.802806][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.762367][ T6143] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 172.820057][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.683280][ T6160] loop4: detected capacity change from 0 to 40427 [ 173.735236][ T5946] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.976185][ T6170] device syzkaller0 entered promiscuous mode [ 176.345942][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.350109][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.248507][ T6204] loop4: detected capacity change from 0 to 1024 [ 177.259091][ T6204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.272923][ T6204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.796079][ T4312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.802340][ T4312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.805010][ T4312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.820076][ T4312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.822049][ T4312] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 180.823705][ T4312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.896807][ T4299] Bluetooth: hci6: command 0x0409 tx timeout [ 184.976731][ T4299] Bluetooth: hci6: command 0x041b tx timeout [ 187.056793][ T4299] Bluetooth: hci6: command 0x040f tx timeout [ 187.388799][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.390307][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.138390][ T4312] Bluetooth: hci6: command 0x0419 tx timeout [ 189.237285][ T4312] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.240922][ T4312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.243028][ T4312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.245017][ T4312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.247436][ T4312] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 189.249060][ T4312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.560729][ T6178] netlink: 'syz.6.509': attribute type 1 has an invalid length. [ 189.822438][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 191.308511][ T4312] Bluetooth: hci7: command 0x0409 tx timeout [ 191.611869][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 192.434272][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.440106][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.829671][ T6184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.895248][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 193.000661][ T6184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.138612][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.140209][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.142407][ T6211] device bridge_slave_0 entered promiscuous mode [ 193.261720][ T6184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.326436][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.335606][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.337992][ T6211] device bridge_slave_1 entered promiscuous mode [ 193.377059][ T4299] Bluetooth: hci7: command 0x041b tx timeout [ 193.668558][ T6184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.929320][ T6284] Invalid ELF header magic: != ELF [ 194.460433][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.462043][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.464155][ T6220] device bridge_slave_0 entered promiscuous mode [ 194.489822][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.527652][ T6286] bridge0: port 3(erspan0) entered blocking state [ 194.529035][ T6286] bridge0: port 3(erspan0) entered disabled state [ 194.531157][ T6286] device erspan0 entered promiscuous mode [ 194.533465][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.534977][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.568376][ T6220] device bridge_slave_1 entered promiscuous mode [ 194.607878][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.796219][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.836206][ T6211] team0: Port device team_slave_0 added [ 194.843764][ T6211] team0: Port device team_slave_1 added [ 194.942209][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.018392][ T6307] capability: warning: `syz.4.544' uses deprecated v2 capabilities in a way that may be insecure [ 195.071870][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.073464][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.096809][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.149297][ T6220] team0: Port device team_slave_0 added [ 195.456764][ T4312] Bluetooth: hci7: command 0x040f tx timeout [ 196.241602][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.243085][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.257134][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.267627][ T6220] team0: Port device team_slave_1 added [ 196.312358][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.313773][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.372082][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.199457][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.201106][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.206208][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.448665][ T6211] device hsr_slave_0 entered promiscuous mode [ 197.487214][ T6211] device hsr_slave_1 entered promiscuous mode [ 197.526753][ T6211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.528503][ T6211] Cannot create hsr debugfs directory [ 197.536812][ T4312] Bluetooth: hci7: command 0x0419 tx timeout [ 197.708626][ T6220] device hsr_slave_0 entered promiscuous mode [ 197.737113][ T6220] device hsr_slave_1 entered promiscuous mode [ 197.803598][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.805420][ T6220] Cannot create hsr debugfs directory [ 197.915366][ T6335] loop4: detected capacity change from 0 to 40427 [ 197.958204][ T6335] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 197.962913][ T6335] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 197.986799][ T6335] F2FS-fs (loop4): Unrecognized mount option "u{er_xattr" or missing value [ 198.206775][ T6335] loop4: detected capacity change from 0 to 8192 [ 200.138478][ T4312] Bluetooth: hci5: command 0x0406 tx timeout [ 200.195093][ T6372] loop6: detected capacity change from 0 to 256 [ 200.200777][ T6211] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 200.206181][ T6372] exfat: Deprecated parameter 'namecase' [ 200.291764][ T6372] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 200.329998][ T6211] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 200.383018][ T6379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.455331][ T6381] raw_sendmsg: syz.3.558 forgot to set AF_INET. Fix it! [ 200.487724][ T6375] device veth0_to_team entered promiscuous mode [ 200.546161][ T6211] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.018584][ T6211] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.369261][ T6405] Invalid ELF header magic: != ELF [ 203.194500][ T6409] loop4: detected capacity change from 0 to 2048 [ 203.243628][ T6409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.331760][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 203.559469][ T6220] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.586725][ T6406] bridge0: port 3(erspan0) entered blocking state [ 203.588082][ T6406] bridge0: port 3(erspan0) entered disabled state [ 203.590008][ T6406] device erspan0 entered promiscuous mode [ 203.591554][ T6406] bridge0: port 3(erspan0) entered blocking state [ 203.592949][ T6406] bridge0: port 3(erspan0) entered forwarding state [ 204.779911][ T6220] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.830192][ T6220] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.933474][ T6220] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.993581][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.995505][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.998293][ T6184] device hsr_slave_0 left promiscuous mode [ 205.045791][ T6184] device hsr_slave_1 left promiscuous mode [ 205.126736][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.129109][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.130682][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.132803][ T6184] device bridge_slave_1 left promiscuous mode [ 205.136875][ T4312] Bluetooth: hci1: command 0x0406 tx timeout [ 205.146874][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.190391][ T6184] device bridge_slave_0 left promiscuous mode [ 205.191820][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.347933][ T6184] device veth1_macvtap left promiscuous mode [ 205.349470][ T6184] device veth0_macvtap left promiscuous mode [ 205.350726][ T6184] device veth1_vlan left promiscuous mode [ 205.352062][ T6184] device veth0_vlan left promiscuous mode [ 206.958519][ T6184] bond1 (unregistering): Released all slaves [ 209.350528][ T6184] team0 (unregistering): Port device team_slave_1 removed [ 209.539573][ T6184] team0 (unregistering): Port device team_slave_0 removed [ 209.718220][ T6184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.928338][ T6184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.262926][ T6184] bond0 (unregistering): Released all slaves [ 212.653550][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.707045][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.788927][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.802789][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.807392][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.969333][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.988727][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.990804][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.992636][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.997323][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.025702][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.027261][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.322699][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.575418][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.848690][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.850196][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.852021][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.905068][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.922752][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.927190][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.928644][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.993637][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.995956][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.998197][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.007468][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.023989][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.031505][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.034388][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.047227][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.048867][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.054030][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.060428][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.091795][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.097222][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.112854][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.115157][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.134390][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.844743][ T6483] serio: Serial port ptm0 [ 214.891428][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.893791][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.896007][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.942240][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.944303][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.999552][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.002208][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.004345][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.007511][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.039442][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.045351][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.047582][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.058368][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.453542][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.458206][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.459841][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.552903][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.554607][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.556315][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.622780][ T6535] loop4: detected capacity change from 0 to 512 [ 216.646862][ T185] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.718687][ T6535] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.597: corrupted inode contents [ 216.725367][ T6535] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.597: mark_inode_dirty error [ 216.747988][ T6535] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.597: corrupted inode contents [ 216.750943][ T6535] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.597: mark_inode_dirty error [ 216.768087][ T6535] __quota_error: 12 callbacks suppressed [ 216.768100][ T6535] Quota error (device loop4): write_blk: dquota write failed [ 216.770807][ T6535] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 216.772857][ T6535] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.597: Failed to acquire dquot type 0 [ 216.809888][ T6535] EXT4-fs (loop4): 1 orphan inode deleted [ 216.810571][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.811065][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.813574][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.817134][ T28] INFO: task syz-executor:4301 blocked for more than 143 seconds. [ 216.817353][ T5092] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.818750][ T28] Not tainted 6.1.119-syzkaller #0 [ 216.821696][ T5092] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:17: Failed to release dquot type 1 [ 216.821913][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.826094][ T28] task:syz-executor state:D stack:0 pid:4301 ppid:1 flags:0x00000009 [ 216.846559][ T6535] xt_bpf: check failed: parse error [ 216.856950][ T28] Call trace: [ 216.857674][ T28] __switch_to+0x308/0x5fc [ 216.858535][ T28] __schedule+0xef4/0x1d44 [ 216.859428][ T28] schedule+0xc4/0x170 [ 216.860177][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 216.861360][ T28] down_write+0x84/0x88 [ 216.886374][ T28] deactivate_super+0xe8/0x110 [ 216.886931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.889877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.893837][ T28] cleanup_mnt+0x394/0x41c [ 216.894741][ T28] __cleanup_mnt+0x20/0x30 [ 216.895644][ T28] task_work_run+0x240/0x2f0 [ 216.896493][ T28] do_notify_resume+0x2080/0x2cb8 [ 216.904800][ T6220] device veth0_vlan entered promiscuous mode [ 216.911745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.913952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.930110][ T6220] device veth1_vlan entered promiscuous mode [ 216.936640][ T28] el0_svc+0x9c/0x168 [ 216.937491][ T28] el0t_64_sync_handler+0x84/0xf0 [ 216.938553][ T28] el0t_64_sync+0x18c/0x190 [ 216.939734][ T28] [ 216.939734][ T28] Showing all locks held in the system: [ 216.941143][ T28] 1 lock held by rcu_tasks_kthre/12: [ 216.942185][ T28] #0: ffff800015c55470 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 216.944186][ T28] 1 lock held by rcu_tasks_trace/13: [ 216.945150][ T28] #0: ffff800015c55c70 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 216.968850][ T28] 1 lock held by khungtaskd/28: [ 216.969859][ T28] #0: ffff800015c552a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 216.971709][ T28] 2 locks held by getty/4051: [ 216.972682][ T28] #0: ffff0000d666e098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 216.973394][ T6220] device veth0_macvtap entered promiscuous mode [ 216.990318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.992494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.994367][ T28] #1: ffff80001d8002f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 216.994703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.996239][ T28] 3 locks held by kworker/u5:2/4299: [ 216.996253][ T28] #0: ffff0000cde2e938 [ 217.002860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.008561][ T28] ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.016827][ T28] #1: ffff800021137c20 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.019130][ T28] #2: ffff000104b9d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x148/0x68c [ 217.031246][ T28] 1 lock held by syz-executor/4301: [ 217.032396][ T28] #0: ffff0000c2ca60e0 (&type->s_umount_key#30){++++}-{3:3}, at: deactivate_super+0xe8/0x110 [ 217.034561][ T28] 1 lock held by syz-executor/4305: [ 217.034774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.035555][ T28] #0: ffff800015c5a878 (rcu_state.exp_mutex){+.+.}-{3:3} [ 217.038780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.042533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.050101][ T6220] device veth1_macvtap entered promiscuous mode [ 217.051205][ T28] , at: synchronize_rcu_expedited+0x3e0/0x77c [ 217.052765][ T28] 2 locks held by kworker/0:5/4352: [ 217.053813][ T28] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.055830][ T28] #1: ffff800021877c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.064849][ T28] 3 locks held by ext4lazyinit/4479: [ 217.066000][ T28] 3 locks held by kworker/0:11/4508: [ 217.074499][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.076583][ T28] #1: ffff800021807c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.087673][ T28] #2: ffff0000d2c0b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 217.093226][ T28] 3 locks held by kworker/0:12/4509: [ 217.095499][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.108946][ T28] #1: ffff800021817c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.114637][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.117205][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.120517][ T6211] device veth0_vlan entered promiscuous mode [ 217.124387][ T28] #2: ffff0000ddb4c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 217.127033][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.130206][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.135151][ T28] 2 locks held by kworker/u4:17/5092: [ 217.139098][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.141378][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.143600][ T28] 1 lock held by syz.5.450/6007: [ 217.147217][ T28] #0: ffff0000c2ca60e0 (&type->s_umount_key#30){++++}-{3:3}, at: iterate_supers+0xb0/0x1dc [ 217.148865][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.153806][ T28] 1 lock held by syz-executor/6211: [ 217.156981][ T28] #0: ffff8000180b34c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 217.160196][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.163474][ T28] 3 locks held by syz-executor/6220: [ 217.165725][ T28] 2 locks held by syz.3.594/6520: [ 217.166944][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.174268][ T28] 3 locks held by dhcpcd-run-hook/6554: [ 217.175603][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.176969][ T28] [ 217.179424][ T28] ============================================= [ 217.179424][ T28] [ 217.185387][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 217.185724][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.185736][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.190766][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 217.192485][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.194373][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.195985][ T28] Call trace: [ 217.196680][ T28] dump_backtrace+0x1c8/0x1f4 [ 217.197644][ T28] show_stack+0x2c/0x3c [ 217.198483][ T28] dump_stack_lvl+0x108/0x170 [ 217.199506][ T28] dump_stack+0x1c/0x58 [ 217.200461][ T28] panic+0x300/0x804 [ 217.201284][ T28] hung_task_panic+0x0/0x2c [ 217.202237][ T28] kthread+0x250/0x2d8 [ 217.203033][ T28] ret_from_fork+0x10/0x20 [ 217.204012][ T28] SMP: stopping secondary CPUs [ 217.205186][ T28] Kernel Offset: disabled [ 217.206055][ T28] CPU features: 0x080000,02070084,26017203 [ 217.207180][ T28] Memory Limit: none [ 217.805209][ T28] Rebooting in 86400 seconds..