last executing test programs: 1m2.811503002s ago: executing program 1 (id=175): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x1) 57.259782229s ago: executing program 1 (id=184): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 53.837401116s ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 52.438406903s ago: executing program 1 (id=194): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x1) 48.219499555s ago: executing program 1 (id=201): r0 = socket(0x1e, 0x805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) 44.971488208s ago: executing program 1 (id=210): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 29.88161659s ago: executing program 32 (id=210): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 17.931260582s ago: executing program 4 (id=262): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) 16.761035525s ago: executing program 4 (id=264): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x8000000, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0xffffffff}}) syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) flistxattr(r3, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12.284035912s ago: executing program 0 (id=272): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x126, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaab3fcfbd08d086dd600a843500f00601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0020000"], 0x0) 12.153164644s ago: executing program 0 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4040014, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000005740)=""/4082, 0xff2}, {&(0x7f0000001d80)=""/149, 0x95}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f00000023c0)=""/141, 0x8d}, {&(0x7f0000000b40)=""/280, 0x118}], 0x7}, 0x802}], 0x2, 0x40002100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='btrfs_sync_fs\x00', r4}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000000)) 10.560007625s ago: executing program 0 (id=277): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) socket$inet6_sctp(0xa, 0x1, 0x84) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) socket(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 10.516860466s ago: executing program 4 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x4d) getdents(r6, &(0x7f0000000080)=""/255, 0xff) 7.829715968s ago: executing program 3 (id=282): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write(r1, &(0x7f00000003c0)="de3de83902c51cc4fee90770ba15ebb97d56510c83975578325bc21127d9f41be08ef1a16006167f039f1d68aeec83596422c2bace6202f8dc00c997e93ce80f46e12a20d0248ad446aa1449bb0b4f565432f14e889078c66f5ef1863a17", 0x5e) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000004, &(0x7f0000000340)=ANY=[], 0x1, 0x380, &(0x7f0000000940)="$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") syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 7.829453308s ago: executing program 4 (id=283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) 6.950632395s ago: executing program 2 (id=284): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 6.69047565s ago: executing program 4 (id=285): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x770f, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r0, 0x0, 0x0, 0x7c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) fsmount(0xffffffffffffffff, 0x0, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/pid_for_children\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$pokeuser(0x6, r1, 0xfff, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}]}}}]}, 0x3c}}, 0x0) 6.589585522s ago: executing program 0 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4040014, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000005740)=""/4082, 0xff2}, {&(0x7f0000001d80)=""/149, 0x95}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f00000023c0)=""/141, 0x8d}, {&(0x7f0000000b40)=""/280, 0x118}], 0x7}, 0x802}], 0x2, 0x40002100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='btrfs_sync_fs\x00', r4}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000000)) 5.587587601s ago: executing program 2 (id=287): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000300)={0x24, @short={0x2, 0xffff}}, 0x14) 5.532926732s ago: executing program 2 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) 4.60902702s ago: executing program 3 (id=289): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82efaa81fd9b", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f00000001c0)="805ef1544a9d36cb7decc8cd3886fe1a0bc59d4af9ed", 0x16, 0x3b00, 0x0, 0x0) 3.467452792s ago: executing program 2 (id=290): r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 3.04735894s ago: executing program 0 (id=291): openat(0xffffffffffffff9c, 0x0, 0x88240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.452674682s ago: executing program 3 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) eventfd2(0x1, 0x1) 1.359288723s ago: executing program 3 (id=293): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') getdents(r0, 0x0, 0x48) 1.222232186s ago: executing program 3 (id=294): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") unlink(0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "acbd6d7f2d4899b625b9e599152b3fff2e134e484ff2e7213c0d301b40286f033dbdb1920f9ba7c7b946749edde65bf3cb6b45"}, 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xab7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 1.045954769s ago: executing program 4 (id=295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) 465.55494ms ago: executing program 0 (id=296): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 274.334684ms ago: executing program 2 (id=297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="180000000300430000000000fffffeff18000000ff030000000000000200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2010002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, &(0x7f0000000040)) 81.496008ms ago: executing program 3 (id=298): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x8, 0x1, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000045, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r6, 0x40024, 0x8d85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf2334}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20004846) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}}, 0x100) 0s ago: executing program 2 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. syzkaller login: [ 59.563352][ T4171] cgroup: Unknown subsys name 'net' [ 59.713176][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.241758][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.695125][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.752725][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 62.840738][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.848754][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.857187][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.883675][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 62.896299][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903716][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.911781][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.997137][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.008299][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.022212][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.029802][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.038146][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.045673][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.064760][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.082125][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.089395][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.097888][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.186734][ T4191] team0: Port device team_slave_0 added [ 63.193287][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.200542][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.208889][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.218162][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.237118][ T4191] team0: Port device team_slave_1 added [ 63.254446][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.261780][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.270413][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.279659][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.328656][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.335820][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.344037][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.382374][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.389829][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.397896][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.405662][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.412896][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.439774][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.453229][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.464692][ T4193] team0: Port device team_slave_0 added [ 63.471736][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.478976][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.487268][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.502407][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.509634][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.535948][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.549252][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.560193][ T4193] team0: Port device team_slave_1 added [ 63.566089][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.574037][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.582356][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.633606][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.656065][ T4199] team0: Port device team_slave_0 added [ 63.680758][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.697858][ T4199] team0: Port device team_slave_1 added [ 63.707519][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.714491][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.722270][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.729464][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.755452][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.767973][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.774959][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.801100][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.822801][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.861018][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.907734][ T4184] team0: Port device team_slave_0 added [ 63.914122][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.921246][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.947939][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.981353][ T4185] team0: Port device team_slave_0 added [ 63.995627][ T4184] team0: Port device team_slave_1 added [ 64.002600][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.009679][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.036855][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.056207][ T4185] team0: Port device team_slave_1 added [ 64.065887][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.073095][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.080316][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.088962][ T4193] Cannot create hsr debugfs directory [ 64.114259][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.122312][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.148718][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.185846][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.193253][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.220001][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.235490][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.242786][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.268856][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.311321][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.318453][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.344974][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.388580][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.395651][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.402765][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.406684][ T1346] Bluetooth: hci0: command 0x0409 tx timeout [ 64.409760][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.414897][ T1346] Bluetooth: hci1: command 0x0409 tx timeout [ 64.427859][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.435542][ T4199] Cannot create hsr debugfs directory [ 64.477003][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 64.496880][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.509599][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.519293][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.527626][ T4184] Cannot create hsr debugfs directory [ 64.585561][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.592782][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.600006][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.607640][ T4185] Cannot create hsr debugfs directory [ 64.788565][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.810296][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.827956][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.849045][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.899073][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.919035][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.933844][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.957465][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.994524][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.013961][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.034972][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.045167][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.113550][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.123699][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.138497][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.157059][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.174287][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.199804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.210906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.222632][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.272815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.283182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.292664][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.299956][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.312097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.321843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.332333][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.339509][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.348529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.363292][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.378083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.392446][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.428447][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.435755][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.446932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.455699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.465644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.477509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.485269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.494080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.509809][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.524202][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.539410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.548714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.561311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.570881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.579968][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.587134][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.601385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.610567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.619586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.634726][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.677219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.685910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.695717][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.702852][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.711683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.720536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.729083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.739426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.750646][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.788890][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.804441][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.814109][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.822468][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.833598][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.849654][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.863553][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.872699][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.881772][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.890698][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.899803][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.923800][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.938328][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.948341][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.968628][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.988563][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.995982][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.005692][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.054567][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.086761][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.095508][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.107133][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.114263][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.131538][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.157579][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.176024][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.186010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.195173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.203603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.227802][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.242710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.251864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.261739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.270329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.279358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.288755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.298018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.306550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.315592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.324785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.333821][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.340974][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.350287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.358621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.373977][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.385671][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.415036][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.423850][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.433212][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.443496][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.451820][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.460959][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.470086][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.477144][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 66.477191][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 66.477217][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 66.483229][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.495918][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 66.506959][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.517735][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.525155][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.533133][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.542106][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.550928][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.559353][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 66.567645][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.589212][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.598083][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.649021][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.658947][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.668864][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.679528][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.688564][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.695637][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.703482][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.713169][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.722118][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.729281][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.737656][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.748075][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.757104][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.765873][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.774936][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.798901][ T4191] device veth0_vlan entered promiscuous mode [ 66.815435][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.825759][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.836089][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.852377][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.862888][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.873270][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.883655][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.892988][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.902198][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.911416][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.920225][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.929169][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.937446][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.950190][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.964158][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.979329][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.988195][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.022933][ T4191] device veth1_vlan entered promiscuous mode [ 67.047685][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.058149][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.071128][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.080693][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.096251][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.105757][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.119758][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.139279][ T4193] device veth0_vlan entered promiscuous mode [ 67.152179][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.172438][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.199300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.218006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.231667][ T4193] device veth1_vlan entered promiscuous mode [ 67.253990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.263887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.273993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.301787][ T4191] device veth0_macvtap entered promiscuous mode [ 67.316776][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.341808][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.356155][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.372352][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.381912][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.392301][ T4191] device veth1_macvtap entered promiscuous mode [ 67.408016][ T4193] device veth0_macvtap entered promiscuous mode [ 67.424115][ T4193] device veth1_macvtap entered promiscuous mode [ 67.444584][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.453177][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.462107][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.471792][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.480689][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.488610][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.496057][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.505057][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.521077][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.538847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.552034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.570779][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.583372][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.606789][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.618966][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.630834][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.638546][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.647655][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.656368][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.665664][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.674847][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.684397][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.708845][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.719496][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.732447][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.742461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.761735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.780272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.791253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.801909][ T4185] device veth0_vlan entered promiscuous mode [ 67.819261][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.828917][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.839153][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848624][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.859509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.868727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.889205][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.900242][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.910981][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943460][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971014][ T4185] device veth1_vlan entered promiscuous mode [ 68.013358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.023142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.031697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.041788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.051234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.060206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.154851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.168514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.182571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.190904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.201694][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.211365][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.225078][ T4184] device veth0_vlan entered promiscuous mode [ 68.258772][ T4185] device veth0_macvtap entered promiscuous mode [ 68.269827][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.278328][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.287560][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.296428][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.297177][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.314166][ T4184] device veth1_vlan entered promiscuous mode [ 68.323749][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.333961][ T4199] device veth0_vlan entered promiscuous mode [ 68.339811][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.357028][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.365279][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.374307][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.384925][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.393807][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.402438][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.414147][ T4185] device veth1_macvtap entered promiscuous mode [ 68.468009][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.477088][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.484052][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.485151][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.500847][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.513774][ T4199] device veth1_vlan entered promiscuous mode [ 68.534808][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.534932][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.546872][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.560824][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.560842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.560859][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.562660][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.571626][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 68.591276][ T4184] device veth0_macvtap entered promiscuous mode [ 68.611678][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 68.619458][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 68.626391][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.634829][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.642472][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 68.649677][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 68.652225][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.664358][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.672521][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.681334][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.712716][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.725946][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.740585][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.751484][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.763234][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.774243][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.786410][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.795429][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.805285][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.837606][ T4184] device veth1_macvtap entered promiscuous mode [ 68.844697][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.862830][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.874538][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.890470][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.913718][ T4199] device veth0_macvtap entered promiscuous mode [ 68.930831][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.941566][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.957378][ T4199] device veth1_macvtap entered promiscuous mode [ 68.995037][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.034374][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.056971][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.073565][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.083883][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.105379][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.129339][ T4292] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.154954][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.264489][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.277349][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.285913][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.302560][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.689088][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.774416][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.006702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.027208][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.060874][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.087729][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.111941][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.232961][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.294845][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.336988][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.372343][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.403074][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.429928][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.464867][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.475690][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.492749][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.504531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.521186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.533002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.637240][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 70.645383][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 70.718193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.773110][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 70.909010][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.921983][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 70.950266][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.959755][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180668][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.441084][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.448044][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.985655][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.997180][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 72.003300][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.067410][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.102953][ T4309] loop0: detected capacity change from 0 to 512 [ 72.116775][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.128297][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.139554][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.149712][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.165655][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.178518][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.277310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.286076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.315800][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 72.335245][ T4309] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.381905][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.393907][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.403644][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.422106][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474486][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.504988][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.587961][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.596114][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.646186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.656196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.869151][ T4320] 9pnet: Insufficient options for proto=fd [ 73.986798][ T4309] sched: RT throttling activated [ 75.693581][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.727581][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.777097][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785835][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.840264][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.896671][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.904779][ T4330] loop3: detected capacity change from 0 to 256 [ 75.922763][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.930874][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.949233][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.959297][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.961155][ T4333] loop0: detected capacity change from 0 to 256 [ 75.982002][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.596607][ T4333] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 76.626511][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.811869][ T4335] fuse: Bad value for 'fd' [ 77.773942][ T4344] loop1: detected capacity change from 0 to 8192 [ 78.191167][ T4176] loop1: p2 p3 p4 [ 78.195925][ T4176] loop1: partition table partially beyond EOD, truncated [ 78.235167][ T26] audit: type=1326 audit(1757665019.683:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f9e0eba9 code=0x7ffc0000 [ 78.280130][ T4176] loop1: p2 start 2936012800 is beyond EOD, truncated [ 78.366760][ T4176] loop1: p3 start 1912602624 is beyond EOD, truncated [ 78.377358][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.404218][ T4350] loop0: detected capacity change from 0 to 512 [ 78.410888][ T4176] loop1: p4 size 656640 extends beyond EOD, truncated [ 78.418563][ T26] audit: type=1326 audit(1757665019.713:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47f9e0d510 code=0x7ffc0000 [ 78.444298][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.506709][ T4350] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.13: casefold flag without casefold feature [ 78.581506][ T26] audit: type=1326 audit(1757665019.723:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47f9e103d7 code=0x7ffc0000 [ 78.591350][ T4344] loop1: p2 p3 p4 [ 78.608476][ T4344] loop1: partition table partially beyond EOD, truncated [ 78.612908][ T26] audit: type=1326 audit(1757665019.723:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47f9e0eba9 code=0x7ffc0000 [ 78.615783][ T4344] loop1: p2 start 2936012800 is beyond EOD, truncated [ 78.644215][ T4344] loop1: p3 start 1912602624 is beyond EOD, truncated [ 78.651716][ T4344] loop1: p4 size 656640 extends beyond EOD, truncated [ 78.689920][ T4350] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.13: couldn't read orphan inode 15 (err -117) [ 78.753911][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.769094][ T26] audit: type=1326 audit(1757665019.723:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47f9e103d7 code=0x7ffc0000 [ 78.791465][ T26] audit: type=1326 audit(1757665019.723:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47f9e0d80a code=0x7ffc0000 [ 78.821289][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.860505][ T26] audit: type=1326 audit(1757665019.723:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f9e0eba9 code=0x7ffc0000 [ 78.884626][ T26] audit: type=1326 audit(1757665019.733:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47f9e0eba9 code=0x7ffc0000 [ 79.047457][ T26] audit: type=1326 audit(1757665019.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f9e0eba9 code=0x7ffc0000 [ 79.074517][ T26] audit: type=1326 audit(1757665019.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47f9e0d510 code=0x7ffc0000 [ 80.192775][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 81.376728][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 81.705255][ T4370] loop4: detected capacity change from 0 to 1024 [ 83.236337][ T4370] EXT4-fs (loop4): Ignoring removed orlov option [ 83.256627][ T4370] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 83.312387][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 84.683965][ T4395] loop0: detected capacity change from 0 to 1024 [ 85.073379][ T4395] ======================================================= [ 85.073379][ T4395] WARNING: The mand mount option has been deprecated and [ 85.073379][ T4395] and is ignored by this kernel. Remove the mand [ 85.073379][ T4395] option from the mount to silence this warning. [ 85.073379][ T4395] ======================================================= [ 85.139343][ T4394] loop3: detected capacity change from 0 to 1024 [ 85.342666][ T4394] EXT4-fs (loop3): Ignoring removed nobh option [ 85.435808][ T4394] EXT4-fs (loop3): Ignoring removed bh option [ 85.497392][ T4394] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.603545][ T4395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.623732][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 86.646816][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 86.722464][ T4411] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 86.783396][ T4410] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.25: Allocating blocks 497-513 which overlap fs metadata [ 86.804372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 86.818991][ T4410] EXT4-fs (loop3): pa ffff8880753f28c0: logic 128, phys. 385, len 8 [ 86.827807][ T4410] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 87.046601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 87.104923][ T1108] cfg80211: failed to load regulatory.db [ 88.084257][ T4426] loop1: detected capacity change from 0 to 512 [ 88.190156][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.291475][ T4426] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 88.393488][ T4426] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.652434][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.676638][ T1108] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.686330][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.710813][ T1108] usb 4-1: config 0 descriptor?? [ 89.879229][ T1108] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 89.910178][ T1108] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 90.036560][ T1108] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 91.631404][ T4321] usb 4-1: USB disconnect, device number 2 [ 91.773459][ T4450] fido_id[4450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 93.155049][ T4463] loop1: detected capacity change from 0 to 1024 [ 93.383034][ T4463] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.183239][ T4473] loop2: detected capacity change from 0 to 512 [ 94.477448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 94.486493][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 94.487193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 94.495672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 94.505133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 94.513779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 94.522625][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 94.544127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 94.566088][ T4473] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.462879][ T4497] loop1: detected capacity change from 0 to 1024 [ 96.601917][ T4497] EXT4-fs (loop1): Ignoring removed nobh option [ 96.616596][ T4497] EXT4-fs (loop1): Ignoring removed bh option [ 96.636540][ T4497] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.861928][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 96.887364][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.606239][ T4321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.677147][ T4507] loop0: detected capacity change from 0 to 512 [ 97.798907][ T4509] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.46: Allocating blocks 497-513 which overlap fs metadata [ 97.817596][ T4509] EXT4-fs (loop1): pa ffff88805fa45540: logic 128, phys. 385, len 8 [ 97.825725][ T4509] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 98.006831][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.055431][ T4514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.50'. [ 98.077591][ T4507] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 98.235155][ T4507] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.036786][ T4321] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.045902][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.055975][ T4321] usb 4-1: config 0 descriptor?? [ 99.538576][ T4321] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 100.026676][ T4321] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 100.194849][ T4321] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 100.303148][ T4520] loop1: detected capacity change from 0 to 1024 [ 100.505364][ T4520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.592756][ T13] usb 4-1: USB disconnect, device number 3 [ 100.729916][ T4525] fido_id[4525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 105.623793][ T4564] loop2: detected capacity change from 0 to 512 [ 105.843363][ T4573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.63'. [ 105.881596][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 106.079422][ T4564] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.382440][ T4592] loop0: detected capacity change from 0 to 1024 [ 108.467879][ T4592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.546614][ T4288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.746922][ T4288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.768498][ T4288] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.788610][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.990525][ T4288] usb 3-1: config 0 descriptor?? [ 110.023038][ T4612] loop1: detected capacity change from 0 to 1024 [ 110.097577][ T4612] EXT4-fs (loop1): Ignoring removed nobh option [ 110.105163][ T4612] EXT4-fs (loop1): Ignoring removed bh option [ 110.146887][ T4612] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.234867][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 111.133855][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 111.154840][ T4288] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 111.233707][ T4621] EXT4-fs warning (device loop1): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 111.277562][ T4620] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.73: Allocating blocks 497-513 which overlap fs metadata [ 111.295322][ T4620] EXT4-fs (loop1): pa ffff88805fa45c40: logic 128, phys. 385, len 8 [ 111.303488][ T4620] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 111.390929][ T4288] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 111.585831][ T4628] netlink: 32 bytes leftover after parsing attributes in process `syz.3.77'. [ 112.331859][ T4624] loop0: detected capacity change from 0 to 4096 [ 112.348900][ T4627] loop4: detected capacity change from 0 to 512 [ 112.394094][ T4288] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 112.398140][ T4624] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 112.465822][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 112.560541][ T4627] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.782477][ T13] usb 3-1: USB disconnect, device number 2 [ 113.205440][ T4624] netlink: 755 bytes leftover after parsing attributes in process `syz.0.75'. [ 113.522655][ T4651] loop2: detected capacity change from 0 to 1024 [ 114.301466][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.649765][ T4678] loop3: detected capacity change from 0 to 1024 [ 116.665170][ T4681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.89'. [ 116.937457][ T4680] loop2: detected capacity change from 0 to 1024 [ 117.047904][ T4678] EXT4-fs (loop3): Ignoring removed nobh option [ 117.185526][ T4680] EXT4-fs (loop2): Ignoring removed nobh option [ 117.215921][ T4678] EXT4-fs (loop3): Ignoring removed bh option [ 117.295882][ T4680] EXT4-fs (loop2): Ignoring removed bh option [ 117.320839][ T4678] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.416914][ T4680] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.514424][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.514626][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.760117][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 117.835871][ T4689] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 117.871556][ T4688] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.88: Allocating blocks 497-513 which overlap fs metadata [ 117.889035][ T4688] EXT4-fs (loop3): pa ffff8880753c9c40: logic 128, phys. 385, len 8 [ 117.897227][ T4688] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 118.190394][ T4690] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.85: Allocating blocks 497-513 which overlap fs metadata [ 118.208547][ T4690] EXT4-fs (loop2): pa ffff8880753c91c0: logic 128, phys. 385, len 8 [ 118.216750][ T4690] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 118.782505][ T4697] loop3: detected capacity change from 0 to 512 [ 119.441391][ T4698] loop2: detected capacity change from 0 to 8192 [ 119.557174][ T4698] loop2: p2 p3 p4 [ 119.561232][ T4698] loop2: partition table partially beyond EOD, truncated [ 119.570938][ T4698] loop2: p2 start 2936012800 is beyond EOD, truncated [ 119.578054][ T4698] loop2: p3 start 1912602624 is beyond EOD, truncated [ 119.584989][ T4698] loop2: p4 size 656640 extends beyond EOD, truncated [ 119.637184][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 119.686218][ T4697] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.808211][ T3562] loop2: p2 p3 p4 [ 119.812046][ T3562] loop2: partition table partially beyond EOD, truncated [ 119.833235][ T4705] loop0: detected capacity change from 0 to 4096 [ 119.871591][ T4708] loop1: detected capacity change from 0 to 1024 [ 119.887209][ T3562] loop2: p2 start 2936012800 is beyond EOD, truncated [ 119.894356][ T3562] loop2: p3 start 1912602624 is beyond EOD, truncated [ 119.909080][ T3562] loop2: p4 size 656640 extends beyond EOD, truncated [ 120.025688][ T4705] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 120.082902][ T4708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.661595][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.389050][ T4705] netlink: 755 bytes leftover after parsing attributes in process `syz.0.93'. [ 123.177507][ T13] usb 5-1: device descriptor read/all, error -71 [ 123.235115][ T4739] loop4: detected capacity change from 0 to 1024 [ 123.990099][ T4739] EXT4-fs (loop4): Ignoring removed nobh option [ 124.040133][ T4739] EXT4-fs (loop4): Ignoring removed bh option [ 124.053735][ T4743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'. [ 124.130697][ T4739] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.317719][ T4739] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 124.362689][ T4749] loop3: detected capacity change from 0 to 1024 [ 124.520861][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 124.596984][ T4749] EXT4-fs (loop3): Ignoring removed nobh option [ 124.620089][ T4749] EXT4-fs (loop3): Ignoring removed bh option [ 124.639736][ T4751] EXT4-fs warning (device loop4): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 124.700002][ T4749] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.721385][ T4750] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.102: Allocating blocks 497-513 which overlap fs metadata [ 124.743063][ T4750] EXT4-fs (loop4): pa ffff88805fa451c0: logic 128, phys. 385, len 8 [ 124.751450][ T4750] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 124.895633][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 124.920957][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.173096][ T4755] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.103: Allocating blocks 497-513 which overlap fs metadata [ 125.189685][ T4755] EXT4-fs (loop3): pa ffff88805faa8380: logic 128, phys. 385, len 8 [ 125.199035][ T4755] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 125.295681][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.415443][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 126.523578][ T4763] loop1: detected capacity change from 0 to 512 [ 126.632652][ T4763] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 126.652769][ T4763] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.194522][ T4775] loop0: detected capacity change from 0 to 1024 [ 127.406711][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.403372][ T4786] loop1: detected capacity change from 0 to 4096 [ 128.497773][ T4786] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 128.744509][ T4786] netlink: 755 bytes leftover after parsing attributes in process `syz.1.111'. [ 129.684285][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.114'. [ 131.664423][ T4809] loop2: detected capacity change from 0 to 1024 [ 131.710191][ T4809] EXT4-fs (loop2): Ignoring removed nobh option [ 131.728158][ T4809] EXT4-fs (loop2): Ignoring removed bh option [ 132.286199][ T4809] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.655705][ T4809] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 132.681097][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.879244][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891880][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.458867][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 133.535927][ T4822] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 133.585920][ T4821] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.116: Allocating blocks 497-513 which overlap fs metadata [ 133.603160][ T4821] EXT4-fs (loop2): pa ffff88805faa8a80: logic 128, phys. 385, len 8 [ 133.611542][ T4821] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 133.768204][ T4826] loop0: detected capacity change from 0 to 512 [ 133.909179][ T4826] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 133.987032][ T4826] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.830722][ T4862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'. [ 139.503355][ T4876] loop1: detected capacity change from 0 to 512 [ 139.827251][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 140.311276][ T4876] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.504086][ T4893] loop4: detected capacity change from 0 to 8192 [ 141.549425][ T4470] loop4: p2 p3 p4 [ 141.554438][ T4470] loop4: partition table partially beyond EOD, truncated [ 141.609936][ T4470] loop4: p2 start 2936012800 is beyond EOD, truncated [ 141.636754][ T4470] loop4: p3 start 1912602624 is beyond EOD, truncated [ 141.644058][ T4470] loop4: p4 size 656640 extends beyond EOD, truncated [ 141.674747][ T4893] loop4: p2 p3 p4 [ 141.679211][ T4893] loop4: partition table partially beyond EOD, truncated [ 141.699052][ T4893] loop4: p2 start 2936012800 is beyond EOD, truncated [ 141.706190][ T4893] loop4: p3 start 1912602624 is beyond EOD, truncated [ 141.748456][ T4893] loop4: p4 size 656640 extends beyond EOD, truncated [ 142.981748][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 143.393397][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 145.510220][ T4928] loop3: detected capacity change from 0 to 512 [ 145.650787][ T4928] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 145.696557][ T4928] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.627610][ T4939] loop3: detected capacity change from 0 to 1024 [ 146.645088][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 146.676364][ T4939] EXT4-fs (loop3): Ignoring removed nobh option [ 146.726601][ T4939] EXT4-fs (loop3): Ignoring removed bh option [ 146.732750][ T4939] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.768070][ T4559] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.837622][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 146.883209][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 147.109318][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 147.254983][ T4944] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 147.911481][ T4926] loop4: detected capacity change from 0 to 256 [ 148.135703][ T4926] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 149.563854][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 149.571533][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 151.757566][ T4969] loop4: detected capacity change from 0 to 512 [ 152.749672][ T4969] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.882779][ T4266] Bluetooth: hci5: command 0x1001 tx timeout [ 152.891071][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 154.961398][ T4983] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 154.967603][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 155.046234][ T4985] loop4: detected capacity change from 0 to 1024 [ 155.091367][ T4985] EXT4-fs (loop4): Ignoring removed nobh option [ 155.105069][ T4985] EXT4-fs (loop4): Ignoring removed bh option [ 155.121950][ T4985] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.217201][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 155.901462][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 156.093144][ T5005] EXT4-fs warning (device loop4): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 156.417496][ T5006] loop3: detected capacity change from 0 to 512 [ 156.528091][ T5006] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 156.656363][ T5006] EXT4-fs (loop3): mount failed [ 156.834230][ T5006] loop3: detected capacity change from 0 to 512 [ 158.817918][ T5006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 158.976982][ T5022] loop0: detected capacity change from 0 to 256 [ 160.260870][ T5030] loop4: detected capacity change from 0 to 1024 [ 161.255452][ T5030] EXT4-fs (loop4): Test dummy encryption mode enabled [ 161.326584][ T5030] EXT4-fs (loop4): inline encryption not supported [ 161.479852][ T5030] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 162.454747][ T5053] overlayfs: failed to resolve './file1': -2 [ 163.071589][ T5060] loop0: detected capacity change from 0 to 1024 [ 163.125431][ T5060] EXT4-fs (loop0): Ignoring removed nobh option [ 163.192309][ T5060] EXT4-fs (loop0): Ignoring removed bh option [ 163.213734][ T5060] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.302555][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 163.538428][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 163.617225][ T5066] EXT4-fs warning (device loop0): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 163.668366][ T5065] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.180: Allocating blocks 497-513 which overlap fs metadata [ 163.685659][ T5065] EXT4-fs (loop0): pa ffff88805faa8700: logic 128, phys. 385, len 8 [ 163.693947][ T5065] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 164.612553][ T5070] loop0: detected capacity change from 0 to 4096 [ 164.956665][ T5070] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 165.693343][ T5077] loop1: detected capacity change from 0 to 256 [ 167.189642][ T5076] netlink: 755 bytes leftover after parsing attributes in process `syz.0.182'. [ 167.342062][ T5077] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 167.869133][ T5077] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 168.398483][ T5092] device veth1_macvtap left promiscuous mode [ 168.674914][ T5096] sctp: failed to load transform for md5: -2 [ 169.888298][ T5121] overlayfs: failed to resolve './file1': -2 [ 170.354367][ T5124] loop2: detected capacity change from 0 to 256 [ 170.647584][ T5124] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 174.588150][ T5148] loop2: detected capacity change from 0 to 256 [ 175.307362][ T5148] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 175.416968][ T5148] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 175.926835][ T5158] sctp: failed to load transform for md5: -2 [ 176.954976][ T5174] overlayfs: failed to resolve './file1': -2 [ 177.708184][ T5181] loop3: detected capacity change from 0 to 1024 [ 177.750252][ T5181] EXT4-fs (loop3): Ignoring removed nobh option [ 177.763870][ T5181] EXT4-fs (loop3): Ignoring removed bh option [ 177.780719][ T5181] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.825497][ T5181] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 177.967660][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 178.039899][ T5191] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 178.078593][ T5189] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.208: Allocating blocks 497-513 which overlap fs metadata [ 178.128185][ T5189] EXT4-fs (loop3): pa ffff8880753c9c40: logic 128, phys. 385, len 8 [ 178.136366][ T5189] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 179.730257][ T5198] loop3: detected capacity change from 0 to 256 [ 179.932540][ T5202] loop0: detected capacity change from 0 to 256 [ 179.970293][ T5202] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 180.000727][ T5202] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 180.392587][ T5208] sctp: failed to load transform for md5: -2 [ 181.040029][ T5223] loop0: detected capacity change from 0 to 16 [ 181.191380][ T5223] erofs: (device loop0): mounted with root inode @ nid 36. [ 181.306660][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 181.306680][ T26] audit: type=1800 audit(1757665122.753:40): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.215" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 181.369897][ T4198] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 183.341560][ T5242] loop2: detected capacity change from 0 to 1024 [ 183.418656][ T5242] EXT4-fs (loop2): Ignoring removed nobh option [ 183.425049][ T5242] EXT4-fs (loop2): Ignoring removed bh option [ 183.456476][ T5242] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.057675][ T5249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.224'. [ 184.145445][ T5242] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 184.328343][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 184.405612][ T5256] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 184.454106][ T5255] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.222: Allocating blocks 497-513 which overlap fs metadata [ 184.471855][ T5255] EXT4-fs (loop2): pa ffff88805faa8460: logic 128, phys. 385, len 8 [ 184.480029][ T5255] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 184.610413][ T5258] loop4: detected capacity change from 0 to 256 [ 184.771440][ T5258] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 184.847049][ T5258] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 185.287626][ T5260] sctp: failed to load transform for md5: -2 [ 185.859571][ T5274] loop4: detected capacity change from 0 to 256 [ 185.951533][ T5274] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 186.208225][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.216602][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.242803][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.262803][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 186.284009][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 186.577556][ T5270] loop0: detected capacity change from 0 to 40427 [ 187.124331][ T5270] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 187.968301][ T5285] loop2: detected capacity change from 0 to 1024 [ 188.112488][ T5285] EXT4-fs (loop2): Ignoring removed nobh option [ 188.202367][ T5285] EXT4-fs (loop2): Ignoring removed nobh option [ 188.256619][ T5285] EXT4-fs (loop2): inline encryption not supported [ 188.264265][ T5285] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.419190][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,nobh,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 189.288759][ T5298] syz.0.235 (5298) used greatest stack depth: 15744 bytes left [ 189.384662][ T5285] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.233: Allocating blocks 385-513 which overlap fs metadata [ 189.512230][ T5283] EXT4-fs (loop2): pa ffff8880753c9000: logic 16, phys. 129, len 24 [ 189.521170][ T5283] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 191.920992][ T5320] loop2: detected capacity change from 0 to 128 [ 192.267841][ T5324] loop4: detected capacity change from 0 to 512 [ 192.344012][ T5324] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 192.437365][ T5324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 192.455748][ T5324] System zones: 0-2, 18-18, 34-34 [ 192.496146][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 192.603013][ T5324] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.845175][ T5328] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 192.872477][ T5328] FAT-fs (loop2): Filesystem has been set read-only [ 192.909890][ T5319] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 193.250771][ T5336] loop0: detected capacity change from 0 to 512 [ 193.280740][ T5338] process 'syz.3.244' launched './file1' with NULL argv: empty string added [ 193.490518][ T5336] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.868894][ T5343] loop4: detected capacity change from 0 to 2048 [ 194.323979][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.330602][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.573930][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 194.815689][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 195.274443][ T5336] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.120478][ T5336] syz.0.243[5336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.120603][ T5336] syz.0.243[5336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.826640][ T4266] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 198.888544][ T5368] loop0: detected capacity change from 0 to 256 [ 199.037155][ T5368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 199.126795][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 199.173711][ T5370] loop3: detected capacity change from 0 to 512 [ 199.185950][ T26] audit: type=1800 audit(1757665140.633:41): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 199.270498][ T5351] chnl_net:caif_netlink_parms(): no params data found [ 199.286933][ T4266] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.337261][ T4266] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.424352][ T5370] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bsddf,discard,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 199.486454][ T5370] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.249: iget: bad i_size value: 15393162788874 [ 199.626838][ T4266] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.646835][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.656972][ T4266] usb 5-1: Product: syz [ 199.666682][ T4266] usb 5-1: Manufacturer: syz [ 199.677306][ T4266] usb 5-1: SerialNumber: syz [ 199.833797][ T5378] serio: Serial port ptm0 [ 199.866176][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.906284][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.941816][ T5351] device bridge_slave_0 entered promiscuous mode [ 199.977277][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.997733][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 200.005566][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.037120][ T5351] device bridge_slave_1 entered promiscuous mode [ 200.056739][ T4266] usb 5-1: 0:2 : does not exist [ 200.137914][ T4266] usb 5-1: USB disconnect, device number 4 [ 200.223263][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.246673][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.269039][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.373302][ T5351] team0: Port device team_slave_0 added [ 200.398174][ T5351] team0: Port device team_slave_1 added [ 200.467569][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.520148][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.596439][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.689061][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.754079][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.899004][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.953277][ T5351] device hsr_slave_0 entered promiscuous mode [ 201.963368][ T5351] device hsr_slave_1 entered promiscuous mode [ 201.993621][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.011063][ T5351] Cannot create hsr debugfs directory [ 202.024437][ T5392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.257'. [ 202.076508][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 202.591182][ T5351] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.946676][ T5351] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.557578][ T5351] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.958494][ T5409] hub 9-0:1.0: USB hub found [ 203.980734][ T5411] loop4: detected capacity change from 0 to 256 [ 204.016905][ T5409] hub 9-0:1.0: 1 port detected [ 204.099930][ T5411] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.146679][ T5411] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 204.202939][ T5411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.466095][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 205.112380][ T5416] loop4: detected capacity change from 0 to 256 [ 205.198240][ T5416] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 205.240678][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.251763][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.256939][ T5416] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 205.716557][ T5420] sctp: failed to load transform for md5: -2 [ 205.953413][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 206.216669][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 206.336768][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.356914][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.638338][ T4188] Bluetooth: hci5: command 0x0419 tx timeout [ 206.676655][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.691677][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.716976][ T21] usb 1-1: Product: syz [ 206.722912][ T21] usb 1-1: Manufacturer: syz [ 206.746602][ T21] usb 1-1: SerialNumber: syz [ 207.261397][ T21] usb 1-1: 0:2 : does not exist [ 207.283805][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.304038][ T21] usb 1-1: USB disconnect, device number 2 [ 208.119050][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.197208][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.496102][ T5442] syz.0.268[5442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.496266][ T5442] syz.0.268[5442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.524088][ T5442] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.573172][ T5442] FAT-fs (loop1): unable to read boot sector [ 209.738813][ T5406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.748607][ T5406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.757673][ T5406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.766642][ T5406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.427771][ T5351] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.694147][ T5467] loop3: detected capacity change from 0 to 256 [ 210.789259][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.805207][ T5467] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 210.851947][ T5467] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 212.273363][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.410260][ T5480] loop3: detected capacity change from 0 to 256 [ 212.452042][ T5480] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.484609][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.662413][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.742663][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.059323][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.324016][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.342467][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.386352][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.439915][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.469085][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.489415][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.496572][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.504506][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.525227][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.563084][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.575029][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.582200][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.596801][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 213.628023][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.650579][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.667440][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.686306][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.695761][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.716948][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.735086][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.855983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.605255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.613945][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.633306][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.648181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.672169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.839529][ T13] usb 1-1: Product: syz [ 214.844220][ T13] usb 1-1: Manufacturer: syz [ 214.849292][ T13] usb 1-1: SerialNumber: syz [ 215.068351][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.161441][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.255957][ T5500] loop3: detected capacity change from 0 to 4096 [ 215.273334][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.327080][ T13] usb 1-1: 0:2 : does not exist [ 215.815145][ T5500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.071211][ T13] usb 1-1: USB disconnect, device number 3 [ 217.830396][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.437043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.465302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.491029][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.757381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.779425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.876780][ T5351] device veth0_vlan entered promiscuous mode [ 219.914030][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.933519][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.046623][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.073538][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.328961][ T5572] loop0: detected capacity change from 0 to 512 [ 220.505713][ T5572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.519015][ T5572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.735563][ T5572] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.752703][ T5572] EXT4-fs (loop0): 1 truncate cleaned up [ 220.758669][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 221.223138][ T5351] device veth1_vlan entered promiscuous mode [ 221.263944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.332871][ T154] device hsr_slave_0 left promiscuous mode [ 221.404551][ T154] device hsr_slave_1 left promiscuous mode [ 221.488116][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.551583][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.615567][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.686862][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.736710][ T154] device bridge_slave_1 left promiscuous mode [ 221.785320][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.878228][ T5581] loop3: detected capacity change from 0 to 2048 [ 222.117676][ T154] device bridge_slave_0 left promiscuous mode [ 222.123957][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.275199][ T5581] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 222.515153][ T5581] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 222.545310][ T154] device veth1_macvtap left promiscuous mode [ 222.589195][ T154] device veth0_macvtap left promiscuous mode [ 222.642710][ T154] device veth1_vlan left promiscuous mode [ 222.651475][ T5590] loop0: detected capacity change from 0 to 1024 [ 222.707684][ T154] device veth0_vlan left promiscuous mode [ 222.837629][ T4297] ------------[ cut here ]------------ [ 222.855734][ T5590] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 222.884870][ T4297] kernel BUG at fs/ext4/inode.c:2734! [ 222.911022][ T4297] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 222.911977][ T5590] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.917153][ T4297] CPU: 1 PID: 4297 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 222.917178][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.917191][ T4297] Workqueue: writeback wb_workfn (flush-7:3) [ 222.917250][ T4297] RIP: 0010:ext4_writepages+0x2d12/0x2d20 [ 222.917275][ T4297] Code: c1 03 38 c1 0f 8c b0 fd ff ff 4c 89 e7 e8 96 cf b2 ff e9 a3 fd ff ff e8 8c 67 6e ff 0f 0b e8 85 67 6e ff 0f 0b e8 7e 67 6e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 89 fb [ 222.917292][ T4297] RSP: 0018:ffffc900011ef080 EFLAGS: 00010293 [ 222.917308][ T4297] RAX: ffffffff820963a2 RBX: 000000c410000000 RCX: ffff88801b945940 [ 222.917323][ T4297] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 222.917336][ T4297] RBP: ffffc900011ef3d0 R08: dffffc0000000000 R09: ffffed100e6f28c4 [ 222.917350][ T4297] R10: ffffed100e6f28c4 R11: 1ffff1100e6f28c3 R12: 1ffff9200023dee6 [ 222.917364][ T4297] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888058e0a000 [ 222.917378][ T4297] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 223.031635][ T4297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.038252][ T4297] CR2: 00007f7ba6454000 CR3: 000000006404e000 CR4: 00000000003506e0 [ 223.046264][ T4297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.054261][ T4297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.062260][ T4297] Call Trace: [ 223.065565][ T4297] [ 223.068518][ T4297] ? __lock_acquire+0x13ad/0x7c60 [ 223.073611][ T4297] ? kvfree_call_rcu+0x10a/0x7c0 [ 223.078570][ T4297] ? verify_lock_unused+0x140/0x140 [ 223.083794][ T4297] ? mark_lock+0x94/0x320 [ 223.088144][ T4297] ? ext4_readpage+0x2e0/0x2e0 [ 223.092928][ T4297] ? __lock_acquire+0x13ad/0x7c60 [ 223.097974][ T4297] ? verify_lock_unused+0x140/0x140 [ 223.103206][ T4297] ? deref_stack_reg+0xd0/0x120 [ 223.108090][ T4297] ? __lock_acquire+0x7c60/0x7c60 [ 223.113144][ T4297] ? do_raw_spin_lock+0x11d/0x280 [ 223.118547][ T4297] ? writeback_sb_inodes+0x3f6/0x1610 [ 223.123944][ T4297] ? do_raw_spin_unlock+0x11d/0x230 [ 223.129174][ T4297] ? ext4_readpage+0x2e0/0x2e0 [ 223.133956][ T4297] do_writepages+0x48d/0x6d0 [ 223.138563][ T4297] ? __writepage+0x130/0x130 [ 223.143168][ T4297] ? writeback_sb_inodes+0x65b/0x1610 [ 223.148549][ T4297] ? __lock_acquire+0x7c60/0x7c60 [ 223.153579][ T4297] ? do_raw_spin_lock+0x11d/0x280 [ 223.158608][ T4297] __writeback_single_inode+0x153/0xda0 [ 223.164160][ T4297] writeback_sb_inodes+0x9fe/0x1610 [ 223.169793][ T4297] ? queue_io+0x550/0x550 [ 223.174137][ T4297] ? rcu_is_watching+0x11/0xa0 [ 223.178899][ T4297] wb_writeback+0x443/0xb90 [ 223.183418][ T4297] ? rcu_lock_release+0x20/0x20 [ 223.188289][ T4297] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.194317][ T4297] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.199651][ T4297] wb_workfn+0x423/0xe60 [ 223.204022][ T4297] ? inode_wait_for_writeback+0x200/0x200 [ 223.209794][ T4297] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.215816][ T4297] ? read_lock_is_recursive+0x10/0x10 [ 223.221324][ T4297] ? try_to_wake_up+0x6cf/0x1050 [ 223.226316][ T4297] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.231572][ T4297] process_one_work+0x863/0x1000 [ 223.236548][ T4297] ? worker_detach_from_pool+0x240/0x240 [ 223.242208][ T4297] ? lockdep_hardirqs_off+0x70/0x100 [ 223.247625][ T4297] ? _raw_spin_lock_irq+0xab/0xe0 [ 223.252781][ T4297] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 223.258187][ T4297] ? wq_worker_running+0x97/0x170 [ 223.263246][ T4297] worker_thread+0xaa8/0x12a0 [ 223.267957][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 223.273197][ T4297] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 223.279150][ T4297] kthread+0x436/0x520 [ 223.283268][ T4297] ? rcu_lock_release+0x20/0x20 [ 223.288146][ T4297] ? kthread_blkcg+0xd0/0xd0 [ 223.292768][ T4297] ret_from_fork+0x1f/0x30 [ 223.297226][ T4297] [ 223.300392][ T4297] Modules linked in: [ 223.389097][ T4297] ---[ end trace c80c8f96568fb702 ]--- [ 223.410446][ T4297] RIP: 0010:ext4_writepages+0x2d12/0x2d20 [ 223.438377][ T4297] Code: c1 03 38 c1 0f 8c b0 fd ff ff 4c 89 e7 e8 96 cf b2 ff e9 a3 fd ff ff e8 8c 67 6e ff 0f 0b e8 85 67 6e ff 0f 0b e8 7e 67 6e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 89 fb [ 223.553231][ T5602] Zero length message leads to an empty skb [ 223.850643][ T4297] RSP: 0018:ffffc900011ef080 EFLAGS: 00010293 [ 223.876462][ T4297] RAX: ffffffff820963a2 RBX: 000000c410000000 RCX: ffff88801b945940 [ 223.884544][ T4297] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 223.885007][ T154] team0 (unregistering): Port device team_slave_1 removed [ 223.892590][ T4297] RBP: ffffc900011ef3d0 R08: dffffc0000000000 R09: ffffed100e6f28c4 [ 223.892610][ T4297] R10: ffffed100e6f28c4 R11: 1ffff1100e6f28c3 R12: 1ffff9200023dee6 [ 223.916717][ T4297] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888058e0a000 [ 223.917431][ T154] team0 (unregistering): Port device team_slave_0 removed [ 223.924722][ T4297] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 223.924742][ T4297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.924757][ T4297] CR2: 00007f16c983cf98 CR3: 00000000510f4000 CR4: 00000000003506f0 [ 223.957383][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.977635][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.986452][ T4297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.994489][ T4297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.002670][ T4297] Kernel panic - not syncing: Fatal exception [ 224.008983][ T4297] Kernel Offset: disabled [ 224.013321][ T4297] Rebooting in 86400 seconds..