last executing test programs: 26m31.214468163s ago: executing program 1 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x400000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0xfdef, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfc, 0x6194, &(0x7f0000004a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d00010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e30000008000000000018003480"], 0x4c}}, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) close(r5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 26m26.247356173s ago: executing program 1 (id=553): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000004140), 0x0, 0x33, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) membarrier(0x10, 0x0) membarrier(0x8, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) 26m22.709373529s ago: executing program 1 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount(0x0, 0x0, &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000030c0)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) io_submit(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401002d00"/21], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) 26m21.321790959s ago: executing program 1 (id=562): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x1, 0x81, &(0x7f0000000480)="0000000000000012181cef123884e99f7317548aabd3194510920c64ede62c2e1ad03ad4db04b2c558b82e3b7e5f26f46773bc95e13ba51f3ae0605b8fc98425ed1cd44e12dd57a4fd3c976b89a3149bc7b4ce6b0117464a4de2e256b166abb7334b4073a73243045c1663247399185c31b86949428d1ec4e1a6f7bf1ac3a45c5b3260284aed95ad4a7a4d285c4034d23f38e41b2d9f0acb7f3722de7a987e072b0f9deeac8b22223652bf29edeb5f2fade3cec89f1585010840db2f5c9f404d008ecc39e8", 0xc5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_REGS(r6, 0x8090ae81, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 26m20.276482594s ago: executing program 1 (id=565): bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x12, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) io_submit(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 26m13.001705327s ago: executing program 1 (id=577): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fanotify_init(0x79, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000200)={'pcm3724\x00', [0x8, 0x401, 0x2, 0x0, 0x1, 0x7, 0x80000001, 0x0, 0x1000, 0x2, 0xeb, 0x3ff, 0x9, 0x7f, 0x9, 0xc71, 0xb, 0x7, 0x4, 0x81, 0x7, 0x6, 0xffff, 0xfffeffff, 0x73, 0x10001, 0x1, 0x1, 0x6, 0x0, 0x8, 0x2]}) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0xd6ce0d646182fa6c, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x8]}}}, 0x4c}}, 0x10000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x34000}], 0x61}}], 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) r10 = syz_open_dev$usbfs(&(0x7f0000000380), 0x200, 0x2002) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000000)=0xc, 0x4) 26m12.094944308s ago: executing program 32 (id=577): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fanotify_init(0x79, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000200)={'pcm3724\x00', [0x8, 0x401, 0x2, 0x0, 0x1, 0x7, 0x80000001, 0x0, 0x1000, 0x2, 0xeb, 0x3ff, 0x9, 0x7f, 0x9, 0xc71, 0xb, 0x7, 0x4, 0x81, 0x7, 0x6, 0xffff, 0xfffeffff, 0x73, 0x10001, 0x1, 0x1, 0x6, 0x0, 0x8, 0x2]}) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0xd6ce0d646182fa6c, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x8]}}}, 0x4c}}, 0x10000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x34000}], 0x61}}], 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x40) r10 = syz_open_dev$usbfs(&(0x7f0000000380), 0x200, 0x2002) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000000)=0xc, 0x4) 24m50.625654644s ago: executing program 0 (id=910): syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) fchown(r4, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x521}], 0x1}}], 0x2, 0x0) r7 = fsopen(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x5}) 24m49.601521097s ago: executing program 0 (id=914): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000001e0001"], 0x14}], 0x1}, 0x0) 24m48.998401007s ago: executing program 0 (id=917): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) 24m48.802176067s ago: executing program 0 (id=919): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x1, 0x81, &(0x7f0000000480)="0000000000000012181cef123884e99f7317548aabd3194510920c64ede62c2e1ad03ad4db04b2c558b82e3b7e5f26f46773bc95e13ba51f3ae0605b8fc98425ed1cd44e12dd57a4fd3c976b89a3149bc7b4ce6b0117464a4de2e256b166abb7334b4073a73243045c1663247399185c31b86949428d1ec4e1a6f7bf1ac3a45c5b3260284aed95ad4a7a4d285c4034d23f38e41b2d9f0acb7f3722de7a987e072b0f9deeac8b22223652bf29edeb5f2fade3cec89f1585010840db2f5c9f404d008ecc39e8", 0xc5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_REGS(r6, 0x8090ae81, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 24m48.592352778s ago: executing program 0 (id=921): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) 24m47.037877985s ago: executing program 0 (id=925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any']) 24m46.907451858s ago: executing program 33 (id=925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any']) 17.095013222s ago: executing program 2 (id=11596): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000002000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 16.82550213s ago: executing program 2 (id=11598): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = syz_clone(0x1102100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f0000000780)=""/112, 0x70}) 16.597009863s ago: executing program 2 (id=11601): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 16.420490171s ago: executing program 2 (id=11603): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16.119172631s ago: executing program 2 (id=11606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x4, 0x0, 0xe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() 15.774381376s ago: executing program 2 (id=11609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016000000b400", @ANYBLOB="0000003c1a"], 0x48) 10.302343763s ago: executing program 3 (id=11630): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 10.170388196s ago: executing program 3 (id=11632): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 8.25781705s ago: executing program 3 (id=11639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r4) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='smackfstransmute', r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r5, 0x0) 6.774091601s ago: executing program 5 (id=11644): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) 6.453869433s ago: executing program 5 (id=11646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0xffffffffffffffff, 0x275a, 0x0) 6.269865863s ago: executing program 5 (id=11649): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 4.290472543s ago: executing program 3 (id=11657): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9140, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") socketpair(0x1, 0x20000000000001, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) fallocate(r5, 0x20, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r1}, 0x10) 4.22400623s ago: executing program 4 (id=11658): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 4.017836661s ago: executing program 6 (id=11660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) 4.016445031s ago: executing program 4 (id=11661): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 3.995986214s ago: executing program 5 (id=11662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) 3.810074573s ago: executing program 6 (id=11663): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.799297164s ago: executing program 4 (id=11664): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 3.615107262s ago: executing program 6 (id=11665): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3.614577312s ago: executing program 5 (id=11666): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 3.513417243s ago: executing program 4 (id=11667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 3.469367837s ago: executing program 6 (id=11668): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_emit_ethernet(0x66, 0x0, 0x0) 3.325698242s ago: executing program 6 (id=11669): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) lstat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x1, 0x0) sigaltstack(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) 3.325315361s ago: executing program 4 (id=11670): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 2.249732401s ago: executing program 6 (id=11671): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 2.221284464s ago: executing program 4 (id=11672): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r5) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000300)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6d7573686f72746e616d653d77696e6e742c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72b378dd8e05c79d4cd82c24fefe5dda746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72742858126e616d653d6c6f7765722c666d61736b3d30303030303030303030303030303030303030383035342c73686f72746e616d653d6d6900"/199], 0x81, 0x29b, &(0x7f0000000580)="$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") 919.153786ms ago: executing program 3 (id=11673): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 483.00013ms ago: executing program 34 (id=11609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016000000b400", @ANYBLOB="0000003c1a"], 0x48) 278.337861ms ago: executing program 5 (id=11675): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) 0s ago: executing program 3 (id=11676): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): pjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: none. [ 1342.448413][T26217] loop3: detected capacity change from 0 to 512 [ 1342.557116][T26217] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8434: inode has both inline data and extents flags [ 1342.630120][T26217] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8434: couldn't read orphan inode 15 (err -117) [ 1342.703555][T26217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1343.147057][T26055] Bluetooth: hci3: command 0x0406 tx timeout [ 1346.635005][T26258] loop4: detected capacity change from 0 to 1024 [ 1346.697660][T26258] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 1346.736441][T26258] EXT4-fs (loop4): write access will be enabled during recovery [ 1346.810584][T26258] JBD2: no valid journal superblock found [ 1346.816375][T26258] EXT4-fs (loop4): error loading journal [ 1347.065367][T26264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1347.084369][T26264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1347.093203][T26264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1347.906336][T26268] loop6: detected capacity change from 0 to 512 [ 1348.091409][T26268] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.8456: inode has both inline data and extents flags [ 1348.193082][T26268] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.8456: couldn't read orphan inode 15 (err -117) [ 1348.278168][T26268] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1348.544722][ T26] audit: type=1326 audit(1763158566.164:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1349.674558][T26316] loop5: detected capacity change from 0 to 7 [ 1349.697782][T16377] Dev loop5: unable to read RDB block 7 [ 1349.703650][T16377] loop5: unable to read partition table [ 1349.707897][T26314] loop2: detected capacity change from 0 to 512 [ 1349.717353][T16377] loop5: partition table beyond EOD, truncated [ 1349.771108][T26314] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1349.795394][T26316] Dev loop5: unable to read RDB block 7 [ 1349.830367][T26316] loop5: unable to read partition table [ 1349.853421][T26314] EXT4-fs (loop2): 1 truncate cleaned up [ 1349.899335][T26316] loop5: partition table beyond EOD, truncated [ 1349.913195][T26314] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1349.987026][T26316] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1350.007612][T26314] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 1350.027645][ T3560] Dev loop5: unable to read RDB block 7 [ 1350.034512][ T3560] loop5: unable to read partition table [ 1350.049369][ T3560] loop5: partition table beyond EOD, truncated [ 1351.652405][T26350] loop6: detected capacity change from 0 to 1024 [ 1351.717310][T26350] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 1351.748076][T26350] EXT4-fs (loop6): write access will be enabled during recovery [ 1351.774929][T26350] JBD2: no valid journal superblock found [ 1351.817141][T26350] EXT4-fs (loop6): error loading journal [ 1351.866066][ T26] audit: type=1326 audit(1763158569.504:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26357 comm="syz.2.8493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940dae6c9 code=0x7ffc0000 [ 1351.894919][ T26] audit: type=1326 audit(1763158569.504:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26357 comm="syz.2.8493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940dae6c9 code=0x7ffc0000 [ 1352.108082][T26365] loop5: detected capacity change from 0 to 7 [ 1352.129603][T16377] Dev loop5: unable to read RDB block 7 [ 1352.136465][T16377] loop5: unable to read partition table [ 1352.143309][T16377] loop5: partition table beyond EOD, truncated [ 1352.197201][T26365] Dev loop5: unable to read RDB block 7 [ 1352.203151][T26365] loop5: unable to read partition table [ 1352.229774][T26365] loop5: partition table beyond EOD, truncated [ 1352.265414][ T3560] Dev loop5: unable to read RDB block 7 [ 1352.280460][T26365] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1352.295243][ T3560] loop5: unable to read partition table [ 1352.307436][ T3560] loop5: partition table beyond EOD, truncated [ 1353.477099][ T4339] Bluetooth: hci2: command 0x0406 tx timeout [ 1353.615840][T26392] loop5: detected capacity change from 0 to 512 [ 1353.715918][T26392] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1353.732504][ T26] audit: type=1326 audit(1763158571.374:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26393 comm="syz.6.8506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1353.733253][T26392] EXT4-fs (loop5): inline encryption not supported [ 1353.775497][ T26] audit: type=1326 audit(1763158571.374:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26393 comm="syz.6.8506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1353.867722][T26392] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1353.892113][T26392] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1353.922728][T26392] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1354.058704][T26392] EXT4-fs (loop5): 1 truncate cleaned up [ 1354.065270][T26392] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1354.644247][T26419] loop5: detected capacity change from 0 to 7 [ 1354.693749][ T26] audit: type=1326 audit(1763158572.334:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26418 comm="syz.6.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1354.716611][T16377] Dev loop5: unable to read RDB block 7 [ 1354.741187][T16377] loop5: unable to read partition table [ 1354.774153][T16377] loop5: partition table beyond EOD, truncated [ 1354.811902][T26419] Dev loop5: unable to read RDB block 7 [ 1354.852011][T26419] loop5: unable to read partition table [ 1354.887296][T26419] loop5: partition table beyond EOD, truncated [ 1354.927714][T26419] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1356.139825][ T3560] Dev loop5: unable to read RDB block 7 [ 1356.148062][ T3560] loop5: unable to read partition table [ 1356.157488][ T3560] loop5: partition table beyond EOD, truncated [ 1357.805141][T26474] loop5: detected capacity change from 0 to 7 [ 1357.848813][T26474] Dev loop5: unable to read RDB block 7 [ 1357.881468][T26474] loop5: unable to read partition table [ 1357.963427][T26474] loop5: partition table beyond EOD, truncated [ 1358.028663][T26474] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1358.409835][ T3560] Dev loop5: unable to read RDB block 7 [ 1358.429343][ T3560] loop5: unable to read partition table [ 1358.436356][ T3560] loop5: partition table beyond EOD, truncated [ 1358.908336][T26492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1358.935872][T26492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1358.945078][T26492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1358.984563][T26492] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1360.123235][T25086] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1360.487293][T25086] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1360.517783][T25086] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.727487][T25086] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1360.754566][T25086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.784556][T25086] usb 5-1: Product: syz [ 1360.790430][T26519] loop5: detected capacity change from 0 to 7 [ 1360.813496][T25086] usb 5-1: Manufacturer: syz [ 1360.823615][T25086] usb 5-1: SerialNumber: syz [ 1360.824449][T26519] Dev loop5: unable to read RDB block 7 [ 1360.864047][T26519] loop5: unable to read partition table [ 1360.867396][T26507] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1360.880091][T26519] loop5: partition table beyond EOD, truncated [ 1360.908236][T25086] usblp0: Disabling reads from problematic bidirectional printer [ 1360.949725][T26519] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1361.131136][T25086] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1361.187434][T25086] usb 5-1: USB disconnect, device number 5 [ 1361.225092][T25086] usblp0: removed [ 1361.311380][ T3560] Dev loop5: unable to read RDB block 7 [ 1361.317484][ T3560] loop5: unable to read partition table [ 1361.323242][ T3560] loop5: partition table beyond EOD, truncated [ 1361.550210][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.557017][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.683873][ T26] audit: type=1326 audit(1763158579.324:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.6.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1361.841004][ T26] audit: type=1326 audit(1763158579.324:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.6.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1361.961845][ T26] audit: type=1326 audit(1763158579.324:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.6.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1362.067424][ T26] audit: type=1326 audit(1763158579.324:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.6.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1362.151010][ T26] audit: type=1326 audit(1763158579.324:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.6.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1363.438475][T26555] loop6: detected capacity change from 0 to 512 [ 1363.462155][ T26] audit: type=1326 audit(1763158581.104:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26556 comm="syz.4.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1363.528858][ T26] audit: type=1326 audit(1763158581.144:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26556 comm="syz.4.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1363.578038][ T26] audit: type=1326 audit(1763158581.144:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26556 comm="syz.4.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1363.594392][T26555] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.8575: inode has both inline data and extents flags [ 1363.607885][ T26] audit: type=1326 audit(1763158581.144:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26556 comm="syz.4.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1363.642367][ T26] audit: type=1326 audit(1763158581.144:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26556 comm="syz.4.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1363.679012][T26555] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.8575: couldn't read orphan inode 15 (err -117) [ 1363.724109][T26555] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1364.851475][T26598] loop2: detected capacity change from 0 to 512 [ 1364.862632][T26599] loop5: detected capacity change from 0 to 512 [ 1364.977680][T26599] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.8593: inode has both inline data and extents flags [ 1365.004247][T26598] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.8592: inode has both inline data and extents flags [ 1365.048167][T26599] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.8593: couldn't read orphan inode 15 (err -117) [ 1365.063525][T26599] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1365.065839][T26598] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8592: couldn't read orphan inode 15 (err -117) [ 1365.187192][T26598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1366.282618][T26643] loop2: detected capacity change from 0 to 512 [ 1366.500612][T26643] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.8611: inode has both inline data and extents flags [ 1366.550154][T26643] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8611: couldn't read orphan inode 15 (err -117) [ 1366.770907][T26643] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1367.786428][T26676] loop6: detected capacity change from 0 to 512 [ 1368.856233][T26676] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1368.877861][T26676] EXT4-fs (loop6): 1 truncate cleaned up [ 1368.922619][T26676] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1369.208645][T26676] EXT4-fs (loop6): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,. Quota mode: writeback. [ 1369.616592][T26713] loop2: detected capacity change from 0 to 1024 [ 1369.678701][T26713] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 1369.691816][T26713] EXT4-fs (loop2): write access will be enabled during recovery [ 1369.692810][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1369.692824][ T26] audit: type=1326 audit(1763158587.334:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26715 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1369.753018][T26713] JBD2: no valid journal superblock found [ 1369.759906][T26713] EXT4-fs (loop2): error loading journal [ 1369.789587][ T26] audit: type=1326 audit(1763158587.334:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26715 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1371.098232][T26776] loop4: detected capacity change from 0 to 512 [ 1371.108432][T26775] loop6: detected capacity change from 0 to 512 [ 1371.178383][T26776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1371.221662][T26776] System zones: 1-12 [ 1371.241252][T26775] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.8669: inode has both inline data and extents flags [ 1371.248196][T26787] loop2: detected capacity change from 0 to 1024 [ 1371.273351][T26776] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.8667: Directory hole found for htree index block 0 [ 1371.288485][T26775] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.8669: couldn't read orphan inode 15 (err -117) [ 1371.359232][T26775] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1371.370635][T26776] EXT4-fs (loop4): Remounting filesystem read-only [ 1371.397415][T26776] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1371.405684][T26776] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.8667: Directory hole found for htree index block 0 [ 1371.489523][T26776] EXT4-fs (loop4): Remounting filesystem read-only [ 1371.527226][T26776] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1371.547649][T26776] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1371.593570][T26787] EXT4-fs (loop2): Ignoring removed nobh option [ 1371.617947][T26787] EXT4-fs (loop2): Ignoring removed bh option [ 1371.624216][T26787] EXT4-fs (loop2): Unrecognized mount option "measure" or missing value [ 1373.629833][T26819] loop5: detected capacity change from 0 to 512 [ 1373.952707][T26819] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.8685: inode has both inline data and extents flags [ 1374.233718][T26819] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.8685: couldn't read orphan inode 15 (err -117) [ 1374.394127][T26819] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1375.059719][ T26] audit: type=1326 audit(1763158592.704:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26830 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1375.134433][ T26] audit: type=1326 audit(1763158592.704:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26830 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1376.054249][T26850] loop5: detected capacity change from 0 to 512 [ 1376.230497][T26850] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.8699: inode has both inline data and extents flags [ 1376.299359][ T26] audit: type=1326 audit(1763158593.944:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.2.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940dae6c9 code=0x7ffc0000 [ 1376.322547][T26850] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.8699: couldn't read orphan inode 15 (err -117) [ 1376.352720][T26863] loop3: detected capacity change from 0 to 512 [ 1376.359743][T26850] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1376.596164][T26863] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1376.642956][T26863] EXT4-fs (loop3): inline encryption not supported [ 1376.666177][T26863] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1376.689573][T26863] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1376.706267][T26863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1376.973790][T26863] EXT4-fs (loop3): 1 truncate cleaned up [ 1376.997530][T26863] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1377.614346][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1377.656354][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1377.691829][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1377.705161][T26894] loop3: detected capacity change from 0 to 512 [ 1377.740761][T26876] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1377.839696][T26894] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8715: inode has both inline data and extents flags [ 1378.067677][T26894] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8715: couldn't read orphan inode 15 (err -117) [ 1378.187845][T26894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1378.650491][T26905] loop4: detected capacity change from 0 to 1024 [ 1378.767961][T26905] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 1378.789590][T26892] loop6: detected capacity change from 0 to 40427 [ 1378.803392][T26905] EXT4-fs (loop4): write access will be enabled during recovery [ 1378.898744][T26905] JBD2: no valid journal superblock found [ 1378.921600][T26905] EXT4-fs (loop4): error loading journal [ 1379.269433][T26892] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1379.327147][T26892] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1379.386041][T26892] F2FS-fs (loop6): invalid crc value [ 1379.417140][T26892] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1379.604981][T26926] loop3: detected capacity change from 0 to 512 [ 1379.658574][T26892] F2FS-fs (loop6): Start checkpoint disabled! [ 1379.681236][T26927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1379.690661][T26927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1379.698169][T26927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1379.708830][T26927] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1379.739641][T26892] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1379.854823][T26926] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8728: inode has both inline data and extents flags [ 1379.877430][T26926] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8728: couldn't read orphan inode 15 (err -117) [ 1380.077093][T26926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1380.647343][T26938] F2FS-fs (loop6) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1381.331895][T24519] attempt to access beyond end of device [ 1381.331895][T24519] loop6: rw=2049, want=40976, limit=40427 [ 1381.433448][T26952] loop2: detected capacity change from 0 to 1024 [ 1381.577750][T26952] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 1381.605918][T26952] EXT4-fs (loop2): write access will be enabled during recovery [ 1381.645310][T26952] JBD2: no valid journal superblock found [ 1381.679380][T26952] EXT4-fs (loop2): error loading journal [ 1382.312578][T26972] loop6: detected capacity change from 0 to 512 [ 1382.484210][T26973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1382.493805][T26973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1382.502241][T26973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1382.513160][T26973] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1382.542781][T26972] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.8746: inode has both inline data and extents flags [ 1382.587563][T26972] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.8746: couldn't read orphan inode 15 (err -117) [ 1382.658336][T26972] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1384.757904][T27004] loop6: detected capacity change from 0 to 512 [ 1384.827261][T27004] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.8758: inode has both inline data and extents flags [ 1384.952679][T27004] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.8758: couldn't read orphan inode 15 (err -117) [ 1385.000533][T27004] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1385.695089][T27016] loop4: detected capacity change from 0 to 512 [ 1385.780001][T27016] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.8765: inode has both inline data and extents flags [ 1385.801906][T27019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8766'. [ 1385.817022][T27016] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.8765: couldn't read orphan inode 15 (err -117) [ 1385.877349][T27016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1386.009960][T27029] loop3: detected capacity change from 0 to 512 [ 1386.076035][T27029] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8769: inode has both inline data and extents flags [ 1386.142398][T27029] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8769: couldn't read orphan inode 15 (err -117) [ 1386.185171][T27029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1386.426326][T27045] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1386.507046][T27045] FAT-fs (loop7): unable to read boot sector [ 1386.639048][T27049] loop4: detected capacity change from 0 to 512 [ 1386.728305][T27049] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1386.773403][T27049] EXT4-fs (loop4): 1 truncate cleaned up [ 1386.798339][T27049] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1386.900137][T27049] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,. Quota mode: writeback. [ 1387.393957][T27062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8779'. [ 1387.421735][T27062] netlink: 'syz.2.8779': attribute type 12 has an invalid length. [ 1388.343448][T27071] loop2: detected capacity change from 0 to 512 [ 1388.367393][T27073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8782'. [ 1388.533679][T27071] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.8781: inode has both inline data and extents flags [ 1388.619144][T27071] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8781: couldn't read orphan inode 15 (err -117) [ 1388.688701][T27071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1389.414159][T27098] loop4: detected capacity change from 0 to 512 [ 1389.475347][T27098] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1389.533014][T27098] EXT4-fs (loop4): inline encryption not supported [ 1389.626610][T27098] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1389.677091][T27098] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1389.701038][T27098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1389.762096][T27098] EXT4-fs (loop4): 1 truncate cleaned up [ 1389.862712][T27098] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1390.208050][T27106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1390.396099][T27110] loop6: detected capacity change from 0 to 1024 [ 1390.534129][T27110] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 1390.553226][T27110] EXT4-fs (loop6): write access will be enabled during recovery [ 1390.589493][T27110] JBD2: no valid journal superblock found [ 1390.616996][T27110] EXT4-fs (loop6): error loading journal [ 1393.456457][T27176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1393.467492][T27176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1393.475060][T27176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1393.540533][T27176] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1394.199125][T27198] netlink: 'syz.4.8834': attribute type 12 has an invalid length. [ 1395.522936][T27217] loop4: detected capacity change from 0 to 512 [ 1395.663132][T27226] loop3: detected capacity change from 0 to 512 [ 1395.671216][T27217] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1395.727102][T27217] EXT4-fs (loop4): 1 truncate cleaned up [ 1395.732821][T27217] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1395.818252][T27226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1395.826341][T27226] System zones: 1-12 [ 1395.838404][T27226] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8845: Directory hole found for htree index block 0 [ 1395.869515][T27217] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,. Quota mode: writeback. [ 1395.888599][T27226] EXT4-fs (loop3): Remounting filesystem read-only [ 1395.896014][T27226] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1395.910213][T27226] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8845: Directory hole found for htree index block 0 [ 1395.931279][T27226] EXT4-fs (loop3): Remounting filesystem read-only [ 1395.981125][T27226] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1396.074907][T27226] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1396.877735][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1397.168785][T22465] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1397.304180][ T26] audit: type=1326 audit(1763158614.944:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1397.392274][ T26] audit: type=1326 audit(1763158614.984:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.6.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1397.537343][T22465] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1397.555731][T22465] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1397.773048][T22465] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1397.801523][T22465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.839369][T22465] usb 6-1: Product: syz [ 1397.866484][T22465] usb 6-1: Manufacturer: syz [ 1397.889271][T22465] usb 6-1: SerialNumber: syz [ 1397.957512][T27252] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1397.979852][T22465] usblp0: Disabling reads from problematic bidirectional printer [ 1398.215007][T22465] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1398.263291][T22465] usb 6-1: USB disconnect, device number 3 [ 1398.293115][T22465] usblp0: removed [ 1399.205973][ T26] audit: type=1326 audit(1763158616.834:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27292 comm="syz.5.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1399.343050][ T26] audit: type=1326 audit(1763158616.874:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27292 comm="syz.5.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1400.407148][T27303] loop5: detected capacity change from 0 to 512 [ 1400.571912][T27303] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1400.657041][T27303] EXT4-fs (loop5): inline encryption not supported [ 1400.690143][T27303] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1400.702995][T27303] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1400.778099][T27303] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1400.911280][T27303] EXT4-fs (loop5): 1 truncate cleaned up [ 1400.919401][T27303] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1401.515728][T27315] loop6: detected capacity change from 0 to 512 [ 1401.587286][T27315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1401.624168][T27315] System zones: 1-12 [ 1401.694512][T27315] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.8883: Directory hole found for htree index block 0 [ 1401.723382][T27315] EXT4-fs (loop6): Remounting filesystem read-only [ 1401.735768][T27315] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 1401.760439][T27315] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.8883: Directory hole found for htree index block 0 [ 1401.823437][T27315] EXT4-fs (loop6): Remounting filesystem read-only [ 1401.835451][T27315] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1401.862359][T27315] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1401.913747][T27315] EXT4-fs (loop6): re-mounted. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: none. [ 1401.987070][T15503] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1402.397328][T15503] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1402.427144][T15503] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.657290][T15503] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1402.693804][T15503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.707023][T27337] loop5: detected capacity change from 0 to 512 [ 1402.724926][T15503] usb 4-1: Product: syz [ 1402.744476][T15503] usb 4-1: Manufacturer: syz [ 1402.758600][T15503] usb 4-1: SerialNumber: syz [ 1402.792500][T27318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1402.825051][T15503] usblp0: Disabling reads from problematic bidirectional printer [ 1402.867864][T27337] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1402.903659][T27337] EXT4-fs (loop5): 1 truncate cleaned up [ 1402.917272][T27337] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1403.022343][ T26] audit: type=1326 audit(1763158620.664:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27342 comm="syz.4.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1403.050764][ T26] audit: type=1326 audit(1763158620.664:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27342 comm="syz.4.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1f7af6c9 code=0x7ffc0000 [ 1403.087623][T15503] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1403.155884][T15503] usb 4-1: USB disconnect, device number 8 [ 1403.183084][T15503] usblp0: removed [ 1405.658593][T27373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1405.669481][T27373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1405.677059][T27373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1405.689539][T27373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1406.454702][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8905'. [ 1407.600844][ T26] audit: type=1326 audit(1763158625.244:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27380 comm="syz.6.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1407.606145][T27365] loop3: detected capacity change from 0 to 40427 [ 1407.680541][ T26] audit: type=1326 audit(1763158625.264:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27380 comm="syz.6.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1408.114907][T27390] loop2: detected capacity change from 0 to 512 [ 1408.314923][T27390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1408.331951][T27390] System zones: 1-12 [ 1408.402422][T27390] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.8906: Directory hole found for htree index block 0 [ 1408.517235][T27390] EXT4-fs (loop2): Remounting filesystem read-only [ 1408.530135][T27390] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1408.551992][T27390] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.8906: Directory hole found for htree index block 0 [ 1408.640429][T27390] EXT4-fs (loop2): Remounting filesystem read-only [ 1408.667641][T27403] loop5: detected capacity change from 0 to 512 [ 1408.717468][T27390] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1408.725778][T27390] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1408.744762][T27403] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1408.774479][T27403] EXT4-fs (loop5): inline encryption not supported [ 1408.804895][T27403] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1408.842688][T27403] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1408.890904][T27403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1409.008572][T27403] EXT4-fs (loop5): 1 truncate cleaned up [ 1409.014409][T27403] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1409.788291][T27423] loop5: detected capacity change from 0 to 512 [ 1409.864486][T27423] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1409.928620][T27423] EXT4-fs (loop5): 1 truncate cleaned up [ 1409.934582][T27423] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 1410.261160][T27420] loop2: detected capacity change from 0 to 40427 [ 1410.407792][T27420] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x1ffff [ 1410.454488][T27420] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 1410.515361][T27420] F2FS-fs (loop2): invalid crc value [ 1410.540854][T27420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1410.673556][T27420] F2FS-fs (loop2): Start checkpoint disabled! [ 1410.726603][T27420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1411.510140][T27440] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1412.275291][ T5278] attempt to access beyond end of device [ 1412.275291][ T5278] loop2: rw=2049, want=40976, limit=40427 [ 1412.610715][T27453] loop3: detected capacity change from 0 to 512 [ 1412.707565][T27453] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8935: inode has both inline data and extents flags [ 1412.851728][T27453] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8935: couldn't read orphan inode 15 (err -117) [ 1412.946351][T27453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1413.050937][ T26] audit: type=1326 audit(1763158630.694:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1413.150758][ T26] audit: type=1326 audit(1763158630.734:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27464 comm="syz.6.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1413.520291][T27479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8942'. [ 1414.654106][T27494] loop2: detected capacity change from 0 to 512 [ 1414.824203][T27494] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.8951: inode has both inline data and extents flags [ 1414.927263][T27494] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8951: couldn't read orphan inode 15 (err -117) [ 1415.007323][T27494] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1415.405714][T27509] loop5: detected capacity change from 0 to 512 [ 1415.520847][T27509] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1415.559348][T27509] EXT4-fs (loop5): inline encryption not supported [ 1415.580647][T27509] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1415.638261][T27509] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1415.696338][T27509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1415.735481][T27509] EXT4-fs (loop5): 1 truncate cleaned up [ 1415.752785][T27509] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1416.205536][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8961'. [ 1417.471649][T27527] loop4: detected capacity change from 0 to 512 [ 1417.588475][T27527] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1417.639887][T27527] EXT4-fs (loop4): inline encryption not supported [ 1417.688570][T27527] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1417.720856][T27527] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1417.769604][T27527] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1417.823269][T27527] EXT4-fs (loop4): 1 truncate cleaned up [ 1417.840857][T27527] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1418.380289][T27533] loop4: detected capacity change from 0 to 512 [ 1418.513965][T27533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1418.541164][T27533] System zones: 1-12 [ 1418.546236][T27533] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.8967: Directory hole found for htree index block 0 [ 1418.680483][T27533] EXT4-fs (loop4): Remounting filesystem read-only [ 1418.697078][T27533] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1418.705365][T27533] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.8967: Directory hole found for htree index block 0 [ 1418.816165][T27533] EXT4-fs (loop4): Remounting filesystem read-only [ 1418.847169][T27533] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1418.855385][T27533] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1419.198876][T27548] loop6: detected capacity change from 0 to 512 [ 1419.303144][T27548] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1419.339568][T27548] EXT4-fs (loop6): inline encryption not supported [ 1419.396517][T27548] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1419.447650][T27548] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1419.447677][T27548] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1419.544711][T27548] EXT4-fs (loop6): 1 truncate cleaned up [ 1419.544744][T27548] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1420.605391][T27560] loop4: detected capacity change from 0 to 512 [ 1420.933526][T27560] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.8973: inode has both inline data and extents flags [ 1421.011097][T27560] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.8973: couldn't read orphan inode 15 (err -117) [ 1421.094025][T27560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1422.578930][T27610] loop3: detected capacity change from 0 to 512 [ 1422.728893][T27610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1422.787514][T27610] System zones: 1-12 [ 1422.819955][T27610] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8992: Directory hole found for htree index block 0 [ 1422.842525][T27610] EXT4-fs (loop3): Remounting filesystem read-only [ 1422.849406][T27610] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1422.858143][T27610] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8992: Directory hole found for htree index block 0 [ 1422.872899][T27618] loop5: detected capacity change from 0 to 512 [ 1422.882526][T27610] EXT4-fs (loop3): Remounting filesystem read-only [ 1422.890893][T27610] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1422.899617][T27610] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1422.970887][T27618] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.8997: inode has both inline data and extents flags [ 1422.990266][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.997039][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.025240][T27618] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.8997: couldn't read orphan inode 15 (err -117) [ 1423.046423][T27618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1423.696408][T27641] netlink: 'syz.4.9005': attribute type 12 has an invalid length. [ 1424.342571][T27651] netlink: 628 bytes leftover after parsing attributes in process `syz.2.9010'. [ 1425.259521][T27658] loop4: detected capacity change from 0 to 512 [ 1425.360452][ T26] audit: type=1326 audit(1763158642.954:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.6.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1425.450618][ T26] audit: type=1326 audit(1763158642.954:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.6.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1425.473179][T27658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1425.484542][T27658] System zones: 1-12 [ 1425.489757][T27658] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.9013: Directory hole found for htree index block 0 [ 1425.507141][T27658] EXT4-fs (loop4): Remounting filesystem read-only [ 1425.513559][ T26] audit: type=1326 audit(1763158642.954:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.6.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3835db6c9 code=0x7ffc0000 [ 1425.513747][T27658] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1425.563352][T27658] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.9013: Directory hole found for htree index block 0 [ 1425.584245][T27658] EXT4-fs (loop4): Remounting filesystem read-only [ 1425.600485][T27658] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1425.608903][T27658] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1425.684209][T27658] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 1426.007074][T27572] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1426.387248][T27572] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1426.413654][T27572] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.617222][T27572] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1426.644195][T27572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.662559][T27572] usb 6-1: Product: syz [ 1426.667377][T27572] usb 6-1: Manufacturer: syz [ 1426.672000][T27572] usb 6-1: SerialNumber: syz [ 1426.683618][T27670] loop6: detected capacity change from 0 to 40427 [ 1426.717273][T27673] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1426.736420][T27670] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1426.751308][T27572] usblp0: Disabling reads from problematic bidirectional printer [ 1426.783491][T27670] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1426.842790][T27670] F2FS-fs (loop6): invalid crc value [ 1426.872500][T27670] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1426.974841][T27572] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1427.039652][T27670] F2FS-fs (loop6): Start checkpoint disabled! [ 1427.046087][T27572] usb 6-1: USB disconnect, device number 4 [ 1427.065743][T27572] usblp0: removed [ 1427.076541][T27670] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1427.374854][T27703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1427.384347][T27703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.391883][T27703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.403275][T27703] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1429.649154][T27715] loop5: detected capacity change from 0 to 1024 [ 1429.766035][T27715] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 1429.779358][T27715] EXT4-fs (loop5): write access will be enabled during recovery [ 1429.848618][T27715] JBD2: no valid journal superblock found [ 1429.872777][T27715] EXT4-fs (loop5): error loading journal [ 1430.124368][T27726] loop6: detected capacity change from 0 to 512 [ 1430.341385][T27726] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1430.397330][T27726] EXT4-fs (loop6): inline encryption not supported [ 1430.458122][T27726] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1430.465670][T27726] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1430.545120][T27726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1430.626524][T27726] EXT4-fs (loop6): 1 truncate cleaned up [ 1430.632275][T27726] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1431.563666][T27766] netlink: 'syz.6.9054': attribute type 12 has an invalid length. [ 1432.620186][T27732] loop5: detected capacity change from 0 to 40427 [ 1432.750732][T27732] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1432.795584][T27732] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1432.993283][T27732] F2FS-fs (loop5): invalid crc value [ 1433.004736][T27732] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1433.391764][T27779] loop2: detected capacity change from 0 to 512 [ 1433.529626][T27732] F2FS-fs (loop5): Start checkpoint disabled! [ 1433.690610][T27779] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1433.770704][T27779] EXT4-fs (loop2): inline encryption not supported [ 1433.807105][T27779] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1433.813938][T27779] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1433.871673][T27779] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1433.933115][T27779] EXT4-fs (loop2): 1 truncate cleaned up [ 1434.011995][T27779] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1436.992603][T27829] netlink: 'syz.6.9075': attribute type 12 has an invalid length. [ 1437.183678][T27815] loop3: detected capacity change from 0 to 40427 [ 1437.257486][T27815] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1437.300178][T27815] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1437.353949][T27815] F2FS-fs (loop3): invalid crc value [ 1437.392340][T27815] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1437.572674][T27815] F2FS-fs (loop3): Start checkpoint disabled! [ 1437.599011][T27815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1438.998454][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9081'. [ 1443.340475][T27876] loop5: detected capacity change from 0 to 40427 [ 1443.425323][T27876] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1443.454494][T27876] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1443.526993][T27876] F2FS-fs (loop5): invalid crc value [ 1443.606958][T27876] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1443.817314][T27876] F2FS-fs (loop5): Start checkpoint disabled! [ 1443.867584][T27876] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1444.160234][T27891] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1444.592442][T26493] attempt to access beyond end of device [ 1444.592442][T26493] loop5: rw=2049, want=40976, limit=40427 [ 1445.461565][ T26] audit: type=1326 audit(1763158663.104:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27900 comm="syz.5.9103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2501c236c9 code=0x7ffc0000 [ 1445.709579][T27905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9106'. [ 1447.868864][T27931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1449.935981][T27963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1450.347999][T27978] loop2: detected capacity change from 0 to 512 [ 1450.410805][T27984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1450.421515][T27984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1450.429396][T27984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1450.440843][T27984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1450.535378][T27978] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1450.597404][T27978] EXT4-fs (loop2): inline encryption not supported [ 1450.634528][T27978] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1450.697310][T27978] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1450.757164][T27978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1450.881641][T27978] EXT4-fs (loop2): 1 truncate cleaned up [ 1450.901299][T27978] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1451.350407][T28012] netlink: 'syz.6.9147': attribute type 12 has an invalid length. [ 1451.694812][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1451.833582][T28028] loop5: detected capacity change from 0 to 512 [ 1451.894837][T28028] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1451.920526][T28028] EXT4-fs (loop5): inline encryption not supported [ 1451.936860][T28028] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1451.955479][T28028] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1451.975817][T28028] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1452.077206][T28028] EXT4-fs (loop5): 1 truncate cleaned up [ 1452.082906][T28028] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1452.264248][T28035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1452.395813][T28035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1452.517967][T28035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1452.613222][T28035] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1454.254514][T28058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9167'. [ 1454.756255][T28077] loop4: detected capacity change from 0 to 1024 [ 1456.761052][T28092] loop3: detected capacity change from 0 to 512 [ 1456.878832][T28092] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1456.907702][T28092] EXT4-fs (loop3): inline encryption not supported [ 1456.914315][T28092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1456.943599][T28092] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1456.967099][T28092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1457.054782][T28102] loop2: detected capacity change from 0 to 1024 [ 1457.081972][T28092] EXT4-fs (loop3): 1 truncate cleaned up [ 1457.091943][T28092] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1457.167520][T28102] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 1457.175435][T28102] EXT4-fs (loop2): write access will be enabled during recovery [ 1457.198010][T28102] JBD2: no valid journal superblock found [ 1457.203890][T28102] EXT4-fs (loop2): error loading journal [ 1458.812466][T28151] netlink: 'syz.5.9207': attribute type 4 has an invalid length. [ 1458.920677][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9210'. [ 1458.952343][T28155] netlink: 'syz.5.9207': attribute type 4 has an invalid length. [ 1459.391690][T28175] loop2: detected capacity change from 0 to 512 [ 1459.462811][T28175] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1459.492433][T28178] netlink: 'syz.4.9216': attribute type 12 has an invalid length. [ 1459.501098][T28175] EXT4-fs (loop2): inline encryption not supported [ 1459.526856][T28175] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1459.535116][T28175] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1459.553371][T28175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1459.584797][T28175] EXT4-fs (loop2): 1 truncate cleaned up [ 1459.593806][T28175] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1461.613592][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9234'. [ 1461.629713][T28227] netlink: 'syz.5.9234': attribute type 12 has an invalid length. [ 1464.024489][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9243'. [ 1466.748801][T28299] loop6: detected capacity change from 0 to 1024 [ 1467.657582][T28299] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 1467.666381][T28299] EXT4-fs (loop6): write access will be enabled during recovery [ 1467.689196][T28299] JBD2: no valid journal superblock found [ 1467.694963][T28299] EXT4-fs (loop6): error loading journal [ 1467.999511][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9265'. [ 1468.518285][T28325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1468.905984][T28329] loop5: detected capacity change from 0 to 8192 [ 1468.989023][ T26] audit: type=1800 audit(1763158686.634:206): pid=28329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9277" name="bus" dev="loop5" ino=1048696 res=0 errno=0 [ 1470.456564][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9286'. [ 1471.333791][T28390] netlink: 'syz.5.9297': attribute type 12 has an invalid length. [ 1472.001420][T28402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1472.107168][T27824] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1475.287156][T27824] usb 7-1: device descriptor read/all, error -71 [ 1475.947234][T27572] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1476.386552][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1476.404691][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.413427][T28478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.434962][T28478] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1477.109159][T27572] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1477.120089][T27572] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1477.291714][T27572] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1477.306984][T27572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.315273][T27572] usb 3-1: Product: syz [ 1477.344540][T27572] usb 3-1: Manufacturer: syz [ 1477.353164][T27572] usb 3-1: SerialNumber: syz [ 1477.433391][T28464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1477.469093][T27572] usblp0: Disabling reads from problematic bidirectional printer [ 1477.680946][T27572] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1477.732668][T27572] usb 3-1: USB disconnect, device number 3 [ 1477.765950][T27572] usblp0: removed [ 1478.147819][T28514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1478.166446][T28514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1478.181259][T28514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.201587][T28514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1479.064162][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9360'. [ 1479.692722][T28540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9364'. [ 1479.709717][T28540] netlink: 'syz.5.9364': attribute type 12 has an invalid length. [ 1480.565424][T28547] netlink: 'syz.5.9369': attribute type 12 has an invalid length. [ 1481.364361][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9373'. [ 1484.429702][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.436529][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.512153][T28591] loop3: detected capacity change from 0 to 512 [ 1484.637343][T28591] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1484.687112][T28591] EXT4-fs (loop3): inline encryption not supported [ 1484.703528][T28591] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1484.757253][T28591] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1484.764463][T28591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1484.801341][T28597] overlayfs: failed to resolve './bus': -2 [ 1484.919161][T28591] EXT4-fs (loop3): 1 truncate cleaned up [ 1484.926406][T28591] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1487.608736][T28634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1489.894771][T28667] loop2: detected capacity change from 0 to 1024 [ 1491.794725][T28700] loop3: detected capacity change from 0 to 1024 [ 1491.797903][T28696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9431'. [ 1493.336368][T28728] overlayfs: failed to resolve './bus': -2 [ 1494.028523][T28745] overlayfs: failed to resolve './bus': -2 [ 1494.391705][T28724] loop2: detected capacity change from 0 to 40427 [ 1494.487455][T28724] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x1ffff [ 1494.516425][T28724] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 1494.549430][T28724] F2FS-fs (loop2): invalid crc value [ 1494.576161][T28724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1494.757351][T28724] F2FS-fs (loop2): Start checkpoint disabled! [ 1494.794836][T28724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1495.041816][T28724] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1495.299165][ T4400] attempt to access beyond end of device [ 1495.299165][ T4400] loop2: rw=2049, want=40976, limit=40427 [ 1496.522998][T28777] overlayfs: failed to resolve './bus': -2 [ 1498.301380][T28799] overlayfs: failed to resolve './bus': -2 [ 1499.196429][T28814] loop6: detected capacity change from 0 to 512 [ 1499.343717][T28814] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1499.377503][T28814] EXT4-fs (loop6): inline encryption not supported [ 1499.410466][T28814] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1499.455333][T28814] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1499.500979][T28814] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1499.708340][T28814] EXT4-fs (loop6): 1 truncate cleaned up [ 1499.714183][T28814] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1513.530055][T29035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1513.546983][T29035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1513.555434][T29035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1513.576411][T29035] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1515.438074][T29055] overlayfs: failed to resolve './file2': -2 [ 1515.594057][T29055] loop2: detected capacity change from 0 to 512 [ 1515.798426][T29055] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1515.805612][T29055] EXT4-fs (loop2): inline encryption not supported [ 1515.861589][T29055] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1515.932258][T29055] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1516.042183][T29055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1516.748763][T29055] EXT4-fs (loop2): 1 truncate cleaned up [ 1516.754457][T29055] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1520.175493][T29120] netlink: 'syz.4.9605': attribute type 12 has an invalid length. [ 1522.894883][T29143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9611'. [ 1526.919203][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9634'. [ 1526.930078][T29179] netlink: 'syz.5.9634': attribute type 12 has an invalid length. [ 1527.438697][T29189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9638'. [ 1527.993463][T29183] loop3: detected capacity change from 0 to 40427 [ 1528.024794][T29183] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1528.066591][T29183] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1528.138809][T29183] F2FS-fs (loop3): invalid crc value [ 1528.162038][T29183] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1528.332555][T29202] loop6: detected capacity change from 0 to 512 [ 1528.385213][T29183] F2FS-fs (loop3): Start checkpoint disabled! [ 1528.442729][T29183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1528.495719][T29202] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1528.589957][T29202] EXT4-fs (loop6): inline encryption not supported [ 1528.627296][T29202] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1528.664838][T29202] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1528.715564][T29202] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1528.849674][T29202] EXT4-fs (loop6): 1 truncate cleaned up [ 1528.855374][T29202] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1528.941268][T29217] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1529.876358][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9650'. [ 1529.886331][T29230] netlink: 'syz.6.9650': attribute type 12 has an invalid length. [ 1531.020564][T26493] attempt to access beyond end of device [ 1531.020564][T26493] loop3: rw=2049, want=40976, limit=40427 [ 1531.628149][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1533.577994][T29252] loop5: detected capacity change from 0 to 40427 [ 1533.637805][T29252] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1533.697009][T29252] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1533.736263][T29252] F2FS-fs (loop5): invalid crc value [ 1533.769478][T29252] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1533.887427][T29252] F2FS-fs (loop5): Start checkpoint disabled! [ 1533.914865][T29252] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1534.397605][T29277] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1535.008366][T29282] netlink: 'syz.4.9671': attribute type 12 has an invalid length. [ 1536.657515][T25168] attempt to access beyond end of device [ 1536.657515][T25168] loop5: rw=2049, want=40976, limit=40427 [ 1538.299762][T29295] loop2: detected capacity change from 0 to 1024 [ 1539.799162][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9685'. [ 1541.047781][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9696'. [ 1541.057733][T29338] netlink: 'syz.3.9696': attribute type 12 has an invalid length. [ 1542.331362][T29359] loop2: detected capacity change from 0 to 1024 [ 1543.146193][T29371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1543.155911][T29371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1543.163665][T29371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1543.173514][T29371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1544.881581][T29394] loop4: detected capacity change from 0 to 512 [ 1545.026590][T29394] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1545.063259][T29394] EXT4-fs (loop4): inline encryption not supported [ 1545.102824][T29394] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1545.177180][T29394] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1545.184561][T29394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1545.242248][T29394] EXT4-fs (loop4): 1 truncate cleaned up [ 1545.290599][T29394] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1545.870000][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.876839][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.413349][T29428] loop2: detected capacity change from 0 to 1024 [ 1547.615464][T29432] loop2: detected capacity change from 0 to 512 [ 1547.760140][T29432] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1547.785978][T29432] EXT4-fs (loop2): inline encryption not supported [ 1547.853603][T29432] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1547.897244][T29432] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1547.937002][T29432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1548.097204][T29432] EXT4-fs (loop2): 1 truncate cleaned up [ 1548.102913][T29432] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1550.019199][T29459] loop3: detected capacity change from 0 to 1024 [ 1550.904598][T29468] loop2: detected capacity change from 0 to 512 [ 1551.246889][T29468] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1551.263368][T29468] EXT4-fs (loop2): inline encryption not supported [ 1551.286966][T29468] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1551.294296][T29468] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1551.327033][T29468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1551.426236][T29468] EXT4-fs (loop2): 1 truncate cleaned up [ 1551.447308][T29468] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1551.519472][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1553.297400][T29513] loop6: detected capacity change from 0 to 512 [ 1553.471572][T29513] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1553.557269][T29513] EXT4-fs (loop6): inline encryption not supported [ 1553.564406][T29513] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1553.571555][T29513] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1553.607233][T29513] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1554.327690][T29513] EXT4-fs (loop6): 1 truncate cleaned up [ 1554.367106][T29513] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1556.354361][T29553] loop5: detected capacity change from 0 to 512 [ 1556.455117][T29553] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1556.507122][T29553] EXT4-fs (loop5): inline encryption not supported [ 1556.513732][T29553] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1556.547095][T29553] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1556.597285][T29553] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1556.655336][T29553] EXT4-fs (loop5): 1 truncate cleaned up [ 1556.665129][T29553] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1558.746789][T29584] chnl_net:caif_netlink_parms(): no params data found [ 1559.229956][T29605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9799'. [ 1559.250617][T29605] netlink: 'syz.4.9799': attribute type 12 has an invalid length. [ 1559.292618][T29584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.349703][T29584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.399248][T29584] device bridge_slave_0 entered promiscuous mode [ 1559.450535][T29584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.489803][T29584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.546502][T29584] device bridge_slave_1 entered promiscuous mode [ 1559.927014][T29613] netlink: 'syz.5.9794': attribute type 12 has an invalid length. [ 1560.059869][T29584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.129835][T29584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.247340][T29584] team0: Port device team_slave_0 added [ 1560.286076][T29584] team0: Port device team_slave_1 added [ 1560.368318][T29584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.375312][T29584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.492818][T29584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.526033][T29584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.566893][T29584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.664211][T29584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.675403][T27825] Bluetooth: hci4: command 0x0409 tx timeout [ 1560.844121][T29584] device hsr_slave_0 entered promiscuous mode [ 1560.867950][T29584] device hsr_slave_1 entered promiscuous mode [ 1560.914771][T29584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1560.925046][T29584] Cannot create hsr debugfs directory [ 1561.581055][T29584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.815643][T29584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.029461][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.178239][T29584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.577452][T29584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1562.628717][T29584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1562.671129][T29584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1562.711663][T29584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1562.747458][T27825] Bluetooth: hci4: command 0x041b tx timeout [ 1563.023652][T29584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.075086][T26493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1563.093508][T26493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1563.121551][T29584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.167490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1563.181752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1563.217495][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.224626][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.257390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1563.298986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1563.328082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1563.357155][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.364296][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.397412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1563.507854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1563.658130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1563.735997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1563.948277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1563.990075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1564.029191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1564.052497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1564.065118][T29656] overlayfs: missing 'lowerdir' [ 1564.086123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1564.111903][T29656] loop6: detected capacity change from 0 to 512 [ 1564.119135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1564.148050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1564.240803][T29656] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1564.289013][T29656] EXT4-fs (loop6): inline encryption not supported [ 1564.344774][T29656] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1564.383052][T29656] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1564.423745][T29656] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1564.485686][T29656] EXT4-fs (loop6): 1 truncate cleaned up [ 1564.515667][T29656] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1564.593987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1564.611921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1564.683305][T29584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.797022][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1564.824882][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1564.837703][T22492] Bluetooth: hci4: command 0x040f tx timeout [ 1564.906019][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1564.927781][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1564.947298][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1564.969852][T24519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1565.029359][T29584] device veth0_vlan entered promiscuous mode [ 1565.081706][T29584] device veth1_vlan entered promiscuous mode [ 1565.128227][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1565.136498][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1565.184641][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1565.214070][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1565.246341][T29584] device veth0_macvtap entered promiscuous mode [ 1565.309195][T29584] device veth1_macvtap entered promiscuous mode [ 1565.378707][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.416252][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.454691][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.488768][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.521026][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.547815][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.570384][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.598437][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.619708][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.644018][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.671392][T29584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.700793][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1565.724427][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1565.769698][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.800501][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.830837][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.860712][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.892339][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.923387][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.959356][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.994007][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.024411][T29584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.055518][T29584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.077826][T29584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.103885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1566.139827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1566.173926][T29584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.195253][T29584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.224806][T29584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.252985][T29584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.509189][T26493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.557036][T26493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.621093][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1566.719877][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.752837][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.798246][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1566.917438][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 1572.448931][T29730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9846'. [ 1572.807501][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1578.404676][T29814] loop3: detected capacity change from 0 to 1024 [ 1582.827043][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9903'. [ 1582.840833][T29880] netlink: 'syz.5.9903': attribute type 12 has an invalid length. [ 1583.878788][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9909'. [ 1585.198125][T29891] chnl_net:caif_netlink_parms(): no params data found [ 1585.398377][T29891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.405657][T29891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.414366][T29891] device bridge_slave_0 entered promiscuous mode [ 1585.423281][T29891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.431251][T29891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.439956][T29891] device bridge_slave_1 entered promiscuous mode [ 1585.549707][T29891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.587904][T29891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1585.745006][T29891] team0: Port device team_slave_0 added [ 1585.782603][T29891] team0: Port device team_slave_1 added [ 1585.895952][T29891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.917391][T29891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.027141][T25213] Bluetooth: hci5: command 0x0409 tx timeout [ 1586.038549][T29891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.261803][T29891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.287031][T29891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.371945][T29891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.531701][T29891] device hsr_slave_0 entered promiscuous mode [ 1586.547744][T29891] device hsr_slave_1 entered promiscuous mode [ 1586.573213][T29891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1586.583134][T29891] Cannot create hsr debugfs directory [ 1587.010360][T29891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.201836][T29891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.358387][T29891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.553670][T29891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.830517][T29891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1587.880879][T29891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1587.918048][T29891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1587.966285][T29891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1588.107120][T25213] Bluetooth: hci5: command 0x041b tx timeout [ 1588.328246][T29891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.390305][T29891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.419663][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1588.447899][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1588.497224][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1588.526605][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1588.564619][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.572020][T12498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.643209][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1588.677910][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1588.757981][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.765104][T12498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.816627][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1588.856347][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1588.878425][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1588.918430][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1588.947495][T29959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9933'. [ 1588.948860][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1589.046046][T29891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1589.076935][T29891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.121054][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.137373][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1589.157852][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1589.197654][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1589.228067][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1589.248199][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1589.277280][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1589.313467][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1589.706747][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1589.725445][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1589.762526][T29891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.187665][T25213] Bluetooth: hci5: command 0x040f tx timeout [ 1590.396367][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1590.416541][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1590.520043][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1590.538556][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1590.555401][T29891] device veth0_vlan entered promiscuous mode [ 1590.565298][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1590.575382][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1590.591460][T29891] device veth1_vlan entered promiscuous mode [ 1590.726244][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1590.749244][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1590.787257][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1590.835804][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1590.871321][T29891] device veth0_macvtap entered promiscuous mode [ 1590.891812][T29988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1590.915815][T29891] device veth1_macvtap entered promiscuous mode [ 1591.002093][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.035831][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.082189][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.112514][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.147092][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.166900][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.195534][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.226612][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.266018][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.292892][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.324390][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.444193][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.466267][T29891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.497530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1591.546448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1591.586110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1591.628302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1591.688367][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.715673][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.726425][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.970445][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.004814][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.017194][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.027378][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.038086][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.048167][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.086103][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.125476][T29891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1592.138256][T30018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9951'. [ 1592.147960][T29891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.183971][T29891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.234802][T29891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.266982][T22465] Bluetooth: hci5: command 0x0419 tx timeout [ 1592.287761][T29891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.329194][T29891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.355357][T29891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.390377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1592.405832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1592.438825][T30018] netlink: 'syz.6.9951': attribute type 12 has an invalid length. [ 1592.635086][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.660828][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.719777][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1592.744658][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.765060][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.800423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1596.185848][T30085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1596.351716][T30085] netlink: 'syz.2.9976': attribute type 12 has an invalid length. [ 1599.660870][T15598] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.814775][T15598] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.887919][T30145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10002'. [ 1599.961665][T15598] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.019330][T30130] chnl_net:caif_netlink_parms(): no params data found [ 1600.164897][T15598] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.361426][T30130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.417842][T30130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.462282][T30130] device bridge_slave_0 entered promiscuous mode [ 1600.520752][T30130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.539176][T30130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.548571][T30130] device bridge_slave_1 entered promiscuous mode [ 1600.692980][T30130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.735641][T30130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.923539][T30130] team0: Port device team_slave_0 added [ 1600.932321][T30130] team0: Port device team_slave_1 added [ 1601.106419][T30130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.123950][T30130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.157251][T15503] Bluetooth: hci1: command 0x0409 tx timeout [ 1601.214327][T30130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.265013][T30130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.293369][T30130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.407197][T30130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.683228][T30130] device hsr_slave_0 entered promiscuous mode [ 1601.712248][T30130] device hsr_slave_1 entered promiscuous mode [ 1601.728915][T30130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1601.757222][T30130] Cannot create hsr debugfs directory [ 1602.617763][T15598] device hsr_slave_0 left promiscuous mode [ 1602.657404][T15598] device hsr_slave_1 left promiscuous mode [ 1602.672049][T15598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.718051][T15598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.776224][T15598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.804716][T15598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.839625][T15598] device bridge_slave_1 left promiscuous mode [ 1602.845875][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.884554][T15598] device bridge_slave_0 left promiscuous mode [ 1602.905786][T15598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.979721][T15598] device veth1_macvtap left promiscuous mode [ 1603.008451][T15598] device veth0_macvtap left promiscuous mode [ 1603.022521][T15598] device veth1_vlan left promiscuous mode [ 1603.047641][T15598] device veth0_vlan left promiscuous mode [ 1603.233001][T15120] Bluetooth: hci1: command 0x041b tx timeout [ 1604.410132][T30226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10019'. [ 1604.921400][T15598] team0 (unregistering): Port device team_slave_1 removed [ 1604.943687][T15598] team0 (unregistering): Port device team_slave_0 removed [ 1604.972443][T15598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.005872][T15598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.183614][T15598] bond0 (unregistering): Released all slaves [ 1605.262460][T30216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1605.272790][T30216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1605.280436][T30216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1605.302877][T30226] netlink: 'syz.4.10019': attribute type 12 has an invalid length. [ 1605.400959][T15120] Bluetooth: hci1: command 0x040f tx timeout [ 1605.632832][T30130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1605.699413][T30130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1605.738006][T30130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1605.756311][T30130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1606.102395][T30130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.183949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1606.208919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1606.282907][T30130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.322409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1606.340756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1606.399303][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.406422][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.479481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1606.503438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1606.543586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1606.577723][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.584918][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.623640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1606.670624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1606.700886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1606.739422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1606.778658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1606.829509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1606.898387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1606.929889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1606.954899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1607.013510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1607.044975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1607.087687][T30130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1607.309568][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.316711][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.472241][T25213] Bluetooth: hci1: command 0x0419 tx timeout [ 1607.694653][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1607.726733][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1607.801505][T30130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.329708][T30322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1608.918784][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1608.939067][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1609.020665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1609.035780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1609.083044][T30130] device veth0_vlan entered promiscuous mode [ 1609.103376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1609.123234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1609.195029][T30130] device veth1_vlan entered promiscuous mode [ 1609.273391][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1609.288548][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1609.326557][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1609.368754][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1609.430710][T30130] device veth0_macvtap entered promiscuous mode [ 1609.468980][T30130] device veth1_macvtap entered promiscuous mode [ 1609.559785][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.611731][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.642454][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.704246][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.740935][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.772005][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.799850][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.820785][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.861961][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.900231][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.933173][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.966926][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.028159][T30130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.038856][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1610.048262][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1610.100612][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1610.140569][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1610.184370][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.237789][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.279769][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.331737][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.382627][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.429134][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.473455][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.518375][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.586477][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.629938][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.670830][T30130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.732740][T30130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.773564][T30130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.806329][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1610.826430][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1610.879450][T30130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.927690][T30130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.936529][T30130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.997104][T30130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.283519][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.303698][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.372413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1611.395583][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.421789][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.471786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1611.941875][T15120] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1612.120276][T30392] netlink: 'syz.6.9990': attribute type 12 has an invalid length. [ 1612.317259][T15120] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1612.327817][T15120] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1612.499219][T15120] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1612.527968][T15120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.335455][T15120] usb 3-1: Product: syz [ 1613.339748][T15120] usb 3-1: Manufacturer: syz [ 1613.344365][T15120] usb 3-1: SerialNumber: syz [ 1613.367574][T30394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1613.390954][T15120] usblp0: Disabling reads from problematic bidirectional printer [ 1613.443371][T30417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10074'. [ 1614.289609][T15120] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1614.330791][T15120] usb 3-1: USB disconnect, device number 4 [ 1614.356757][T15120] usblp0: removed [ 1614.421329][T30426] loop2: detected capacity change from 0 to 1024 [ 1616.095866][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10087'. [ 1620.102041][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10121'. [ 1620.616972][T15322] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1621.007264][T15322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1621.032563][T15322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1621.217246][T15322] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1621.246762][T15322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.272458][T15322] usb 6-1: Product: syz [ 1621.276756][T15322] usb 6-1: Manufacturer: syz [ 1621.296972][T15322] usb 6-1: SerialNumber: syz [ 1621.346493][T30525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1621.384939][T15322] usblp0: Disabling reads from problematic bidirectional printer [ 1621.602018][T15322] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1621.665401][T15322] usb 6-1: USB disconnect, device number 5 [ 1621.695199][T15322] usblp0: removed [ 1624.280673][T30570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1624.403898][T30570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1624.412695][T30570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1626.196229][T30591] netlink: 'syz.3.10147': attribute type 12 has an invalid length. [ 1626.575618][T30595] loop6: detected capacity change from 0 to 1024 [ 1629.679711][T30661] loop3: detected capacity change from 0 to 1024 [ 1630.461296][T30672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1630.470861][T30672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1630.478474][T30672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1632.833559][T30712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1632.852305][T30712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1632.861111][T30712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1635.650219][T30745] netlink: 'syz.5.10214': attribute type 12 has an invalid length. [ 1636.637567][T30758] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1637.755749][T30772] loop2: detected capacity change from 0 to 256 [ 1639.599832][T30799] loop3: detected capacity change from 0 to 40427 [ 1639.649077][T30799] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1639.687754][T30799] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1639.773844][T30799] F2FS-fs (loop3): invalid crc value [ 1639.810556][T30799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1639.960081][T30799] F2FS-fs (loop3): Start checkpoint disabled! [ 1639.997358][T30799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1640.407440][T30840] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1641.366211][ T4400] attempt to access beyond end of device [ 1641.366211][ T4400] loop3: rw=2049, want=40976, limit=40427 [ 1642.644582][T30881] loop4: detected capacity change from 0 to 256 [ 1642.938772][ T4339] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1643.417317][ T4339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1643.436958][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1643.658056][ T4339] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1643.676973][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.691153][ T4339] usb 4-1: Product: syz [ 1643.696213][ T4339] usb 4-1: Manufacturer: syz [ 1643.702538][ T4339] usb 4-1: SerialNumber: syz [ 1643.757362][T30874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1643.788254][ T4339] usblp0: Disabling reads from problematic bidirectional printer [ 1644.144016][ T4339] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1644.156752][ T4339] usb 4-1: USB disconnect, device number 9 [ 1644.164576][ T4339] usblp0: removed [ 1644.569702][T30941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1644.794184][T30941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1644.803019][T30941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1646.047022][T15322] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1646.407214][T15322] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1646.428614][T15322] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.637245][T15322] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1646.646421][T15322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.683422][T15322] usb 5-1: Product: syz [ 1646.699118][T15322] usb 5-1: Manufacturer: syz [ 1646.703863][T15322] usb 5-1: SerialNumber: syz [ 1646.767403][T30970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1646.803829][T15322] usblp0: Disabling reads from problematic bidirectional printer [ 1647.020753][T15322] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1647.081336][T15322] usb 5-1: USB disconnect, device number 6 [ 1647.107622][T15322] usblp0: removed [ 1649.522414][T15322] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1651.127193][T15322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1651.156952][T15322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.377429][T15322] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1651.418393][T15322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.496703][T15322] usb 6-1: Product: syz [ 1651.511949][T15322] usb 6-1: Manufacturer: syz [ 1651.599595][T31101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1651.618586][T31101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1651.628159][T31101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1652.297973][T15322] usb 6-1: SerialNumber: syz [ 1652.320869][T15322] usb 6-1: can't set config #1, error -71 [ 1652.333732][T15322] usb 6-1: USB disconnect, device number 6 [ 1652.633669][T31118] loop5: detected capacity change from 0 to 256 [ 1654.765433][T31159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10386'. [ 1654.779998][T31159] netlink: 'syz.2.10386': attribute type 12 has an invalid length. [ 1661.839827][T31240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10410'. [ 1661.853954][T31240] netlink: 'syz.4.10410': attribute type 12 has an invalid length. [ 1663.316862][T31260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1663.336152][T31260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1663.345292][T31260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1668.749582][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.756635][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.066002][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10463'. [ 1670.353987][T31337] loop6: detected capacity change from 0 to 40427 [ 1670.459759][T31337] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1670.499721][T31337] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1670.542301][T31337] F2FS-fs (loop6): invalid crc value [ 1670.558783][T31360] loop5: detected capacity change from 0 to 256 [ 1670.588454][T31337] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1670.837322][T31337] F2FS-fs (loop6): Start checkpoint disabled! [ 1670.880459][T31337] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1671.285247][T31369] F2FS-fs (loop6) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1672.057715][T25168] attempt to access beyond end of device [ 1672.057715][T25168] loop6: rw=2049, want=40976, limit=40427 [ 1674.780549][T31406] tipc: Failed to remove unknown binding: 66,1,1/0:458159337/458159339 [ 1674.789706][T31406] tipc: Failed to remove unknown binding: 66,1,1/0:458159337/458159339 [ 1676.735047][T22465] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1677.102044][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10492'. [ 1677.107463][T22465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1677.136974][T22465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.347281][T22465] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1677.384687][T22465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.413554][T22465] usb 3-1: Product: syz [ 1677.425724][T22465] usb 3-1: Manufacturer: syz [ 1677.441085][T22465] usb 3-1: SerialNumber: syz [ 1677.487597][T31413] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1677.508930][T22465] usblp0: Disabling reads from problematic bidirectional printer [ 1677.706531][T31438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1677.725531][T31438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1677.734511][T31438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1678.439553][T22465] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1678.454866][T22465] usb 3-1: USB disconnect, device number 5 [ 1678.462566][T22465] usblp0: removed [ 1681.534170][T15322] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.080735][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10522'. [ 1682.140673][T31499] netlink: 'syz.2.10522': attribute type 12 has an invalid length. [ 1683.684592][T31527] loop5: detected capacity change from 0 to 1024 [ 1685.292802][T31565] loop5: detected capacity change from 0 to 256 [ 1685.443946][T31567] loop3: detected capacity change from 0 to 256 [ 1685.814835][T31578] loop3: detected capacity change from 0 to 1024 [ 1686.235564][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10560'. [ 1686.646082][T31594] loop5: detected capacity change from 0 to 256 [ 1686.953085][T31599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10568'. [ 1688.021673][T31621] loop5: detected capacity change from 0 to 1024 [ 1688.888170][T31629] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1690.241731][T31626] loop6: detected capacity change from 0 to 40427 [ 1690.309778][T31626] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1690.321229][T31626] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1690.347504][T31626] F2FS-fs (loop6): invalid crc value [ 1690.366575][T31626] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1690.587755][T31626] F2FS-fs (loop6): Start checkpoint disabled! [ 1690.650038][T31626] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1690.833781][T31630] chnl_net:caif_netlink_parms(): no params data found [ 1691.058811][T31651] F2FS-fs (loop6) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1691.713729][T22465] Bluetooth: hci0: command 0x0409 tx timeout [ 1691.894176][ T4563] attempt to access beyond end of device [ 1691.894176][ T4563] loop6: rw=2049, want=40976, limit=40427 [ 1691.975346][ T6707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.300755][ T6707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.380601][T31660] loop2: detected capacity change from 0 to 256 [ 1692.392352][T31630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.435007][T31630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.452921][T31630] device bridge_slave_0 entered promiscuous mode [ 1692.484106][T31630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.509044][T31630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.549440][T31630] device bridge_slave_1 entered promiscuous mode [ 1692.590753][ T6707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.779997][T31630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.927950][ T6707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.982608][T31630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.070802][T31630] team0: Port device team_slave_0 added [ 1693.112783][T31630] team0: Port device team_slave_1 added [ 1693.196341][T31630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.217085][T31630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.305595][T31630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.339132][T31630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.346111][T31630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.443611][T31630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.728497][T31630] device hsr_slave_0 entered promiscuous mode [ 1693.753129][T31630] device hsr_slave_1 entered promiscuous mode [ 1693.775284][T31630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1693.787297][T25213] Bluetooth: hci0: command 0x041b tx timeout [ 1693.801143][T31630] Cannot create hsr debugfs directory [ 1694.052969][T31678] loop6: detected capacity change from 0 to 40427 [ 1694.113872][T31678] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1694.197032][T31678] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1694.271993][T31678] F2FS-fs (loop6): invalid crc value [ 1694.308691][T31678] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1694.417252][T31678] F2FS-fs (loop6): Start checkpoint disabled! [ 1694.437171][T31678] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1694.449634][T31694] loop2: detected capacity change from 0 to 256 [ 1694.821607][T31701] F2FS-fs (loop6) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1695.429084][ T4563] attempt to access beyond end of device [ 1695.429084][ T4563] loop6: rw=2049, want=40976, limit=40427 [ 1695.867037][T22465] Bluetooth: hci0: command 0x040f tx timeout [ 1695.921356][T31630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1695.942633][T31630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1696.000600][T31630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1696.030973][T31630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1696.204211][ T6707] device hsr_slave_0 left promiscuous mode [ 1696.229684][ T6707] device hsr_slave_1 left promiscuous mode [ 1696.251207][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.279344][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.305057][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.320001][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.339004][ T6707] device bridge_slave_1 left promiscuous mode [ 1696.352145][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.380667][ T6707] device bridge_slave_0 left promiscuous mode [ 1696.403588][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.463124][ T6707] device veth1_macvtap left promiscuous mode [ 1696.474790][ T6707] device veth0_macvtap left promiscuous mode [ 1696.485251][ T6707] device veth1_vlan left promiscuous mode [ 1696.497395][ T6707] device veth0_vlan left promiscuous mode [ 1696.977727][T31739] 9pnet: Insufficient options for proto=fd [ 1697.127221][T31743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10616'. [ 1697.309606][ T6707] team0 (unregistering): Port device team_slave_1 removed [ 1697.349085][ T6707] team0 (unregistering): Port device team_slave_0 removed [ 1697.407198][ T6707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.436646][ T6707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.694396][ T6707] bond0 (unregistering): Released all slaves [ 1697.771027][T31745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10618'. [ 1697.947221][T25213] Bluetooth: hci0: command 0x0419 tx timeout [ 1698.027262][T31630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.109610][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1698.127394][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1698.138224][T31630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.181664][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1698.197774][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1698.227830][T24846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.234946][T24846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.288189][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1698.312029][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1698.343086][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1698.378685][T24846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.385964][T24846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.428782][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1698.504079][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1698.531935][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1698.608716][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1698.638226][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1698.660266][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1698.720968][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1698.748279][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1698.828994][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1698.869840][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1698.906253][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1698.960931][T31630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1699.536326][T31630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.555401][T25168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1699.575184][T25168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1699.627667][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1699.648438][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1699.689659][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1699.714879][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1699.744603][T31630] device veth0_vlan entered promiscuous mode [ 1699.769967][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1699.784129][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1699.822737][T31630] device veth1_vlan entered promiscuous mode [ 1699.898319][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1699.934672][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1699.957674][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1699.986777][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1700.059976][T31630] device veth0_macvtap entered promiscuous mode [ 1700.089602][T31630] device veth1_macvtap entered promiscuous mode [ 1700.198868][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.251395][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.286842][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.337125][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.367016][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.392506][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.427420][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.466971][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.494599][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.526950][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.565779][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.596953][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.638535][T31630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.650773][T30217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1700.681248][T30217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1700.730896][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1700.754979][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.787075][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1700.838473][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.866871][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1700.919290][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.980025][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.011828][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.042407][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.096972][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.147619][T31630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.186979][T31630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.233026][T31630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.273691][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1701.310858][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1701.340911][T31630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.370512][T31630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.397051][T31630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.450601][T31630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.566307][T31834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10651'. [ 1701.585381][T31834] netlink: 'syz.2.10651': attribute type 12 has an invalid length. [ 1701.676285][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.694981][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.739766][T30217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1701.769575][T30217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.787875][T30217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.809187][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1705.356192][T31877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10666'. [ 1705.366546][T31877] netlink: 'syz.4.10666': attribute type 12 has an invalid length. [ 1706.043613][T31873] chnl_net:caif_netlink_parms(): no params data found [ 1707.004165][T15120] Bluetooth: hci5: command 0x0406 tx timeout [ 1707.148371][T27825] Bluetooth: hci3: command 0x0409 tx timeout [ 1707.220544][T31873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.228155][T31873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.236518][T31873] device bridge_slave_0 entered promiscuous mode [ 1707.246371][T31873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.255092][T31873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.263690][T31873] device bridge_slave_1 entered promiscuous mode [ 1707.359875][T31873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.400995][T31873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.530234][T31873] team0: Port device team_slave_0 added [ 1707.581026][T31873] team0: Port device team_slave_1 added [ 1707.660472][T31873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.685253][T31873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.783028][T31873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.872213][T25168] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.905532][T31873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.913196][T31873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.011962][T31873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.109556][T25168] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.123286][T31924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10681'. [ 1708.190847][T31924] netlink: 'syz.2.10681': attribute type 12 has an invalid length. [ 1708.287053][T25168] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.350529][T31873] device hsr_slave_0 entered promiscuous mode [ 1708.373368][T31873] device hsr_slave_1 entered promiscuous mode [ 1708.420443][T25168] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.226956][T22465] Bluetooth: hci3: command 0x041b tx timeout [ 1709.951899][T25168] device hsr_slave_0 left promiscuous mode [ 1709.966016][T25168] device hsr_slave_1 left promiscuous mode [ 1709.997940][T25168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.019105][T25168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.037510][T25168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.044979][T25168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.087856][T25168] device bridge_slave_1 left promiscuous mode [ 1710.110147][T25168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.136210][T25168] device bridge_slave_0 left promiscuous mode [ 1710.158520][T25168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.196684][T25168] device veth1_macvtap left promiscuous mode [ 1710.229559][T25168] device veth0_macvtap left promiscuous mode [ 1710.235692][T25168] device veth1_vlan left promiscuous mode [ 1710.283174][T25168] device veth0_vlan left promiscuous mode [ 1711.307143][T15120] Bluetooth: hci3: command 0x040f tx timeout [ 1711.699157][T25168] team0 (unregistering): Port device team_slave_1 removed [ 1711.938947][T25168] team0 (unregistering): Port device team_slave_0 removed [ 1712.442613][T25168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.459363][T25168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.704203][T25168] bond0 (unregistering): Released all slaves [ 1712.802629][T31961] netlink: 'syz.2.10688': attribute type 12 has an invalid length. [ 1712.941431][T31873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1712.975876][T31873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1713.012592][T31873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1713.081269][T31873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1713.387108][T25213] Bluetooth: hci3: command 0x0419 tx timeout [ 1713.472045][T31873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.506216][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1713.520435][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1713.552453][T31873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1713.604237][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1713.623611][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1713.667462][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.674622][ T6707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1713.720909][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1713.787308][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1713.798093][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1713.816253][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.823441][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.882710][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1713.915533][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1713.949324][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1714.009679][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1714.074162][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1714.105028][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1714.142281][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1714.161792][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1714.223421][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1714.252221][T31873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1714.272016][T31873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1714.285236][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1714.329731][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1714.793480][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1714.813348][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1714.863027][T31873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.615880][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1715.647682][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1715.715208][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1715.725073][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1715.758088][T31873] device veth0_vlan entered promiscuous mode [ 1715.787873][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1715.796470][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1715.830004][T31873] device veth1_vlan entered promiscuous mode [ 1715.921251][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1715.959123][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1715.997803][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1716.037141][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1716.073119][T31873] device veth0_macvtap entered promiscuous mode [ 1716.107896][T31873] device veth1_macvtap entered promiscuous mode [ 1716.167561][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.206827][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.274893][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.307160][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.356844][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.396998][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.427306][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.470685][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.501524][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.566831][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.597269][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.636827][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.649436][T31873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.656340][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656362][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.656377][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656392][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.656406][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656421][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.656443][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656458][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.656471][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656486][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.656499][T31873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.656514][T31873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.660318][T31873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.666212][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1716.668338][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1716.669028][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1716.669641][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1716.671494][T31873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.671531][T31873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.671562][T31873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.672783][T31873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.874232][ T5278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.874315][ T5278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.878103][T24846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1716.990255][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.990341][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.994199][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1720.184272][T32090] loop4: detected capacity change from 0 to 40427 [ 1720.282503][T32090] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x1ffff [ 1720.324846][T32090] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 1720.388528][T32090] F2FS-fs (loop4): invalid crc value [ 1720.419282][T32090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1720.637327][T32090] F2FS-fs (loop4): Start checkpoint disabled! [ 1720.695646][T32090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1721.079842][T32123] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1722.160394][ T4563] attempt to access beyond end of device [ 1722.160394][ T4563] loop4: rw=2049, want=40976, limit=40427 [ 1722.326881][T24066] Bluetooth: hci1: command 0x0406 tx timeout [ 1724.649135][T32163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10760'. [ 1724.722261][T32166] loop6: detected capacity change from 0 to 256 [ 1726.225383][T32189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10763'. [ 1726.235391][T32189] netlink: 'syz.2.10763': attribute type 12 has an invalid length. [ 1726.470984][T32194] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10774'. [ 1726.682211][T32198] loop2: detected capacity change from 0 to 256 [ 1728.961814][T32255] loop5: detected capacity change from 0 to 256 [ 1730.189910][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.209860][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.008962][T32327] netlink: 'syz.4.10814': attribute type 12 has an invalid length. [ 1734.392667][T32333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10832'. [ 1734.994546][T32348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10838'. [ 1735.853681][ T26] audit: type=1326 audit(1763158953.494:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32378 comm="syz.6.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1735.929054][ T26] audit: type=1326 audit(1763158953.494:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32378 comm="syz.6.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1736.018968][ T26] audit: type=1326 audit(1763158953.514:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32378 comm="syz.6.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1736.097020][ T26] audit: type=1326 audit(1763158953.554:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32382 comm="syz.6.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8ea2bf85 code=0x7ffc0000 [ 1736.170351][ T26] audit: type=1326 audit(1763158953.704:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32382 comm="syz.6.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1736.362101][T32398] loop3: detected capacity change from 0 to 256 [ 1737.354936][T32424] loop2: detected capacity change from 0 to 512 [ 1741.158264][T32484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10902'. [ 1741.174301][T32484] netlink: 'syz.4.10902': attribute type 12 has an invalid length. [ 1745.816261][T32511] loop3: detected capacity change from 0 to 40427 [ 1745.898572][T32511] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1745.997499][T32511] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1746.095882][T32511] F2FS-fs (loop3): invalid crc value [ 1746.151446][T32511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1747.054734][T32511] F2FS-fs (loop3): Start checkpoint disabled! [ 1749.853439][T32604] loop3: detected capacity change from 0 to 40427 [ 1749.888636][T32604] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1749.917340][T32604] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1749.971708][T32604] F2FS-fs (loop3): invalid crc value [ 1749.989351][T32604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1750.127509][T32604] F2FS-fs (loop3): Start checkpoint disabled! [ 1750.177485][T32604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1751.537846][T32620] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1752.367683][ T4273] attempt to access beyond end of device [ 1752.367683][ T4273] loop3: rw=2049, want=40976, limit=40427 [ 1752.769881][T32629] netlink: 'syz.2.10954': attribute type 12 has an invalid length. [ 1755.884453][T32672] loop2: detected capacity change from 0 to 512 [ 1756.045922][T32672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1756.291050][T32672] EXT4-fs (loop2): 1 orphan inode deleted [ 1756.296951][T32672] EXT4-fs (loop2): 1 truncate cleaned up [ 1756.303154][T32672] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 1756.482142][T32672] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10974'. [ 1756.701048][T32672] device gretap0 entered promiscuous mode [ 1758.486598][T32694] loop3: detected capacity change from 0 to 256 [ 1759.241950][T32712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1759.387557][T32714] netlink: 'syz.2.10979': attribute type 12 has an invalid length. [ 1759.604599][T32719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1759.620415][T32719] netlink: 'syz.4.10988': attribute type 12 has an invalid length. [ 1760.579463][ T26] audit: type=1326 audit(1763158978.224:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32726 comm="syz.4.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1760.652791][ T26] audit: type=1326 audit(1763158978.274:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32726 comm="syz.4.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1761.041287][T32738] loop3: detected capacity change from 0 to 256 [ 1762.192749][ T26] audit: type=1326 audit(1763158979.834:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32750 comm="syz.5.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1762.294947][ T26] audit: type=1326 audit(1763158979.894:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32750 comm="syz.5.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1762.717424][T32765] loop2: detected capacity change from 0 to 512 [ 1763.029610][ T304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1764.303633][ T316] loop2: detected capacity change from 0 to 512 [ 1767.682113][ T378] loop3: detected capacity change from 0 to 256 [ 1769.678110][ T26] audit: type=1326 audit(1763158987.324:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=390 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1769.786831][ T26] audit: type=1326 audit(1763158987.324:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=390 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1771.010245][ T406] overlayfs: failed to resolve './bus': -2 [ 1773.216924][ T26] audit: type=1326 audit(1763158990.854:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=447 comm="syz.4.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1773.273546][ T26] audit: type=1326 audit(1763158990.894:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=447 comm="syz.4.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1773.965749][ T471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1774.010204][ T471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1774.046300][ T473] loop6: detected capacity change from 0 to 256 [ 1775.295136][ T501] overlayfs: missing 'lowerdir' [ 1776.283963][ T525] overlayfs: missing 'lowerdir' [ 1776.452026][ T26] audit: type=1326 audit(1763158994.094:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.6.11103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1776.536909][ T26] audit: type=1326 audit(1763158994.124:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.6.11103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1777.154525][ T541] loop5: detected capacity change from 0 to 512 [ 1777.430429][ T541] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1777.651007][ T541] EXT4-fs (loop5): 1 orphan inode deleted [ 1777.656918][ T541] EXT4-fs (loop5): 1 truncate cleaned up [ 1777.662644][ T541] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 1779.301638][ T26] audit: type=1326 audit(1763158996.944:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=552 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1779.397058][ T26] audit: type=1326 audit(1763158996.964:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=552 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1779.460850][ T26] audit: type=1326 audit(1763158996.964:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=552 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1779.566940][ T26] audit: type=1326 audit(1763158996.974:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=552 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1779.665967][ T26] audit: type=1326 audit(1763158997.084:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a89ae4f85 code=0x7ffc0000 [ 1779.729822][ T563] overlayfs: failed to resolve './bus': -2 [ 1779.807043][ T26] audit: type=1326 audit(1763158997.234:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.5.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1780.857238][ T26] audit: type=1326 audit(1763158998.504:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=605 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1780.956099][ T26] audit: type=1326 audit(1763158998.544:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=605 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1781.657592][ T618] netlink: 'syz.2.11137': attribute type 12 has an invalid length. [ 1784.416454][ T26] audit: type=1326 audit(1763159002.054:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=637 comm="syz.2.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1784.490018][ T26] audit: type=1326 audit(1763159002.084:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=637 comm="syz.2.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1788.326535][ T26] audit: type=1326 audit(1763159005.964:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.2.11171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1788.423126][ T26] audit: type=1326 audit(1763159006.004:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.2.11171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1788.541698][ T26] audit: type=1326 audit(1763159006.004:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.2.11171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1788.620431][ T26] audit: type=1326 audit(1763159006.014:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=700 comm="syz.2.11171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98a15bcf85 code=0x7ffc0000 [ 1788.657375][ T26] audit: type=1326 audit(1763159006.164:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=700 comm="syz.2.11171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1790.442023][ T738] overlayfs: missing 'lowerdir' [ 1791.630953][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.638553][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.856566][ T725] loop5: detected capacity change from 0 to 40427 [ 1791.926326][ T725] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1791.945633][ T725] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1792.026109][ T725] F2FS-fs (loop5): invalid crc value [ 1792.112015][ T725] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1792.899371][ T725] F2FS-fs (loop5): Start checkpoint disabled! [ 1793.615832][ T776] overlayfs: missing 'lowerdir' [ 1794.812997][ T791] overlayfs: missing 'lowerdir' [ 1794.845665][ T26] audit: type=1326 audit(1763159012.484:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=790 comm="syz.5.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1794.926942][ T26] audit: type=1326 audit(1763159012.504:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=790 comm="syz.5.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1795.050531][ T26] audit: type=1326 audit(1763159012.514:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=790 comm="syz.5.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1795.099276][ T26] audit: type=1326 audit(1763159012.544:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.5.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a89ae4f85 code=0x7ffc0000 [ 1795.216934][ T26] audit: type=1326 audit(1763159012.694:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.5.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1796.414537][ T825] overlayfs: missing 'lowerdir' [ 1796.678377][ T807] loop2: detected capacity change from 0 to 40427 [ 1796.719164][ T807] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x1ffff [ 1796.766008][ T807] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 1796.859674][ T807] F2FS-fs (loop2): invalid crc value [ 1796.888292][ T807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1797.086265][ T807] F2FS-fs (loop2): Start checkpoint disabled! [ 1797.147779][ T807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1797.185528][ T26] audit: type=1326 audit(1763159014.824:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=841 comm="syz.4.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1797.233372][ T846] overlayfs: missing 'lowerdir' [ 1797.321386][ T26] audit: type=1326 audit(1763159014.824:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=841 comm="syz.4.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1797.542013][ T851] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1798.391492][T24846] attempt to access beyond end of device [ 1798.391492][T24846] loop2: rw=2049, want=40976, limit=40427 [ 1803.553567][ T944] overlayfs: missing 'lowerdir' [ 1803.942490][ T951] loop2: detected capacity change from 0 to 256 [ 1803.970292][ T934] loop3: detected capacity change from 0 to 40427 [ 1804.076524][ T934] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1804.106862][ T934] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1804.164210][ T934] F2FS-fs (loop3): invalid crc value [ 1804.207683][ T934] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1804.402598][ T934] F2FS-fs (loop3): Start checkpoint disabled! [ 1804.458506][ T934] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1804.855553][ T963] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1805.637709][T26493] attempt to access beyond end of device [ 1805.637709][T26493] loop3: rw=2049, want=40976, limit=40427 [ 1806.975776][ T982] overlayfs: missing 'lowerdir' [ 1807.823300][ T1000] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1807.854950][ T1000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1808.063831][ T26] audit: type=1326 audit(1763159025.704:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1005 comm="syz.2.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1808.160172][ T26] audit: type=1326 audit(1763159025.734:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1005 comm="syz.2.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1808.389804][ T1014] overlayfs: missing 'lowerdir' [ 1808.711907][ T1018] loop2: detected capacity change from 0 to 256 [ 1809.055238][ T1022] loop2: detected capacity change from 0 to 256 [ 1809.792373][ T1049] overlayfs: missing 'lowerdir' [ 1809.803228][ T26] audit: type=1326 audit(1763159027.444:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.6.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1809.906863][ T26] audit: type=1326 audit(1763159027.474:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.6.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1809.919162][ T1052] loop2: detected capacity change from 0 to 256 [ 1810.056642][ T1064] loop3: detected capacity change from 0 to 256 [ 1811.409317][ T1087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11316'. [ 1811.424328][ T1087] netlink: 'syz.5.11316': attribute type 12 has an invalid length. [ 1812.274734][ T26] audit: type=1326 audit(1763159029.914:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.5.11323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1814.186969][T22465] Bluetooth: hci0: command 0x0406 tx timeout [ 1814.593616][ T26] audit: type=1326 audit(1763159032.234:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.5.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1814.672917][ T26] audit: type=1326 audit(1763159032.234:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.5.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1814.778401][ T1124] overlayfs: missing 'lowerdir' [ 1815.261612][ T1136] loop5: detected capacity change from 0 to 256 [ 1816.263628][ T1112] loop6: detected capacity change from 0 to 40427 [ 1816.442768][ T1112] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 1816.507114][ T1112] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1816.592334][ T1112] F2FS-fs (loop6): invalid crc value [ 1816.659031][ T1112] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1818.587308][ T1160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1818.796994][ T1160] netlink: 'syz.4.11342': attribute type 12 has an invalid length. [ 1819.280952][ T1112] F2FS-fs (loop6): Start checkpoint disabled! [ 1820.852379][ T26] audit: type=1326 audit(1763159038.494:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1198 comm="syz.3.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1820.945939][ T26] audit: type=1326 audit(1763159038.504:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1198 comm="syz.3.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1822.237349][ T1211] loop5: detected capacity change from 0 to 40427 [ 1822.366265][ T1211] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1822.397320][ T1211] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1822.438784][ T1211] F2FS-fs (loop5): invalid crc value [ 1822.472139][ T1211] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1822.632685][ T1211] F2FS-fs (loop5): Start checkpoint disabled! [ 1822.682880][ T1211] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1823.061921][ T1227] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1823.786662][ T144] attempt to access beyond end of device [ 1823.786662][ T144] loop5: rw=2049, want=40976, limit=40427 [ 1828.586885][ T26] audit: type=1326 audit(1763159046.224:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1282 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1828.666442][ T26] audit: type=1326 audit(1763159046.224:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1282 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1828.728397][ T26] audit: type=1326 audit(1763159046.254:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1282 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1828.867358][ T26] audit: type=1326 audit(1763159046.274:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1282 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1828.929993][ T26] audit: type=1326 audit(1763159046.274:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1282 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1828.956865][ T26] audit: type=1326 audit(1763159046.284:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1285 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8ea2bf85 code=0x7ffc0000 [ 1829.003611][ T26] audit: type=1326 audit(1763159046.544:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1285 comm="syz.6.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1829.119876][ T1292] loop6: detected capacity change from 0 to 512 [ 1829.240097][ T1292] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1829.326228][ T1292] EXT4-fs (loop6): 1 orphan inode deleted [ 1829.335693][ T1292] EXT4-fs (loop6): 1 truncate cleaned up [ 1829.342084][ T1292] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 1829.557655][T27822] Bluetooth: hci3: command 0x0406 tx timeout [ 1830.207050][ T26] audit: type=1326 audit(1763159047.834:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1313 comm="syz.2.11398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1830.715982][ T26] audit: type=1326 audit(1763159047.834:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1313 comm="syz.2.11398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1836.941566][ T1375] loop6: detected capacity change from 0 to 256 [ 1837.629204][ T1404] loop3: detected capacity change from 0 to 256 [ 1837.683779][ T26] audit: type=1326 audit(1763159055.324:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1411 comm="syz.5.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1838.061094][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11436'. [ 1838.219040][ T1427] netlink: 'syz.4.11436': attribute type 12 has an invalid length. [ 1839.627131][ T26] audit: type=1326 audit(1763159057.274:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.2.11449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a158a6c9 code=0x7ffc0000 [ 1839.809737][ T26] audit: type=1326 audit(1763159057.454:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1470 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1839.916626][ T26] audit: type=1326 audit(1763159057.484:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1470 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1840.009356][ T26] audit: type=1326 audit(1763159057.484:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1470 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1840.126871][ T26] audit: type=1326 audit(1763159057.484:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1477 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa813437f85 code=0x7ffc0000 [ 1840.222223][ T26] audit: type=1326 audit(1763159057.504:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1470 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1840.316431][ T26] audit: type=1326 audit(1763159057.634:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1477 comm="syz.4.11460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1840.695632][ T26] audit: type=1326 audit(1763159058.334:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1840.780916][ T26] audit: type=1326 audit(1763159058.374:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa8134056c9 code=0x7ffc0000 [ 1841.679199][ T1536] loop2: detected capacity change from 0 to 256 [ 1842.063670][ T1540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11488'. [ 1842.078987][ T1540] netlink: 'syz.5.11488': attribute type 12 has an invalid length. [ 1843.289279][ T1551] loop2: detected capacity change from 0 to 256 [ 1844.141656][ T1565] loop3: detected capacity change from 0 to 256 [ 1845.233299][ T1590] loop3: detected capacity change from 0 to 512 [ 1846.988698][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1846.988714][ T26] audit: type=1326 audit(1763159064.634:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1624 comm="syz.3.11527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1847.177822][ T26] audit: type=1326 audit(1763159064.684:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1624 comm="syz.3.11527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1847.238889][ T26] audit: type=1326 audit(1763159064.704:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1624 comm="syz.3.11527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1847.348200][ T26] audit: type=1326 audit(1763159064.744:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.3.11527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb16b518f85 code=0x7ffc0000 [ 1847.419410][ T26] audit: type=1326 audit(1763159064.894:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.3.11527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb16b4e66c9 code=0x7ffc0000 [ 1847.644267][ T1640] loop4: detected capacity change from 0 to 256 [ 1851.314577][ T1707] loop6: detected capacity change from 0 to 512 [ 1853.069621][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.076900][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.831905][ T1727] loop5: detected capacity change from 0 to 40427 [ 1854.105732][ T1727] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1854.322158][ T1727] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1854.622564][ T1727] F2FS-fs (loop5): invalid crc value [ 1854.674706][ T1727] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1854.744265][ T1727] F2FS-fs (loop5): Start checkpoint disabled! [ 1854.806921][ T1727] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1855.138647][ T1771] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1855.826540][ T1773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.834653][ T1773] IPv6: NLM_F_CREATE should be set when creating new route [ 1856.152970][ T1779] loop4: detected capacity change from 0 to 512 [ 1856.167758][T25168] attempt to access beyond end of device [ 1856.167758][T25168] loop5: rw=2049, want=40976, limit=40427 [ 1856.235435][ T1779] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1856.260345][ T1779] EXT4-fs (loop4): inline encryption not supported [ 1856.305782][ T1779] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1856.325723][ T1779] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1856.349400][ T1779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1856.383822][ T1779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1856.417316][ T1779] System zones: 1-12 [ 1856.459984][ T1779] EXT4-fs (loop4): 1 truncate cleaned up [ 1856.465775][ T1779] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 1856.951058][ T1779] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1857.229024][ T1809] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11596'. [ 1857.938456][ T1829] loop3: detected capacity change from 0 to 512 [ 1858.200371][ T1833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11606'. [ 1858.255650][ T1833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11606'. [ 1858.444475][ T1813] loop5: detected capacity change from 0 to 40427 [ 1858.508559][ T1813] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 1858.551371][ T1813] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1858.617173][ T1813] F2FS-fs (loop5): invalid crc value [ 1858.661979][ T1813] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1858.925260][ T1813] F2FS-fs (loop5): Start checkpoint disabled! [ 1859.001949][ T1813] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1859.355215][ T1855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11612'. [ 1859.365298][ T1855] netlink: 'syz.6.11612': attribute type 12 has an invalid length. [ 1860.392265][ T1856] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1861.420301][T26300] attempt to access beyond end of device [ 1861.420301][T26300] loop5: rw=2049, want=45104, limit=40427 [ 1861.913952][ T1870] 9pnet: Insufficient options for proto=fd [ 1862.797527][ T1889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11623'. [ 1862.813924][ T1889] netlink: 'syz.4.11623': attribute type 12 has an invalid length. [ 1863.922308][ T26] audit: type=1326 audit(1763159081.564:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1901 comm="syz.6.11629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1864.046415][ T26] audit: type=1326 audit(1763159081.564:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1901 comm="syz.6.11629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1864.130739][ T26] audit: type=1326 audit(1763159081.574:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1901 comm="syz.6.11629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1864.222999][ T26] audit: type=1326 audit(1763159081.604:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.6.11629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8ea2bf85 code=0x7ffc0000 [ 1864.306958][ T26] audit: type=1326 audit(1763159081.754:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.6.11629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1f8e9f96c9 code=0x7ffc0000 [ 1865.058819][ T1921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11636'. [ 1865.074489][ T1921] netlink: 'syz.6.11636': attribute type 12 has an invalid length. [ 1865.561515][ T1892] loop4: detected capacity change from 0 to 40427 [ 1865.657860][ T1892] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x1ffff [ 1865.727022][ T1892] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 1865.744395][ T1892] F2FS-fs (loop4): invalid crc value [ 1865.808952][ T1892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1865.967194][ T1892] F2FS-fs (loop4): Start checkpoint disabled! [ 1866.041832][ T1892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1866.665828][ T26] audit: type=1326 audit(1763159084.304:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1940 comm="syz.5.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1866.737168][ T26] audit: type=1326 audit(1763159084.334:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1940 comm="syz.5.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1866.812929][ T26] audit: type=1326 audit(1763159084.334:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1940 comm="syz.5.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1866.925145][ T26] audit: type=1326 audit(1763159084.344:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1940 comm="syz.5.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1866.987351][ T26] audit: type=1326 audit(1763159084.344:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1940 comm="syz.5.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a89ab26c9 code=0x7ffc0000 [ 1867.013913][ T1946] 9pnet: Insufficient options for proto=fd [ 1871.802794][ T1983] loop3: detected capacity change from 0 to 40427 [ 1871.943012][ T1983] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 1871.986984][ T1983] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1872.056975][ T1983] F2FS-fs (loop3): invalid crc value [ 1872.065995][ T1983] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1872.289681][ T1983] F2FS-fs (loop3): Start checkpoint disabled! [ 1872.316921][ T1983] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1872.719187][ T2021] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 1873.428269][T25168] attempt to access beyond end of device [ 1873.428269][T25168] loop3: rw=2049, want=40976, limit=40427 [ 1875.151609][ T2025] chnl_net:caif_netlink_parms(): no params data found [ 1876.177884][ T2025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.184994][ T2025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.258288][ T2025] device bridge_slave_0 entered promiscuous mode [ 1876.321843][ T2025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.336990][ T2025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.348017][T27822] Bluetooth: hci2: command 0x0409 tx timeout [ 1876.355395][ T2025] device bridge_slave_1 entered promiscuous mode [ 1876.560741][ T2025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.572577][ T2025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.662332][ T2025] team0: Port device team_slave_0 added [ 1876.708282][ T2025] team0: Port device team_slave_1 added [ 1876.779174][ T2025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.786160][ T2025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.856845][ T2025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.903955][ T2025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.927085][ T2025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.976855][ T2025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.085060][ T2025] device hsr_slave_0 entered promiscuous mode [ 1877.109161][ T2025] device hsr_slave_1 entered promiscuous mode [ 1877.115890][ T2025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1877.124156][ T2025] Cannot create hsr debugfs directory [ 1877.275940][ T2025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1877.285822][ T2025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1877.295697][ T2025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1877.305504][ T2025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1877.395778][ T2025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.424348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1877.444001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1877.461720][ T2025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.486016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1877.495720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1877.504514][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.511647][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.528615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1877.538140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1877.548087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1877.556585][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.563696][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.576232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1877.598016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1877.607653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1877.618910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1877.628444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1877.637525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1877.654541][ T2025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1877.666287][ T2025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1877.682800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1877.691646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1877.700398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1877.709742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1877.718614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1877.727190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1877.853284][ T2025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1877.862040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1877.876938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1878.058987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1878.075908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1878.110423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1878.129458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1878.147602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1878.156237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1878.176910][ T2025] device veth0_vlan entered promiscuous mode [ 1878.200233][ T2025] device veth1_vlan entered promiscuous mode [ 1878.233740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1878.244493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1878.253428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1878.265571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1878.284924][ T2025] device veth0_macvtap entered promiscuous mode [ 1878.305427][ T2025] device veth1_macvtap entered promiscuous mode [ 1878.326006][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.347303][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.369843][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.388679][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.405720][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.418738][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.436400][T22492] Bluetooth: hci2: command 0x041b tx timeout [ 1878.445462][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.463145][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.475839][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.487452][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.500231][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.521478][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.538268][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.556367][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.578510][ T2025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1878.588144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1878.598281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1878.610603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1878.620039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1878.632974][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.644067][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.654239][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.665827][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.678320][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.689186][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.699406][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.710785][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.723611][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.734715][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.744793][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.755874][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.766152][ T2025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.785257][ T2025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.806372][ T2025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1878.824998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1878.837862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1878.851036][ T2025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.859906][ T2025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.869788][ T2025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.880262][ T2025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.995311][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.028010][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.028290][T24518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.044814][T24518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.060142][T24518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1879.069158][T24518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1879.472980][ T2078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11674'. [ 1879.489112][ T2078] netlink: 'syz.7.11674': attribute type 12 has an invalid length. [ 1880.507700][T27825] Bluetooth: hci2: command 0x040f tx timeout [ 1882.097957][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.156148][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.233495][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.284860][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.586861][T22492] Bluetooth: hci2: command 0x0419 tx timeout [ 1883.081094][ T144] device hsr_slave_0 left promiscuous mode [ 1883.088616][ T144] device hsr_slave_1 left promiscuous mode [ 1883.095413][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.103074][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.111110][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.118791][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.126400][ T144] device bridge_slave_1 left promiscuous mode [ 1883.133232][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.142102][ T144] device bridge_slave_0 left promiscuous mode [ 1883.149322][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.165669][ T144] device veth1_macvtap left promiscuous mode [ 1883.171882][ T144] device veth0_macvtap left promiscuous mode [ 1883.180748][ T144] device veth1_vlan left promiscuous mode [ 1883.186644][ T144] device veth0_vlan left promiscuous mode [ 1883.355960][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1883.371809][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1883.390083][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.405086][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.475248][ T144] bond0 (unregistering): Released all slaves [ 1914.508836][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.515857][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.949102][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.956442][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1998.516955][T27825] Bluetooth: hci2: command 0x0406 tx timeout [ 2037.390068][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.397203][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.828686][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.835730][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.268764][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.275838][ T1420] ieee802154 phy1 wpan1: encryption failed: -22