last executing test programs: 3m10.553213717s ago: executing program 0 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x45ea5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) 3m9.275573887s ago: executing program 0 (id=59): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x0, 0x8000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="a6be", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3m8.074811066s ago: executing program 0 (id=61): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xe0ff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xe0ff}}], 0x48}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201008f07eb0d1024000100000000090400000103b8000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20011000000012292083d584a74b161779b6cfaccdae"], 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400d250000000228566efed0da7f7d606af470f4360bd12a59ca16f5fe62780351b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x1, 0xa4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0x8, 0xa7, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x2c, &(0x7f0000000300)=@string={0x2c, 0x3, "71a98226045fe1c7f02ef39844475cdf37c13ccf8b3ca48658e5317f55b1f4aabc386dd4e4fdb2fbbd79"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42b}}, {0x69, &(0x7f0000000440)=@string={0x69, 0x3, "b31321dc4af751bd8f79eed1691a1830c2061bc7c85cc6fa38aa5dadb37f87d3123625b7894d159e46ac7da2a06c6a447006faf8b6194ad6bda17e465c690395c40acf6243e06dbd3191a65bc753ed8db7d2c5ce717334182efc227192ba83d4a4c56a24a0444b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}, {0xd, &(0x7f0000000540)=@string={0xd, 0x3, "8baad63dee17dfbf5892ff"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}]}) 3m4.277913395s ago: executing program 0 (id=73): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000018b3a20110710028a7c010203010902240001d300d0000904"], 0x0) 3m1.381343421s ago: executing program 0 (id=84): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x6) 3m0.484426585s ago: executing program 0 (id=85): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9fb8]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) close(r1) 2m44.160263171s ago: executing program 32 (id=85): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9fb8]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) close(r1) 2m24.979877852s ago: executing program 2 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xdefd}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}}, 0x400c890) 2m24.620069198s ago: executing program 2 (id=241): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mknodat$null(r0, &(0x7f00000001c0)='./file0\x00', 0x100, 0x103) 2m24.381546102s ago: executing program 2 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 2m24.325240582s ago: executing program 2 (id=244): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xa5c0a, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1057499, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 2m24.228676924s ago: executing program 2 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 2m22.035451469s ago: executing program 2 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4b, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a84c0081003600000d020000c00501000080600300000000000000e9afd5f45c04ba1c96bfda6ecc55742125ad7c73f447da38dc971bce3d98a97bce85ff442dbd499922"], 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0xfdef) 2m22.006754179s ago: executing program 33 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4b, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a84c0081003600000d020000c00501000080600300000000000000e9afd5f45c04ba1c96bfda6ecc55742125ad7c73f447da38dc971bce3d98a97bce85ff442dbd499922"], 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0xfdef) 9.385227802s ago: executing program 5 (id=776): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x2f, 0x2028, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) 9.261438024s ago: executing program 5 (id=778): syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0x9, 0x0, 0x4, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 7.213096316s ago: executing program 6 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) 5.177200958s ago: executing program 1 (id=787): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000002540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 5.145204679s ago: executing program 6 (id=789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0xda}, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) 4.965481092s ago: executing program 1 (id=790): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x2) 4.938735642s ago: executing program 6 (id=791): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000103}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x10000000, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 4.4594939s ago: executing program 1 (id=792): socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000940)=0x4cb, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x68}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4.45882992s ago: executing program 6 (id=793): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000280), 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 4.258314333s ago: executing program 3 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.141867225s ago: executing program 5 (id=796): r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, 0x0) 4.063277846s ago: executing program 3 (id=797): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 4.062688686s ago: executing program 5 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() 3.385550477s ago: executing program 1 (id=799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.280035878s ago: executing program 6 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x401}}, {@space_cache_v1}, {@fatal_errors_bug}, {@datacow}, {@ssd}, {@clear_cache}, {@nobarrier}, {@nodatacow}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@noflushoncommit}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0, 0x18d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x100004, 0x6}) 2.260873664s ago: executing program 5 (id=802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40c8811) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.217602735s ago: executing program 1 (id=803): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") 2.116662006s ago: executing program 3 (id=804): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) connect$unix(r0, 0x0, 0x0) 1.965446269s ago: executing program 4 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) 1.964956649s ago: executing program 3 (id=806): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r0}, 0x18) munlockall() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=inte']) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x60840, 0x0) 1.89429159s ago: executing program 1 (id=807): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff1}, {0xfff1, 0xfff3}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x2400c000) 1.744518552s ago: executing program 6 (id=808): syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0x9, 0x0, 0x4, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 1.697260553s ago: executing program 4 (id=809): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f0000000080)={0xe, 0x45}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xcf) 1.24064249s ago: executing program 5 (id=810): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000280), 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 1.23970834s ago: executing program 4 (id=811): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000480)=0xffffffff, 0x4) 1.060242853s ago: executing program 3 (id=812): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) 937.385025ms ago: executing program 4 (id=813): socket$kcm(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70ad27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 847.281656ms ago: executing program 3 (id=814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 31.399799ms ago: executing program 4 (id=815): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r0, 0x0, 0x0, 0x33, 0x2) 0s ago: executing program 4 (id=816): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r0, r1, 0x80000) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_1 [ 44.350066][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.357569][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.361624][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.363873][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.370740][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.375133][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.377178][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.385084][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.400605][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.402848][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.405597][ T4034] device bridge_slave_1 entered promiscuous mode [ 44.411279][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.413589][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.421060][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.425034][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.426909][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.434508][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.484643][ T4040] device hsr_slave_0 entered promiscuous mode [ 44.522556][ T4040] device hsr_slave_1 entered promiscuous mode [ 44.601548][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.623794][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.704348][ T4043] device hsr_slave_0 entered promiscuous mode [ 44.742533][ T4043] device hsr_slave_1 entered promiscuous mode [ 44.782293][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.784472][ T4043] Cannot create hsr debugfs directory [ 44.884489][ T4035] device hsr_slave_0 entered promiscuous mode [ 44.922644][ T4035] device hsr_slave_1 entered promiscuous mode [ 44.962261][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.964430][ T4035] Cannot create hsr debugfs directory [ 45.034184][ T4042] device hsr_slave_0 entered promiscuous mode [ 45.092549][ T4042] device hsr_slave_1 entered promiscuous mode [ 45.132407][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.134450][ T4042] Cannot create hsr debugfs directory [ 45.158420][ T4034] team0: Port device team_slave_0 added [ 45.182292][ T4034] team0: Port device team_slave_1 added [ 45.249112][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.251008][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.262301][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.287443][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.289470][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.300317][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.444295][ T4034] device hsr_slave_0 entered promiscuous mode [ 45.462935][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 45.465217][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 45.466956][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 45.468652][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 45.482553][ T4034] device hsr_slave_1 entered promiscuous mode [ 45.522285][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.524426][ T4034] Cannot create hsr debugfs directory [ 45.542334][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 45.554719][ T4040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.605552][ T4040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.644358][ T4040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.708510][ T4040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.817383][ T4042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.876494][ T4042] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.926125][ T4042] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.964223][ T4042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.057565][ T4035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.094144][ T4035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.164071][ T4035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.224252][ T4035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.321910][ T4043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.357544][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.400777][ T4043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.444154][ T4043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.495749][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.545531][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.604935][ T4043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.653119][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.746204][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.761437][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.793409][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.796911][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.809774][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.816609][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.819437][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.824115][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.846535][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.850160][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.855007][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.857200][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.860316][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.863878][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.866483][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.868341][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.870743][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.875861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.903859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.906748][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.909793][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.911678][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.914750][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.918131][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.920786][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.922794][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.926805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.935943][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.939263][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.964800][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.987603][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.990195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.995115][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.998421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.001357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.018483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.021356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.024942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.028019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.030980][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.035151][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.040183][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.044221][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.068876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.075231][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.078154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.080744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.091792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.095213][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.118392][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.121253][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.125547][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.136575][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.139419][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.147111][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.161004][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.166647][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.169495][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.173315][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.175426][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.189070][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.211837][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.221273][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.226007][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.227962][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.230331][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.233821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.240968][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.256639][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.259451][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.263710][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.271647][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.285329][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.287428][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.290374][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.305502][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.307488][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.328728][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.331303][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.336171][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.339335][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.343279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.345922][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.347867][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.367183][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.369963][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.373773][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.376898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.379767][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.384280][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.386953][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.404467][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.407657][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.410454][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.414783][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.417360][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.419437][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.421796][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.425899][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.441029][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.443977][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.446548][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.448489][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.451048][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.453980][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.456116][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.458920][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.462964][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.465896][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.474416][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.486671][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.489962][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.493704][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.496508][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.499400][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.514197][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.526456][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.536859][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.543769][ T4097] Bluetooth: hci0: command 0x041b tx timeout [ 47.545653][ T4097] Bluetooth: hci1: command 0x041b tx timeout [ 47.547593][ T4097] Bluetooth: hci2: command 0x041b tx timeout [ 47.549429][ T4097] Bluetooth: hci4: command 0x041b tx timeout [ 47.560718][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.565091][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.567942][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.570174][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.592891][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.596238][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.598927][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.609354][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.614936][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.617770][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.620498][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.623731][ T4097] Bluetooth: hci3: command 0x041b tx timeout [ 47.632728][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.636417][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.680567][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.683728][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.709438][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.711868][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.730509][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.734866][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.743898][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.748717][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.751561][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.762788][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.765827][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.778593][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.781248][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.787679][ T4042] device veth0_vlan entered promiscuous mode [ 47.795307][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.821841][ T4042] device veth1_vlan entered promiscuous mode [ 47.830109][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.833559][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.836333][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.839392][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.842010][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.857618][ T4040] device veth0_vlan entered promiscuous mode [ 47.879885][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.888683][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.891596][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.894926][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.897101][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.907154][ T4040] device veth1_vlan entered promiscuous mode [ 47.940117][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.951925][ T4035] device veth0_vlan entered promiscuous mode [ 47.965166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.967865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.970845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.974554][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.983562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.986329][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.988942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.995503][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.005509][ T4035] device veth1_vlan entered promiscuous mode [ 48.010656][ T4042] device veth0_macvtap entered promiscuous mode [ 48.032501][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.035181][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.039549][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.055542][ T4042] device veth1_macvtap entered promiscuous mode [ 48.061381][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.070849][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.074746][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.080242][ T4040] device veth0_macvtap entered promiscuous mode [ 48.104222][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.106991][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.109887][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.114253][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.117165][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.131190][ T4040] device veth1_macvtap entered promiscuous mode [ 48.135039][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.137925][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.140798][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.144771][ T4043] device veth0_vlan entered promiscuous mode [ 48.147266][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.149977][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.161551][ T4035] device veth0_macvtap entered promiscuous mode [ 48.181179][ T4035] device veth1_macvtap entered promiscuous mode [ 48.187389][ T4043] device veth1_vlan entered promiscuous mode [ 48.190397][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.194808][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.197554][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.200225][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.203530][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.206530][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.209154][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.220406][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.223899][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.226874][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.231094][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.235967][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.239054][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.241899][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.245614][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.250349][ T4034] device veth0_vlan entered promiscuous mode [ 48.266421][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.274477][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.277281][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.280041][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.295042][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.297930][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.300757][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.304863][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.309162][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.311510][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.316774][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.320669][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.327049][ T4034] device veth1_vlan entered promiscuous mode [ 48.329566][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.332976][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.336023][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.339458][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.343979][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.354016][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.356779][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.359572][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.363946][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.368245][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.373909][ T4040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.376625][ T4040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.378959][ T4040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.381269][ T4040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.390035][ T4042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.392985][ T4042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.395292][ T4042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397830][ T4042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.403701][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.406753][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.459030][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.461838][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.466472][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.474696][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.477104][ T4035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.479403][ T4035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.481748][ T4035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.490844][ T4043] device veth0_macvtap entered promiscuous mode [ 48.573413][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.576287][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.579133][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.600891][ T4043] device veth1_macvtap entered promiscuous mode [ 48.606297][ T4034] device veth0_macvtap entered promiscuous mode [ 48.634176][ T4034] device veth1_macvtap entered promiscuous mode [ 48.652669][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.654896][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.658376][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.661179][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.667476][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.670301][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.674422][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.677286][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.681732][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.698643][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.701549][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.705651][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.708398][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.708848][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.710799][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.716412][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.719438][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.723688][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.736282][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.739376][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.743584][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.746367][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.749196][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.754005][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.757965][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.780178][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.783730][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.794254][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.796569][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.800360][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.804298][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.806864][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.809537][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.814171][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.817097][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.819668][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.823623][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.828188][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.836950][ T4043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.839358][ T4043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.841804][ T4043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.846554][ T4043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.857302][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.859876][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.864818][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.889228][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.896883][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.899577][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.907451][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.910079][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.915961][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.918653][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.921448][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.927346][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.945247][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.947687][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.950169][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.954147][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.966118][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.969139][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.980875][ T1701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.984884][ T1701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.988875][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.205348][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.207543][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.006597][ T4082] Bluetooth: hci4: command 0x040f tx timeout [ 50.009054][ T4082] Bluetooth: hci2: command 0x040f tx timeout [ 50.010875][ T4082] Bluetooth: hci1: command 0x040f tx timeout [ 50.013503][ T4082] Bluetooth: hci0: command 0x040f tx timeout [ 50.016621][ T1534] Bluetooth: hci3: command 0x040f tx timeout [ 50.025205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.027223][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.032807][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.036228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.174812][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.178433][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.198698][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.200842][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.256700][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.259376][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.459543][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.461854][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.471429][ T4160] tipc: Started in network mode [ 50.488851][ T4160] tipc: Node identity 62cc5b2c2797, cluster identity 4711 [ 50.491087][ T4160] tipc: Enabled bearer , priority 0 [ 50.494908][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.426396][ T4158] device syzkaller0 entered promiscuous mode [ 51.563081][ T4105] tipc: Node number set to 1163615020 [ 51.610668][ T4159] tipc: Resetting bearer [ 52.940446][ T4104] Bluetooth: hci3: command 0x0419 tx timeout [ 52.942520][ T4104] Bluetooth: hci0: command 0x0419 tx timeout [ 52.944171][ T4104] Bluetooth: hci1: command 0x0419 tx timeout [ 52.946191][ T4157] tipc: Resetting bearer [ 52.948000][ T4104] Bluetooth: hci2: command 0x0419 tx timeout [ 52.960106][ T4104] Bluetooth: hci4: command 0x0419 tx timeout [ 53.013599][ T4157] tipc: Disabling bearer [ 53.145363][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.147560][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.150715][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.002101][ C0] sched: RT throttling activated [ 57.359844][ T4206] loop4: detected capacity change from 0 to 2048 [ 57.420498][ T4207] loop3: detected capacity change from 0 to 2048 [ 57.760466][ T4213] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.781505][ T4206] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 59.242308][ T4220] tipc: Started in network mode [ 59.244385][ T4220] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 59.248186][ T4220] tipc: Enabled bearer , priority 10 [ 60.532451][ T4119] tipc: Node number set to 10005162 [ 60.956523][ T26] audit: type=1326 audit(60.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7ffc0000 [ 61.150421][ T26] audit: type=1326 audit(60.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=144 compat=0 ip=0xffffb33ebc28 code=0x7ffc0000 [ 61.478051][ T26] audit: type=1326 audit(60.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7ffc0000 [ 61.646598][ T26] audit: type=1326 audit(60.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7ffc0000 [ 62.505303][ T26] audit: type=1326 audit(62.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 62.505355][ T26] audit: type=1326 audit(62.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 62.505393][ T26] audit: type=1326 audit(62.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 62.505428][ T26] audit: type=1326 audit(62.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 62.505464][ T26] audit: type=1326 audit(62.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 62.505499][ T26] audit: type=1326 audit(62.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb33ebc28 code=0x7fc00000 [ 64.247942][ T4262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.28'. [ 64.369005][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 66.508369][ T4281] ODEBUG: Out of memory. ODEBUG disabled [ 66.826143][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 66.826155][ T26] audit: type=1326 audit(66.790:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 66.980803][ T26] audit: type=1326 audit(66.790:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 67.227740][ T26] audit: type=1326 audit(66.790:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 67.405358][ T26] audit: type=1326 audit(66.790:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 68.189139][ T26] audit: type=1326 audit(66.790:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 68.267493][ T26] audit: type=1326 audit(66.790:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 68.469449][ T26] audit: type=1326 audit(66.790:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 69.283205][ T26] audit: type=1326 audit(66.790:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 69.331200][ T26] audit: type=1326 audit(66.790:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 69.336917][ T26] audit: type=1326 audit(66.790:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 70.224076][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.226107][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.286831][ T4318] loop1: detected capacity change from 0 to 16 [ 70.483496][ T4314] loop0: detected capacity change from 0 to 2048 [ 70.486074][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.508068][ T4318] ======================================================= [ 70.508068][ T4318] WARNING: The mand mount option has been deprecated and [ 70.508068][ T4318] and is ignored by this kernel. Remove the mand [ 70.508068][ T4318] option from the mount to silence this warning. [ 70.508068][ T4318] ======================================================= [ 71.315186][ T4322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 71.394554][ T4318] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.322729][ T4314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.701226][ T4351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.776162][ T3335] cfg80211: failed to load regulatory.db [ 76.211443][ T4365] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.618162][ T4361] loop1: detected capacity change from 0 to 32768 [ 77.659534][ T4361] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.50 (4361) [ 77.843227][ T4361] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 77.845825][ T4361] BTRFS info (device loop1): using free space tree [ 77.847664][ T4361] BTRFS info (device loop1): has skinny extents [ 78.730136][ T4390] tipc: Enabled bearer , priority 10 [ 78.734224][ T4390] lo speed is unknown, defaulting to 1000 [ 78.735968][ T4390] lo speed is unknown, defaulting to 1000 [ 78.738755][ T4390] lo speed is unknown, defaulting to 1000 [ 78.742716][ T4390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.747722][ T4390] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.759807][ T4390] lo speed is unknown, defaulting to 1000 [ 78.762319][ T4390] lo speed is unknown, defaulting to 1000 [ 78.764429][ T4390] lo speed is unknown, defaulting to 1000 [ 78.766499][ T4390] lo speed is unknown, defaulting to 1000 [ 78.768506][ T4390] lo speed is unknown, defaulting to 1000 [ 78.770572][ T4390] lo speed is unknown, defaulting to 1000 [ 79.046906][ T4396] loop4: detected capacity change from 0 to 2048 [ 79.144590][ T4405] capability: warning: `syz.0.61' uses deprecated v2 capabilities in a way that may be insecure [ 80.745999][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.768908][ T4421] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.781310][ T4361] BTRFS error (device loop1): open_ctree failed: -12 [ 81.019617][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 81.117954][ T4398] udc-core: couldn't find an available UDC or it's busy [ 81.119867][ T4398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.329034][ T4435] process 'syz.1.67' launched './file0' with NULL argv: empty string added [ 81.920543][ T4082] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 81.946913][ T4082] Bluetooth: hci3: Injecting HCI hardware error event [ 82.044086][ T4048] Bluetooth: hci3: hardware error 0x00 [ 82.490744][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.493033][ T7] usb 1-1: no configurations [ 82.494404][ T7] usb 1-1: can't read configurations, error -22 [ 82.908635][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.996871][ T4450] tmpfs: Unknown parameter 'quota' [ 82.999541][ T4450] device bridge0 entered promiscuous mode [ 83.628502][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 83.762459][ T7] usb 1-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 83.968382][ T7] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 83.970850][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.972951][ T7] usb 1-1: Product: syz [ 83.974037][ T7] usb 1-1: Manufacturer: syz [ 83.975225][ T7] usb 1-1: SerialNumber: syz [ 84.059460][ T7] mct_u232 1-1:211.0: MCT U232 converter detected [ 84.065852][ T7] mct_u232 ttyUSB0: expected endpoint missing [ 84.347686][ T21] usb 1-1: USB disconnect, device number 3 [ 84.354775][ T21] mct_u232 1-1:211.0: device disconnected [ 84.810654][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 85.048657][ T4487] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 86.250031][ T4372] Set syz1 is full, maxelem 65536 reached [ 86.313036][ T4502] input: syz0 as /devices/virtual/input/input2 [ 86.549567][ T4513] Illegal XDP return value 4294967274, expect packet loss! [ 88.060513][ T4526] udc-core: couldn't find an available UDC or it's busy [ 88.062382][ T4526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.420078][ T4543] udc-core: couldn't find an available UDC or it's busy [ 90.422024][ T4543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.562382][ T4558] ubi31: attaching mtd0 [ 91.574167][ T4558] ubi31: scanning is finished [ 91.583719][ T4558] ubi31: empty MTD device detected [ 92.616737][ T4558] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 92.665745][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 92.737863][ T4574] device hsr_slave_0 left promiscuous mode [ 92.861386][ T4581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.108'. [ 95.667800][ T4604] input: syz1 as /devices/virtual/input/input3 [ 98.622952][ T4623] udc-core: couldn't find an available UDC or it's busy [ 98.624826][ T4623] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.123152][ T4635] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 104.991234][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 104.991271][ T26] audit: type=1326 audit(102.529:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 105.647063][ T26] audit: type=1326 audit(102.529:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 105.653981][ T26] audit: type=1326 audit(102.529:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 105.678656][ T26] audit: type=1326 audit(102.539:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 105.684438][ T26] audit: type=1326 audit(102.539:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 105.735346][ T26] audit: type=1326 audit(102.539:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 107.826948][ T4025] Bluetooth: hci5: command 0x0409 tx timeout [ 109.096178][ T4677] lo speed is unknown, defaulting to 1000 [ 109.218580][ T4677] chnl_net:caif_netlink_parms(): no params data found [ 109.976681][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.985786][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.001697][ T4677] device bridge_slave_0 entered promiscuous mode [ 110.013169][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.152'. [ 110.030334][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.048786][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.057351][ T4677] device bridge_slave_1 entered promiscuous mode [ 110.152299][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.167236][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.172539][ T4418] Bluetooth: hci5: command 0x041b tx timeout [ 110.227178][ T4740] udc-core: couldn't find an available UDC or it's busy [ 110.229102][ T4740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.270648][ T4677] team0: Port device team_slave_0 added [ 110.274849][ T4677] team0: Port device team_slave_1 added [ 110.311871][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.313763][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.328730][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.334020][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.335911][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.351804][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.401341][ T4742] udc-core: couldn't find an available UDC or it's busy [ 110.404666][ T4742] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.459399][ T4677] device hsr_slave_0 entered promiscuous mode [ 110.476738][ T4740] udc-core: couldn't find an available UDC or it's busy [ 110.479859][ T4740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.510495][ T4677] device hsr_slave_1 entered promiscuous mode [ 110.553017][ T4677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.555029][ T4677] Cannot create hsr debugfs directory [ 110.626505][ T4677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.661593][ T4677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.705119][ T4677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.711868][ T4744] fuse: Bad value for 'fd' [ 110.769292][ T4677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.825686][ T4758] udc-core: couldn't find an available UDC or it's busy [ 111.827552][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.832152][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.867084][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.870119][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.875223][ T4758] udc-core: couldn't find an available UDC or it's busy [ 111.877119][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.883760][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.895096][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.897875][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.901547][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.903404][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.906110][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.910408][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.914081][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.916620][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.918512][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.927701][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.941566][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.361775][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 112.751687][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.767790][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.788382][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.796233][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.814106][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.837648][ T4677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.840411][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.859164][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.862003][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.891308][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.894573][ T4772] udc-core: couldn't find an available UDC or it's busy [ 112.896373][ T4772] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.898713][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.901864][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.986945][ T4777] udc-core: couldn't find an available UDC or it's busy [ 112.988955][ T4777] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.043471][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.052256][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.063158][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.175552][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.178458][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.191919][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.196392][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.486037][ T4790] udc-core: couldn't find an available UDC or it's busy [ 113.488215][ T4790] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.508165][ T4406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.525300][ T4677] device veth0_vlan entered promiscuous mode [ 113.532172][ T4677] device veth1_vlan entered promiscuous mode [ 113.617997][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.620618][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.623414][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.626259][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.650018][ T4406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.658005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.660924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.664577][ T4677] device veth0_macvtap entered promiscuous mode [ 113.671904][ T4677] device veth1_macvtap entered promiscuous mode [ 114.594520][ T4082] Bluetooth: hci5: command 0x0419 tx timeout [ 114.602588][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.605745][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.659466][ T4406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.483320][ T4406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.505398][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.508132][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.510683][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.540390][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.542993][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.566908][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.569926][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.572953][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.575576][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.584748][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.597750][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.600291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.603301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.608692][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.636559][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.647054][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.649930][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.654240][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.656993][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.659573][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.668863][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.672033][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.675018][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.679154][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.681674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.693033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.721313][ T4677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.726327][ T4677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.731226][ T4677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.736783][ T4677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.918777][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.921306][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.924591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.002886][ T4406] tipc: Disabling bearer [ 116.011654][ T4406] tipc: Left network mode [ 116.831395][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.833641][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.837734][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.284991][ T26] audit: type=1326 audit(114.025:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d88c28 code=0x7ffc0000 [ 117.292080][ T26] audit: type=1326 audit(114.035:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa9d88c28 code=0x7ffc0000 [ 117.862512][ T26] audit: type=1326 audit(114.035:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d88c28 code=0x7ffc0000 [ 117.914604][ T26] audit: type=1326 audit(114.035:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d88c28 code=0x7ffc0000 [ 117.985647][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 118.122313][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 118.185103][ T4882] device bond_slave_0 entered promiscuous mode [ 118.187072][ T4882] device bond_slave_1 entered promiscuous mode [ 118.195145][ T4881] device bond_slave_0 left promiscuous mode [ 118.197017][ T4881] device bond_slave_1 left promiscuous mode [ 119.852173][ T4905] loop2: detected capacity change from 0 to 512 [ 119.964831][ T4905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.968628][ T4905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.008654][ T4922] loop1: detected capacity change from 0 to 128 [ 120.052092][ T4905] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.206: inode #11: comm syz.2.206: iget: illegal inode # [ 120.055935][ T4905] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.206: couldn't read orphan inode 11 (err -117) [ 120.082019][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.088503][ T4922] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.120565][ T4927] loop5: detected capacity change from 0 to 4096 [ 120.139668][ T4905] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 120.258346][ T4938] udc-core: couldn't find an available UDC or it's busy [ 120.273597][ T4938] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.316883][ T4677] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 120.322005][ T4677] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 120.347119][ T4944] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.349294][ T4944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.652461][ T4959] loop1: detected capacity change from 0 to 1024 [ 121.559228][ T4959] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,usrquota,jqfmt=vfsv0,abort,nodelalloc,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 121.592205][ T4977] netlink: 108 bytes leftover after parsing attributes in process `syz.5.228'. [ 121.739686][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.232'. [ 122.148557][ T5009] loop2: detected capacity change from 0 to 22 [ 122.165001][ T5009] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 122.254459][ T5009] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.268067][ T4406] device hsr_slave_0 left promiscuous mode [ 122.320737][ T4406] device hsr_slave_1 left promiscuous mode [ 122.365571][ T5017] loop5: detected capacity change from 0 to 1764 [ 122.420620][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.422735][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.429225][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.438153][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.473576][ T4406] device bridge_slave_1 left promiscuous mode [ 122.480479][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.534117][ T4406] device bridge_slave_0 left promiscuous mode [ 122.536830][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.677205][ T4406] device veth1_vlan left promiscuous mode [ 122.679767][ T4406] device veth0_vlan left promiscuous mode [ 122.809038][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.249'. [ 123.027645][ T5046] udc-core: couldn't find an available UDC or it's busy [ 123.030394][ T5046] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.785149][ T5049] loop1: detected capacity change from 0 to 64 [ 123.832934][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 123.842577][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 123.851317][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.916487][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.125493][ T5061] loop1: detected capacity change from 0 to 4096 [ 124.156825][ T4406] bond0 (unregistering): Released all slaves [ 124.216725][ T5061] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 124.377119][ T5070] block nbd1: shutting down sockets [ 124.478202][ T5079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.264'. [ 124.695750][ T5090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.727496][ T5090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.745426][ T5090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.911228][ T5100] tmpfs: Bad value for 'mpol' [ 125.147140][ T5090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.444240][ T5090] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 125.446319][ T5090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.474064][ T5090] vhci_hcd vhci_hcd.0: Device attached [ 125.483566][ T5102] vhci_hcd: connection closed [ 125.494096][ T153] vhci_hcd: stop threads [ 125.496707][ T153] vhci_hcd: release socket [ 125.498056][ T153] vhci_hcd: disconnect device [ 125.549803][ T5109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.620028][ T5109] device bond_slave_0 entered promiscuous mode [ 125.621757][ T5109] device bond_slave_1 entered promiscuous mode [ 125.624072][ T5109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.627931][ T5109] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 125.653414][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 125.854993][ T5116] lo speed is unknown, defaulting to 1000 [ 126.055731][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 126.267696][ T5151] loop5: detected capacity change from 0 to 4096 [ 126.329596][ T5151] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 126.334721][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.347706][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.368141][ T5116] device bridge_slave_0 entered promiscuous mode [ 126.381547][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.383608][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.391537][ T5116] device bridge_slave_1 entered promiscuous mode [ 126.435539][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.442674][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.834352][ T5180] tmpfs: Bad value for 'mpol' [ 127.120433][ T5116] team0: Port device team_slave_0 added [ 127.220224][ T5151] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.246717][ T5151] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 127.394775][ T5194] Zero length message leads to an empty skb [ 127.398697][ T5116] team0: Port device team_slave_1 added [ 127.455748][ T5188] tipc: Started in network mode [ 127.457165][ T5188] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.459966][ T5188] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0038 [ 127.467351][ T5188] tipc: Enabled bearer , priority 10 [ 127.492299][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.502526][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.524928][ T5205] udc-core: couldn't find an available UDC or it's busy [ 127.526151][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.535601][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.537606][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.539255][ T5205] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.550784][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.665811][ T5116] device hsr_slave_0 entered promiscuous mode [ 127.694058][ T5116] device hsr_slave_1 entered promiscuous mode [ 127.765612][ T4418] Bluetooth: hci2: command 0x0409 tx timeout [ 127.915590][ T5116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.956050][ T5116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.002392][ T5116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.023225][ T5116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.196183][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.228325][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.233626][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.291803][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.310479][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.313623][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.334405][ T5244] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.302'. [ 128.339727][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.341685][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.389843][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.400679][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.403900][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.431868][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.433933][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.564258][ T5250] tmpfs: Bad value for 'mpol' [ 128.635717][ T4419] tipc: Node number set to 1 [ 128.833009][ T5252] udc-core: couldn't find an available UDC or it's busy [ 128.872045][ T5252] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.907369][ T5255] fuse: Bad value for 'fd' [ 129.101369][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.112640][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.116728][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.148844][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.167066][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.180571][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.202296][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.205941][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.216805][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.232441][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.235675][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.605188][ T26] audit: type=1326 audit(125.503:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 129.613885][ T26] audit: type=1326 audit(125.512:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 129.990971][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 130.002925][ T26] audit: type=1326 audit(125.512:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 130.157510][ T26] audit: type=1326 audit(125.512:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 130.532566][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.546195][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.370880][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.398481][ T5300] fuse: Bad value for 'fd' [ 131.785158][ T5322] tmpfs: Bad value for 'mpol' [ 132.328435][ T4418] Bluetooth: hci2: command 0x040f tx timeout [ 133.245369][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.248196][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.279413][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.283071][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.285913][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.310015][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.323071][ T5116] device veth0_vlan entered promiscuous mode [ 133.342953][ T5116] device veth1_vlan entered promiscuous mode [ 133.435067][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.438003][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.440956][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.452881][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.459317][ T5343] loop1: detected capacity change from 0 to 4096 [ 133.470950][ T5116] device veth0_macvtap entered promiscuous mode [ 133.489705][ T5116] device veth1_macvtap entered promiscuous mode [ 133.515897][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.330'. [ 133.526212][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.538095][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.540726][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.543355][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.545878][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.556883][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 133.572276][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.575214][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.578194][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.591262][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.602301][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.608822][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.616211][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.619046][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.621869][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.630914][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.643422][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.654865][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.666147][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.669196][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.671818][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.674680][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.696738][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.711530][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.714320][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.717349][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.726621][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.729038][ T5356] netlink: 180 bytes leftover after parsing attributes in process `syz.5.331'. [ 133.734710][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.737699][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.742786][ T5356] netlink: 180 bytes leftover after parsing attributes in process `syz.5.331'. [ 133.757003][ T5116] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.760987][ T5116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.766284][ T5116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.771145][ T5116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.778574][ T5356] netlink: 180 bytes leftover after parsing attributes in process `syz.5.331'. [ 133.831103][ T5358] udc-core: couldn't find an available UDC or it's busy [ 133.851175][ T5358] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.908890][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.911381][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.920333][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.947888][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.950800][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.964378][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.388035][ T5371] tmpfs: Bad value for 'mpol' [ 134.625059][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 135.500154][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.502052][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.228991][ T5395] loop1: detected capacity change from 0 to 2048 [ 136.235451][ T5402] binder: 5401:5402 Acquire 1 refcount change on invalid ref 0 ret -22 [ 136.256167][ T4228] loop1: p1 < > p3 p4 < > [ 136.264443][ T4228] loop1: p3 start 4284289 is beyond EOD, truncated [ 136.292901][ T5395] loop1: p1 < > p3 p4 < > [ 136.302216][ T5395] loop1: p3 start 4284289 is beyond EOD, truncated [ 136.340949][ T5404] udc-core: couldn't find an available UDC or it's busy [ 136.342971][ T5404] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.361138][ T5407] block device autoloading is deprecated and will be removed. [ 138.267945][ T4418] Bluetooth: hci2: command 0x0405 tx timeout [ 138.817622][ T5446] sctp: [Deprecated]: syz.6.362 (pid 5446) Use of int in max_burst socket option deprecated. [ 138.817622][ T5446] Use struct sctp_assoc_value instead [ 138.894927][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 138.922159][ T4228] udevd[4228]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 138.971327][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 138.993403][ T5454] loop6: detected capacity change from 0 to 512 [ 138.997964][ T5453] device lo entered promiscuous mode [ 139.014283][ T4228] udevd[4228]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 139.037815][ T4028] udevd[4028]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 139.069568][ T5454] EXT4-fs (loop6): Test dummy encryption mode enabled [ 139.071771][ T5454] EXT4-fs (loop6): Test dummy encryption mode enabled [ 139.074430][ T5453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.364'. [ 139.082996][ T5454] EXT4-fs (loop6): Can't change test_dummy_encryption on remount [ 139.168647][ T4089] lo speed is unknown, defaulting to 1000 [ 140.286429][ T5502] tmpfs: Bad value for 'mpol' [ 140.524892][ T4419] Bluetooth: hci2: command 0x0405 tx timeout [ 140.809007][ T5511] netlink: 48 bytes leftover after parsing attributes in process `syz.6.383'. [ 140.811477][ T5511] netlink: 'syz.6.383': attribute type 1 has an invalid length. [ 140.846496][ T4048] Bluetooth: Unknown LE signaling command 0xf7 [ 140.848595][ T4048] Bluetooth: Wrong link type (-22) [ 140.863122][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.888427][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.902630][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.975536][ T5518] loop1: detected capacity change from 0 to 1024 [ 141.781683][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 141.843530][ T5518] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 141.999252][ T4523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 142.023194][ T5526] loop5: detected capacity change from 0 to 4096 [ 142.026484][ T4523] EXT4-fs (loop1): Remounting filesystem read-only [ 142.671429][ T5551] tmpfs: Bad value for 'mpol' [ 142.910096][ T5548] netlink: 1456 bytes leftover after parsing attributes in process `syz.5.395'. [ 143.198399][ T5562] fuse: Bad value for 'fd' [ 143.512693][ T5574] loop6: detected capacity change from 0 to 4096 [ 147.781341][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 148.210606][ T5606] overlayfs: failed to clone upperpath [ 148.968560][ T5611] tmpfs: Bad value for 'mpol' [ 149.303117][ T5603] loop6: detected capacity change from 0 to 65536 [ 149.492077][ T5615] loop5: detected capacity change from 0 to 32768 [ 149.587654][ T5615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.415 (5615) [ 149.824156][ T5628] loop1: detected capacity change from 0 to 32768 [ 149.840087][ T5615] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 149.842718][ T5615] BTRFS info (device loop5): using free space tree [ 149.844403][ T5615] BTRFS info (device loop5): has skinny extents [ 149.875443][ T5628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.421 (5628) [ 150.197064][ T5628] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 150.199427][ T5628] BTRFS info (device loop1): enabling auto defrag [ 150.201203][ T5628] BTRFS info (device loop1): max_inline at 0 [ 150.202782][ T5628] BTRFS info (device loop1): enabling ssd optimizations [ 150.204817][ T5628] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 150.207430][ T5628] BTRFS info (device loop1): use lzo compression, level 0 [ 150.209294][ T5628] BTRFS info (device loop1): using free space tree [ 150.211059][ T5628] BTRFS info (device loop1): has skinny extents [ 150.613684][ T5603] XFS (loop6): Mounting V5 Filesystem [ 150.704881][ T5603] XFS (loop6): Ending clean mount [ 151.658426][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.410'. [ 151.660901][ T5684] device batadv_slave_1 entered promiscuous mode [ 152.596934][ T5615] BTRFS error (device loop5): open_ctree failed: -22 [ 153.815651][ T5628] BTRFS error (device loop1): open_ctree failed: -22 [ 153.819165][ T4260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4260) [ 153.953702][ T26] audit: type=1326 audit(148.326:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 153.960062][ T26] audit: type=1326 audit(148.336:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 153.972115][ T26] audit: type=1326 audit(148.336:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 153.983919][ T26] audit: type=1326 audit(148.336:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 154.035267][ T5116] XFS (loop6): Unmounting Filesystem [ 155.780831][ T5742] tipc: Enabling of bearer rejected, failed to enable media [ 157.535149][ T5769] udc-core: couldn't find an available UDC or it's busy [ 157.537165][ T5769] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.674712][ T5773] device bpq0 entered promiscuous mode [ 158.891054][ T26] audit: type=1326 audit(152.957:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 158.899592][ T26] audit: type=1326 audit(152.957:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 158.926016][ T26] audit: type=1326 audit(152.957:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 158.932140][ T26] audit: type=1326 audit(152.957:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 158.976283][ T5800] loop6: detected capacity change from 0 to 512 [ 160.125387][ T5805] tmpfs: Bad value for 'mpol' [ 160.435947][ T5800] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.466315][ T5800] EXT4-fs (loop6): shut down requested (1) [ 160.470616][ T5811] loop5: detected capacity change from 0 to 512 [ 162.018905][ T5811] EXT4-fs (loop5): Ignoring removed bh option [ 162.023463][ T5811] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 162.050713][ T5833] input: syz0 as /devices/virtual/input/input4 [ 162.085882][ T5811] EXT4-fs (loop5): 1 truncate cleaned up [ 162.094956][ T5811] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 164.251253][ T26] audit: type=1326 audit(157.961:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 164.996337][ T26] audit: type=1326 audit(157.961:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 165.053852][ T26] audit: type=1326 audit(157.961:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 165.059675][ T26] audit: type=1326 audit(157.961:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 165.108556][ T5877] loop6: detected capacity change from 0 to 16 [ 165.144177][ T5877] erofs: (device loop6): mounted with root inode @ nid 36. [ 167.801364][ T5930] loop1: detected capacity change from 0 to 512 [ 168.677897][ T26] audit: type=1326 audit(161.609:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 168.683533][ T26] audit: type=1326 audit(161.609:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 168.710165][ T5930] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 168.715434][ T5930] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.081535][ T5941] loop5: detected capacity change from 0 to 16 [ 169.101867][ T26] audit: type=1326 audit(161.618:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 169.142054][ T26] audit: type=1326 audit(161.618:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 169.164837][ T5930] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 169.184131][ T5930] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 169.210293][ T5930] EXT4-fs (loop1): 1 truncate cleaned up [ 169.215582][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,nomblk_io_submit,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 169.474412][ T5941] erofs: (device loop5): mounted with root inode @ nid 36. [ 173.367894][ T6009] udc-core: couldn't find an available UDC or it's busy [ 173.369920][ T6009] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.611273][ T26] audit: type=1326 audit(166.801:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 174.617000][ T26] audit: type=1326 audit(166.801:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 174.702193][ T26] audit: type=1326 audit(166.819:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 174.752096][ T26] audit: type=1326 audit(166.819:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 174.941515][ T6024] loop6: detected capacity change from 0 to 16 [ 175.011464][ T6024] erofs: (device loop6): mounted with root inode @ nid 36. [ 177.764305][ T4104] Bluetooth: hci1: command 0x0406 tx timeout [ 177.798706][ T4090] Bluetooth: hci0: command 0x0406 tx timeout [ 177.841879][ T6054] loop1: detected capacity change from 0 to 1024 [ 178.752197][ T6054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.540495][ T26] audit: type=1326 audit(171.627:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 179.547652][ T26] audit: type=1326 audit(171.627:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 179.713373][ T26] audit: type=1326 audit(171.627:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 179.741460][ T26] audit: type=1326 audit(171.627:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa92c8c28 code=0x7ffc0000 [ 179.869446][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 179.889388][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 180.035598][ T6084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.038152][ T6084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 180.101397][ T6086] binder: 6085:6086 tried to acquire reference to desc 0, got 1 instead [ 180.150074][ T6086] binder: 6085:6086 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 180.154505][ T6086] binder: 6086 RLIMIT_NICE not set [ 180.155933][ T6086] binder: 6086 RLIMIT_NICE not set [ 180.157586][ T6086] binder: send failed reply for transaction 5 to 6085:6086 [ 180.330702][ T6086] binder: 6085:6086 ioctl c0306201 20000240 returned -14 [ 180.355871][ T4090] binder: undelivered TRANSACTION_COMPLETE [ 180.358187][ T4090] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.375280][ T6094] loop1: detected capacity change from 0 to 32768 [ 181.060852][ T6094] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.148849][ T6106] loop6: detected capacity change from 0 to 16 [ 181.181740][ T6106] erofs: (device loop6): mounted with root inode @ nid 36. [ 181.189570][ T4035] ocfs2: Unmounting device (7,1) on (node local) [ 183.989679][ T6136] loop5: detected capacity change from 0 to 40427 [ 184.209182][ T6136] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 184.211583][ T6136] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 184.236762][ T6136] F2FS-fs (loop5): invalid crc value [ 184.298952][ T6136] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.327674][ T6136] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 184.329832][ T6136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 185.723804][ T6163] loop6: detected capacity change from 0 to 512 [ 185.903841][ T6163] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 185.914696][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.917252][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.635246][ T6163] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 186.673290][ T6176] loop5: detected capacity change from 0 to 256 [ 186.740696][ T6163] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 186.759137][ T6163] EXT4-fs (loop6): Remounting filesystem read-only [ 186.765839][ T6176] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 187.975947][ T26] audit: type=1326 audit(180.158:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 188.120470][ T26] audit: type=1326 audit(180.158:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 188.177878][ T26] audit: type=1326 audit(180.158:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 188.210003][ T26] audit: type=1326 audit(180.167:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 188.565749][ T6193] tmpfs: Bad value for 'mpol' [ 189.424667][ T6205] loop1: detected capacity change from 0 to 32768 [ 190.248477][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.550'. [ 190.270749][ T6216] loop5: detected capacity change from 0 to 16 [ 190.282623][ T6205] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 190.285355][ T6205] BTRFS info (device loop1): using free space tree [ 190.287121][ T6205] BTRFS info (device loop1): has skinny extents [ 190.293378][ T6216] erofs: (device loop5): mounted with root inode @ nid 36. [ 191.211314][ T6205] BTRFS info (device loop1): enabling ssd optimizations [ 191.716542][ T26] audit: type=1326 audit(183.600:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 191.752545][ T26] audit: type=1326 audit(183.600:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 192.012445][ T26] audit: type=1326 audit(183.600:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 192.209088][ T26] audit: type=1326 audit(183.600:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 192.498780][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.386612][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.791358][ T6261] udc-core: couldn't find an available UDC or it's busy [ 193.804153][ T6261] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.101885][ T6147] tipc: Resetting bearer [ 194.451772][ T6147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.454734][ T6147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.457161][ T6147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.459717][ T6147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.813889][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 196.877515][ T6276] udc-core: couldn't find an available UDC or it's busy [ 196.880064][ T6276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.432707][ T26] audit: type=1326 audit(190.204:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 199.477388][ T26] audit: type=1326 audit(190.204:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 199.489860][ T26] audit: type=1326 audit(190.204:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 199.496721][ T26] audit: type=1326 audit(190.204:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 199.502992][ T26] audit: type=1326 audit(190.204:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 200.576462][ T6321] loop6: detected capacity change from 0 to 128 [ 200.666071][ T6321] FAT-fs (loop6): bogus number of reserved sectors [ 200.668118][ T6321] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 200.690473][ T6321] FAT-fs (loop6): Can't find a valid FAT filesystem [ 201.597132][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.598947][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.029087][ T6335] loop6: detected capacity change from 0 to 16 [ 202.662894][ T26] audit: type=1326 audit(193.628:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 202.684895][ T26] audit: type=1326 audit(193.628:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 202.690777][ T26] audit: type=1326 audit(193.628:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 202.703245][ T4796] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 202.723538][ T26] audit: type=1326 audit(193.628:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 202.744994][ T26] audit: type=1326 audit(193.628:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 203.061792][ T6335] erofs: (device loop6): mounted with root inode @ nid 36. [ 204.297674][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.502086][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.130876][ T6383] udc-core: couldn't find an available UDC or it's busy [ 207.134266][ T6383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 208.180629][ T26] audit: type=1326 audit(198.707:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 208.265343][ T26] audit: type=1326 audit(198.707:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 208.271976][ T26] audit: type=1326 audit(198.707:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 208.305536][ T6390] team0: No ports can be present during mode change [ 208.313808][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.601'. [ 208.314856][ T26] audit: type=1326 audit(198.707:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 208.355422][ T26] audit: type=1326 audit(198.707:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 208.363004][ T6397] loop5: detected capacity change from 0 to 16 [ 208.377278][ T6397] erofs: (device loop5): mounted with root inode @ nid 36. [ 210.350755][ T6407] tmpfs: Bad value for 'mpol' [ 212.757470][ T26] audit: type=1326 audit(203.337:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 213.851691][ T26] audit: type=1326 audit(203.337:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 213.857845][ T26] audit: type=1326 audit(203.337:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 213.863654][ T26] audit: type=1326 audit(203.347:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ee0ec28 code=0x7ffc0000 [ 215.577953][ T6468] loop5: detected capacity change from 0 to 1024 [ 216.315895][ T4412] Bluetooth: hci4: command 0x1003 tx timeout [ 216.317820][ T4039] Bluetooth: hci4: sending frame failed (-49) [ 216.458927][ T1701] hfsplus: b-tree write err: -5, ino 4 [ 218.778775][ T7] Bluetooth: hci4: command 0x1001 tx timeout [ 218.780555][ T4039] Bluetooth: hci4: sending frame failed (-49) [ 219.080228][ T6495] loop5: detected capacity change from 0 to 128 [ 219.120116][ T6495] EXT4-fs (loop5): Ignoring removed nobh option [ 219.121956][ T6495] EXT4-fs (loop5): Test dummy encryption mode enabled [ 219.254827][ T26] audit: type=1326 audit(209.343:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 219.264506][ T26] audit: type=1326 audit(209.417:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 219.270990][ T26] audit: type=1326 audit(209.417:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 219.297394][ T26] audit: type=1326 audit(209.417:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 219.426051][ T6495] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 219.738846][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.640'. [ 219.903891][ T6495] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 220.937586][ T6542] loop5: detected capacity change from 0 to 256 [ 221.031397][ T4419] Bluetooth: hci4: command 0x1009 tx timeout [ 221.068883][ T6542] FAT-fs (loop5): Directory bread(block 64) failed [ 221.070761][ T6542] FAT-fs (loop5): Directory bread(block 65) failed [ 221.094943][ T6542] FAT-fs (loop5): Directory bread(block 66) failed [ 221.096810][ T6542] FAT-fs (loop5): Directory bread(block 67) failed [ 221.107646][ T6542] FAT-fs (loop5): Directory bread(block 68) failed [ 221.109689][ T6542] FAT-fs (loop5): Directory bread(block 69) failed [ 221.253294][ T6542] FAT-fs (loop5): Directory bread(block 70) failed [ 221.980105][ T6542] FAT-fs (loop5): Directory bread(block 71) failed [ 221.986453][ T6542] FAT-fs (loop5): Directory bread(block 72) failed [ 221.988349][ T6542] FAT-fs (loop5): Directory bread(block 73) failed [ 222.226799][ T26] audit: type=1326 audit(212.195:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 222.233243][ T26] audit: type=1326 audit(212.214:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 222.260128][ T26] audit: type=1326 audit(212.233:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 222.270967][ T6556] netlink: 96 bytes leftover after parsing attributes in process `syz.3.649'. [ 222.274417][ T26] audit: type=1326 audit(212.233:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 222.297938][ T26] audit: type=1326 audit(212.233:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 222.299439][ T6553] loop6: detected capacity change from 0 to 1764 [ 222.364563][ T6559] loop5: detected capacity change from 0 to 16 [ 222.650927][ T6559] erofs: (device loop5): mounted with root inode @ nid 36. [ 223.548441][ T6574] tmpfs: Bad value for 'mpol' [ 225.608057][ T6601] loop1: detected capacity change from 0 to 8 [ 226.934812][ T6601] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 226.944892][ T26] audit: type=1326 audit(216.601:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.5.665" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 227.025962][ T26] audit: type=1326 audit(216.601:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.5.665" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 227.144033][ T4228] udevd[4228]: incorrect cramfs checksum on /dev/loop1 [ 227.188928][ T26] audit: type=1326 audit(216.611:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.5.665" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 227.200160][ T6615] loop5: detected capacity change from 0 to 16 [ 227.228094][ T26] audit: type=1326 audit(216.611:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.5.665" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 227.254528][ T6615] erofs: (device loop5): mounted with root inode @ nid 36. [ 227.269741][ T26] audit: type=1326 audit(216.611:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.5.665" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 228.271245][ T6626] lo speed is unknown, defaulting to 1000 [ 228.314900][ T6631] netlink: 64 bytes leftover after parsing attributes in process `syz.1.674'. [ 228.345130][ T6633] tmpfs: Bad value for 'mpol' [ 231.189585][ T26] audit: type=1326 audit(220.586:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 231.201970][ T26] audit: type=1326 audit(220.586:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 231.238231][ T26] audit: type=1326 audit(220.586:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 231.282162][ T26] audit: type=1326 audit(220.586:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 231.306061][ T26] audit: type=1326 audit(220.586:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 231.343505][ T6667] loop1: detected capacity change from 0 to 16 [ 231.383616][ T6667] erofs: (device loop1): mounted with root inode @ nid 36. [ 235.028276][ T6711] loop5: detected capacity change from 0 to 16 [ 235.031040][ T6712] udc-core: couldn't find an available UDC or it's busy [ 235.032929][ T6712] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.140236][ T26] audit: type=1326 audit(224.272:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 235.154850][ T6711] erofs: (device loop5): mounted with root inode @ nid 36. [ 235.172306][ T26] audit: type=1326 audit(224.272:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 235.370418][ T26] audit: type=1326 audit(224.272:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 235.392032][ T26] audit: type=1326 audit(224.272:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 235.975325][ T26] audit: type=1326 audit(224.272:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939d5c28 code=0x7ffc0000 [ 237.993462][ T4097] Bluetooth: hci5: command 0x0406 tx timeout [ 239.241376][ T6751] loop6: detected capacity change from 0 to 32768 [ 239.346733][ T6751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.716 (6751) [ 239.423202][ T6751] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 239.425493][ T6751] BTRFS info (device loop6): using free space tree [ 239.427200][ T6751] BTRFS info (device loop6): has skinny extents [ 239.759840][ T6751] BTRFS info (device loop6): enabling ssd optimizations [ 239.785034][ T6783] loop5: detected capacity change from 0 to 16 [ 239.845774][ T6783] erofs: (device loop5): mounted with root inode @ nid 36. [ 240.284287][ T26] audit: type=1326 audit(228.977:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 240.381834][ T26] audit: type=1326 audit(229.051:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 240.671046][ T26] audit: type=1326 audit(229.061:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 240.743568][ T26] audit: type=1326 audit(229.061:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 240.860987][ T4228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (4228) [ 243.883733][ T6821] udc-core: couldn't find an available UDC or it's busy [ 243.885627][ T6821] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 245.308191][ T4419] atkbd serio0: keyboard reset failed on [ 245.692837][ T6848] tmpfs: Bad value for 'mpol' [ 246.402460][ T6852] loop1: detected capacity change from 0 to 64 [ 247.499507][ T6855] netlink: 1164 bytes leftover after parsing attributes in process `syz.4.742'. [ 247.523310][ T6855] netlink: 200 bytes leftover after parsing attributes in process `syz.4.742'. [ 251.106697][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.748'. [ 252.156608][ T6896] loop5: detected capacity change from 0 to 16 [ 252.234770][ T6896] erofs: (device loop5): mounted with root inode @ nid 36. [ 253.405748][ T6906] tmpfs: Bad value for 'mpol' [ 253.853980][ T6921] loop5: detected capacity change from 0 to 64 [ 254.427345][ T26] audit: type=1326 audit(242.231:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 254.440006][ T26] audit: type=1326 audit(242.231:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 254.477137][ T26] audit: type=1326 audit(242.231:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 254.512420][ T26] audit: type=1326 audit(242.231:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb90bec28 code=0x7ffc0000 [ 255.868475][ T6937] loop6: detected capacity change from 0 to 16 [ 255.914475][ T6935] loop5: detected capacity change from 0 to 2048 [ 256.024598][ T6937] erofs: (device loop6): mounted with root inode @ nid 36. [ 256.159148][ T6940] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.288568][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.775'. [ 258.577105][ T6968] tipc: Started in network mode [ 258.578600][ T6968] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 258.580689][ T6968] tipc: Enabled bearer , priority 10 [ 258.584047][ T6968] siw: device registration error -23 [ 259.286064][ T26] audit: type=1326 audit(246.403:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 259.310488][ T26] audit: type=1326 audit(246.403:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 259.422821][ T6981] loop1: detected capacity change from 0 to 16 [ 259.424865][ T26] audit: type=1326 audit(246.403:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 259.435725][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'. [ 259.459556][ T26] audit: type=1326 audit(246.403:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 259.487506][ T26] audit: type=1326 audit(246.403:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 259.505491][ T6981] erofs: (device loop1): mounted with root inode @ nid 36. [ 259.884915][ T6983] loop6: detected capacity change from 0 to 40427 [ 261.518479][ T4106] tipc: Node number set to 10005162 [ 261.607808][ T6996] binder: 6995:6996 got transaction to invalid handle, 1 [ 261.610486][ T6996] binder: 6995:6996 transaction failed 29201/-22, size 0-0 line 2917 [ 261.711840][ T4089] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.350335][ T7012] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 262.479636][ T4097] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 263.431536][ T4097] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 263.667755][ T7030] loop6: detected capacity change from 0 to 32768 [ 263.762655][ T7030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.800 (7030) [ 264.600427][ T7036] loop1: detected capacity change from 0 to 2048 [ 264.682647][ T7030] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 264.685160][ T7030] BTRFS info (device loop6): metadata ratio 1025 [ 264.687109][ T7030] BTRFS info (device loop6): enabling disk space caching [ 264.689228][ T7030] BTRFS info (device loop6): enabling ssd optimizations [ 264.691268][ T7030] BTRFS info (device loop6): force clearing of disk cache [ 264.693128][ T7030] BTRFS info (device loop6): turning off barriers [ 264.694881][ T7030] BTRFS info (device loop6): setting nodatacow, compression disabled [ 264.697059][ T7030] BTRFS info (device loop6): using spread ssd allocation scheme [ 264.699091][ T7030] BTRFS info (device loop6): disk space caching is enabled [ 264.701060][ T7030] BTRFS info (device loop6): has skinny extents [ 264.757623][ T7036] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 264.857864][ T7030] BTRFS info (device loop6): clearing free space tree [ 264.860209][ T7030] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.863192][ T7030] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 265.038803][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 265.415848][ T26] audit: type=1326 audit(252.586:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 265.415892][ T26] audit: type=1326 audit(252.586:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 265.415929][ T26] audit: type=1326 audit(252.595:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 265.415959][ T26] audit: type=1326 audit(252.595:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 265.415989][ T26] audit: type=1326 audit(252.595:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 265.677512][ T7072] device hsr_slave_0 left promiscuous mode [ 266.750375][ T26] audit: type=1326 audit(253.830:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.815" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 266.760655][ T26] audit: type=1326 audit(253.830:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.815" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff812b4154 code=0x7ffc0000 [ 266.805654][ T7096] loop5: detected capacity change from 0 to 512 [ 266.808887][ T26] audit: type=1326 audit(253.830:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.815" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 266.823022][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.824763][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.846740][ T26] audit: type=1326 audit(253.830:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.815" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 266.849064][ C0] ================================================================== [ 266.855151][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x40c/0x470 [ 266.857347][ C0] Read of size 2 at addr ffff0000e978e82a by task ksoftirqd/0/14 [ 266.859408][ C0] [ 266.860027][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.189-syzkaller #0 [ 266.862187][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.864922][ C0] Call trace: [ 266.865813][ C0] dump_backtrace+0x0/0x43c [ 266.867025][ C0] show_stack+0x2c/0x3c [ 266.868141][ C0] __dump_stack+0x30/0x40 [ 266.869312][ C0] dump_stack_lvl+0xf8/0x160 [ 266.870594][ C0] print_address_description+0x78/0x30c [ 266.872151][ C0] kasan_report+0xec/0x15c [ 266.873359][ C0] __asan_report_load2_noabort+0x44/0x50 [ 266.874900][ C0] rose_timer_expiry+0x40c/0x470 [ 266.876254][ C0] call_timer_fn+0x19c/0x858 [ 266.877527][ C0] __run_timers+0x46c/0x6c4 [ 266.878401][ T26] audit: type=1326 audit(253.830:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.815" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff812b5c28 code=0x7ffc0000 [ 266.878779][ C0] run_timer_softirq+0x7c/0x114 [ 266.878797][ C0] handle_softirqs+0x344/0xbf0 [ 266.878810][ C0] run_ksoftirqd+0x7c/0x2a0 [ 266.888822][ C0] smpboot_thread_fn+0x4b0/0x920 [ 266.890273][ C0] kthread+0x374/0x454 [ 266.891364][ C0] ret_from_fork+0x10/0x20 [ 266.892724][ C0] [ 266.893374][ C0] Allocated by task 331: [ 266.894570][ C0] __kasan_kmalloc+0xb0/0xf0 [ 266.895996][ C0] kmem_cache_alloc_trace+0x274/0x3fc [ 266.897910][ C0] batadv_forw_packet_alloc+0x1b4/0x400 [ 266.899708][ C0] batadv_iv_ogm_queue_add+0x638/0xab4 [ 266.901223][ C0] batadv_iv_ogm_schedule+0x6b8/0xd7c [ 266.902864][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6f8/0x858 [ 266.904926][ C0] process_one_work+0x79c/0x1140 [ 266.906265][ C0] worker_thread+0x8f4/0x101c [ 266.907499][ C0] kthread+0x374/0x454 [ 266.908581][ C0] ret_from_fork+0x10/0x20 [ 266.909845][ C0] [ 266.910509][ C0] Freed by task 4240: [ 266.911594][ C0] kasan_set_track+0x4c/0x84 [ 266.912902][ C0] kasan_set_free_info+0x28/0x4c [ 266.914481][ C0] ____kasan_slab_free+0x118/0x164 [ 266.915942][ C0] __kasan_slab_free+0x18/0x28 [ 266.917338][ C0] slab_free_freelist_hook+0x128/0x1e8 [ 266.918874][ C0] kfree+0x170/0x40c [ 266.920003][ C0] batadv_forw_packet_free+0x1d8/0x2a0 [ 266.921554][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x720/0x858 [ 266.923586][ C0] process_one_work+0x79c/0x1140 [ 266.924945][ C0] worker_thread+0x8f4/0x101c [ 266.926315][ C0] kthread+0x374/0x454 [ 266.927437][ C0] ret_from_fork+0x10/0x20 [ 266.928735][ C0] [ 266.929394][ C0] Last potentially related work creation: [ 266.931074][ C0] kasan_save_stack+0x38/0x68 [ 266.932397][ C0] kasan_record_aux_stack+0xcc/0x114 [ 266.933938][ C0] insert_work+0x64/0x388 [ 266.935221][ C0] __queue_work+0xb30/0x1054 [ 266.936543][ C0] delayed_work_timer_fn+0x74/0x90 [ 266.937942][ C0] call_timer_fn+0x19c/0x858 [ 266.939209][ C0] __run_timers+0x49c/0x6c4 [ 266.940565][ C0] run_timer_softirq+0x7c/0x114 [ 266.941957][ C0] handle_softirqs+0x344/0xbf0 [ 266.943337][ C0] __irq_exit_rcu+0x240/0x440 [ 266.944714][ C0] irq_exit+0x14/0x88 [ 266.945853][ C0] handle_domain_irq+0x14c/0x1fc [ 266.947249][ C0] gic_handle_irq+0x78/0x1c8 [ 266.948606][ C0] [ 266.949247][ C0] The buggy address belongs to the object at ffff0000e978e800 [ 266.949247][ C0] which belongs to the cache kmalloc-512 of size 512 [ 266.953247][ C0] The buggy address is located 42 bytes inside of [ 266.953247][ C0] 512-byte region [ffff0000e978e800, ffff0000e978ea00) [ 266.957009][ C0] The buggy address belongs to the page: [ 266.958750][ C0] page:000000006b012244 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12978c [ 266.961769][ C0] head:000000006b012244 order:2 compound_mapcount:0 compound_pincount:0 [ 266.964274][ C0] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 266.966588][ C0] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002600 [ 266.969078][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 266.971568][ C0] page dumped because: kasan: bad access detected [ 266.973382][ C0] [ 266.974043][ C0] Memory state around the buggy address: [ 266.975681][ C0] ffff0000e978e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.978052][ C0] ffff0000e978e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.980307][ C0] >ffff0000e978e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.982674][ C0] ^ [ 266.984150][ C0] ffff0000e978e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.986485][ C0] ffff0000e978e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.988757][ C0] ================================================================== [ 266.991001][ C0] Disabling lock debugging due to kernel taint [ 267.080611][ T7096] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.817: iget: bad i_size value: 38620345925642 [ 267.084785][ T7096] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.817: couldn't read orphan inode 15 (err -117) [ 267.093048][ T7096] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.