last executing test programs: 15.7996242s ago: executing program 2 (id=571): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000480)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x0, 0x7, 0x6, 0x13e, 0x8, 0x4, 0x2836f135, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001000071121600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c000000080001"], 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000400)='\x00', 0x1}) close(r0) 9.160278459s ago: executing program 1 (id=602): socket(0xa, 0x801, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xa00}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.162775143s ago: executing program 1 (id=598): unshare(0xc040400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0xc, 0x2}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x107, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "09ebac27db6db013916c000000fcffffff08c0ffff00"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 8.160391613s ago: executing program 1 (id=599): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) 7.96372799s ago: executing program 1 (id=601): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@data_journal}, {@nombcache}, {@block_validity}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 6.733588233s ago: executing program 0 (id=603): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x224, &(0x7f00000009c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 6.671991609s ago: executing program 4 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000740)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='r', 0x1}], 0x1, 0x0, 0x0) 6.462783576s ago: executing program 1 (id=605): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 5.517684266s ago: executing program 0 (id=614): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000740)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@type={'type', 0x3d, "883b7f38"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@nodecompose}, {@uid}, {@umask={'umask', 0x3d, 0x1}}, {@creator={'creator', 0x3d, "85f19471"}}, {@barrier}, {@creator={'creator', 0x3d, "65fe04c2"}}, {@nodecompose}, {}, {@force}, {@uid}, {@creator={'creator', 0x3d, "a9076de4"}}, {@barrier}, {@nobarrier}, {@nodecompose}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'barruer'}}, {@appraise_type}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\x06\n8{&@@'}}, {@fsmagic={'fsmagic', 0x3d, 0x80}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x1, 0x6da, &(0x7f0000004980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/129, 0x81}], 0x1, 0x14a, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.516184346s ago: executing program 4 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x1b, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) 4.421177888s ago: executing program 3 (id=606): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b000000", @ANYRES32=0x0], 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r4, @ANYBLOB="92"], 0x20}}, 0x0) 4.420950068s ago: executing program 4 (id=607): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x100000, 0x6, 0x100}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x5}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffbffff) 4.15357723s ago: executing program 3 (id=608): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.786827291s ago: executing program 1 (id=609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 3.68475607s ago: executing program 0 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000000c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0, 0x1, 0x8, 0x1c, "fee8a0ab78fc179fd1f70ce9f8ffaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300ca00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000600", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.68454898s ago: executing program 2 (id=580): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000011143dcf00000000000000000800", @ANYRES16=r0], 0x28}}, 0x0) 3.664113022s ago: executing program 3 (id=612): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r1) io_setup(0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10000) write$dsp(r0, &(0x7f0000002080)="a5", 0x1) ftruncate(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000007c0)={0xff}, 0x0, 0x0, 0x0, 0x0) 3.5641459s ago: executing program 4 (id=613): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) writev(r1, 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.531391333s ago: executing program 2 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="f087a3842671294c192640a214b1959b17510c2bdf6b04eb849f5b841654687e41f723f582593a77eee27149bdfcfcdeb714e5d0184b14f95ee44800c44b6218ec1eedb2a1b9ebd258b43c108f80a1ac148cbfbf02942acd5aa73c8708d40f40555faabc66fe590d596f556ec7ee71b939048c55639ba9cf31fb99", 0x7b, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x7}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x60) getsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, &(0x7f0000001600)=0xa4) 3.350950868s ago: executing program 2 (id=617): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r1, 0x80044dfd, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000480)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a823c276e3480409e35fb3dec1c2d203bcdc13349558a181974504ae0683a1b9015544b1d50777a1e0bd60dd131d31c80b5f71dbf95f979ac9030d44c61e82", 0x30}, 0x60) r4 = dup3(r3, r2, 0x0) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1) 3.167668013s ago: executing program 2 (id=618): syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x541b, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000040), 0x2) 2.26199279s ago: executing program 0 (id=619): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x30]}}, &(0x7f0000001a40)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000e, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000040)) 2.255056921s ago: executing program 3 (id=620): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 2.251363291s ago: executing program 4 (id=621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") socket(0x10, 0x803, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@errors_continue}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x4, 0x54f, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(r1, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) migrate_pages(0x0, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) 1.930674297s ago: executing program 0 (id=622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230310e707006000000002000020d3"]) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x10) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001800"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x15) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x29, "333be3de1f0900c7ff090662c9b6d8ef2d00c3ca83157a8d4ccc9d7bd45fbbbbd55b36e9349a17a284"}, &(0x7f00000000c0)=0x31) 991.011497ms ago: executing program 3 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000c40)={r4, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x100) 35.016077ms ago: executing program 2 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8b, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x48a, 0x4) getsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000440)=0x3f, 0x4) 34.744837ms ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) 0s ago: executing program 4 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): 0] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.666810][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.686015][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.688099][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.690076][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.691577][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.693904][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.712163][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.743656][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.745918][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.748051][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.749583][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.752751][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.755130][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.756805][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.758469][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.761137][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.764483][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.766783][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.775471][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.783322][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.786100][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.792940][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.795091][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.797060][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.799248][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.817692][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.828807][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.839402][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.843920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.846459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.848670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.850915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.859792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.866002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.868133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.873012][ T4032] device veth0_vlan entered promiscuous mode [ 48.876494][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.878763][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.880812][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.882355][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.889493][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.901178][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.905238][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.907445][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.909501][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.911092][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.922719][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.928975][ T4032] device veth1_vlan entered promiscuous mode [ 48.939049][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.940782][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.943058][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.945089][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.979607][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.990745][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.993686][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.995907][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.998265][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.000761][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.004869][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.006845][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.009615][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.013067][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.015074][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.016609][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.018521][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.020482][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.025440][ T4032] device veth0_macvtap entered promiscuous mode [ 49.029384][ T4032] device veth1_macvtap entered promiscuous mode [ 49.041066][ T4036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.047466][ T4036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.060880][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.063332][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.065303][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.067756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.069942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.074011][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.076170][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.078494][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.080542][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.085689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.087701][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.089229][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.091080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.095840][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.098117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.100191][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.101847][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.103890][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.106166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.108127][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.109565][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.111630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.114038][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.149276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.152293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.155127][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.157831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.160156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.166060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.167695][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.178839][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.193606][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.199132][ T4032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201056][ T4032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.203645][ T4032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205486][ T4032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208414][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.210474][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.215456][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.217861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.220019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.224025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.226787][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.229982][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.234134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.236242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.238300][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.240471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.243961][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.246149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.250362][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.257158][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.270318][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.276343][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.309794][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.313855][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.323023][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.324657][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.329593][ T4038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.339601][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.354634][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.370108][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.380586][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.394875][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.397145][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.424059][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.425776][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.442685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.452936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.455448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.457871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.460526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.473672][ T4037] device veth0_vlan entered promiscuous mode [ 49.479577][ T4037] device veth1_vlan entered promiscuous mode [ 49.515108][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.517694][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.520876][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.523197][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.525348][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.549333][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.554450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.556252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.563382][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.565815][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.568560][ T4037] device veth0_macvtap entered promiscuous mode [ 49.605449][ T4037] device veth1_macvtap entered promiscuous mode [ 49.634736][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.636883][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.638890][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.653067][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.708593][ T4036] device veth0_vlan entered promiscuous mode [ 49.722715][ T4036] device veth1_vlan entered promiscuous mode [ 49.748587][ T4036] device veth0_macvtap entered promiscuous mode [ 49.760265][ T4036] device veth1_macvtap entered promiscuous mode [ 49.777918][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.780186][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.782826][ T4081] Bluetooth: hci0: command 0x041b tx timeout [ 49.787986][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.801346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.803496][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.805534][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.807692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.819034][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.826693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.828830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.833164][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.835274][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.837279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.839284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.841759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.843897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.848294][ T4039] device veth0_vlan entered promiscuous mode [ 49.854702][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.856784][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.858827][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.861021][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.863434][ T4079] Bluetooth: hci3: command 0x041b tx timeout [ 49.867122][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.871098][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.873558][ T4086] Bluetooth: hci1: command 0x041b tx timeout [ 49.875007][ T4086] Bluetooth: hci2: command 0x041b tx timeout [ 49.875634][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.879279][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.913166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.396841][ T4086] Bluetooth: hci4: command 0x041b tx timeout [ 50.772861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.775955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.778320][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.780340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.782872][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.785175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.787422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.789626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.804786][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.807062][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.808935][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.811054][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.814937][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.818781][ T4036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.820664][ T4036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.824558][ T4036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826414][ T4036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.829681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.840450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.842419][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.844611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.852950][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.897486][ T4039] device veth1_vlan entered promiscuous mode [ 50.902603][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.904425][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.906427][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.908181][ T4037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.968802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.971154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.976332][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.978421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.021015][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.023827][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.036638][ T4039] device veth0_macvtap entered promiscuous mode [ 51.050896][ T4038] device veth0_vlan entered promiscuous mode [ 51.057434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.059533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.062469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.064548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.066798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.068756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.094510][ T4038] device veth1_vlan entered promiscuous mode [ 51.104008][ T4039] device veth1_macvtap entered promiscuous mode [ 51.125110][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.127097][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.136820][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.139256][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.144005][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.146472][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.148747][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.151004][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.155004][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.158200][ T4038] device veth0_macvtap entered promiscuous mode [ 51.160185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.162395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.164329][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.166333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.168383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.170478][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.173434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.175601][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.177892][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.194506][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.196815][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.198816][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.201073][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.204773][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.206888][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.210021][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.214844][ T4038] device veth1_macvtap entered promiscuous mode [ 51.225990][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.228228][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.230491][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.233815][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.235882][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.238023][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.239942][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.243172][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.246555][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.254168][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.256234][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.258413][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.258481][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.260622][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.268092][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.268796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.275817][ T4039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.277883][ T4039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.279693][ T4039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.282499][ T4039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.309301][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.314764][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.316710][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.318964][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.321152][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.324323][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.326364][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.328701][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.336109][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.337902][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.340529][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.349723][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.379056][ T4038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.380926][ T4038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.383538][ T590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.385261][ T590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.397794][ T4038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.400520][ T4038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.406511][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.459870][ T4121] loop4: detected capacity change from 0 to 2048 [ 51.499141][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.500827][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.518452][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.523637][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.525479][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.535852][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.539964][ T590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.543993][ T590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.555042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.572361][ T4121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.587870][ T590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.589584][ T590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.615980][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.925847][ T4136] fs-verity: sha512 using implementation "sha512-arm64" [ 51.943699][ T4078] Bluetooth: hci2: command 0x040f tx timeout [ 51.945997][ T4078] Bluetooth: hci1: command 0x040f tx timeout [ 51.949165][ T4078] Bluetooth: hci3: command 0x040f tx timeout [ 52.650334][ T3603] Bluetooth: hci4: command 0x040f tx timeout [ 52.689916][ T4081] Bluetooth: hci0: command 0x040f tx timeout [ 52.691621][ T4136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7: bg 0: block 288: padding at end of block bitmap is not set [ 52.696749][ T4136] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 52.712155][ T4129] Zero length message leads to an empty skb [ 52.820077][ T4135] loop1: detected capacity change from 0 to 4096 [ 53.006665][ T4135] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 53.010491][ T4135] ntfs3: loop1: Failed to load $BadClus. [ 53.046630][ T4147] loop0: detected capacity change from 0 to 2048 [ 53.125335][ T4154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 53.229694][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 53.463474][ T4166] ptrace attach of "./syz-executor exec"[4038] was attempted by ""[4166] [ 54.636866][ T4173] loop3: detected capacity change from 0 to 1024 [ 54.685684][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 54.687024][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 54.688350][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 54.690365][ T4138] Bluetooth: hci4: command 0x0419 tx timeout [ 54.725290][ T4173] EXT4-fs (loop3): Ignoring removed orlov option [ 54.726540][ T4173] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 54.751322][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 54.934939][ T4173] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 54.992352][ T4190] process 'syz.1.25' launched './file1' with NULL argv: empty string added [ 55.859336][ T26] audit: type=1400 audit(55.070:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/thrr/current" pid=4192 comm="syz.2.28" [ 56.255339][ T4207] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 56.258939][ T4210] loop3: detected capacity change from 0 to 512 [ 56.315509][ T4210] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.332499][ T4210] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.335240][ T4210] EXT4-fs error (device loop3): ext4_quota_enable:6383: comm syz.3.30: Bad quota inum: 11, type: 1 [ 56.339966][ T4210] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 56.350483][ T4210] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 56.360250][ T4210] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.468274][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.485252][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.495812][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.506800][ T4216] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.567128][ T4216] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.608510][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.617969][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.619917][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.624231][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 56.626385][ T4216] ip6gretap0 speed is unknown, defaulting to 1000 [ 57.029890][ T4233] loop1: detected capacity change from 0 to 1024 [ 57.204656][ T4233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.802215][ T4231] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.40' sets config #1 [ 59.641203][ C0] sched: RT throttling activated [ 59.813263][ T4242] tipc: Started in network mode [ 59.814538][ T4242] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 59.816440][ T4242] tipc: Enabling of bearer rejected, failed to enable media [ 61.104770][ T4266] udc-core: couldn't find an available UDC or it's busy [ 61.106294][ T4266] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.118214][ T4266] udc-core: couldn't find an available UDC or it's busy [ 61.119629][ T4266] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.091945][ T4292] loop4: detected capacity change from 0 to 4096 [ 63.101983][ T4292] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 63.221031][ T4294] loop2: detected capacity change from 0 to 8192 [ 63.243458][ T4297] loop1: detected capacity change from 0 to 512 [ 63.297470][ T4297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.480806][ T4294] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 63.483137][ T4294] REISERFS (device loop2): using ordered data mode [ 63.484522][ T4294] reiserfs: using flush barriers [ 63.488740][ T4294] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.339202][ T4294] REISERFS (device loop2): checking transaction log (loop2) [ 64.417120][ T4297] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.417274][ T4294] REISERFS (device loop2): Using r5 hash to sort names [ 64.428574][ T4297] EXT4-fs (loop1): 1 truncate cleaned up [ 64.429800][ T4297] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,journal_ioprio=0x0000000000000003,nombcache,quota,,errors=continue. Quota mode: writeback. [ 64.500886][ T4294] reiserfs: enabling write barrier flush mode [ 64.567184][ T4294] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 65.320918][ T4330] loop3: detected capacity change from 0 to 4096 [ 65.391050][ T4335] loop0: detected capacity change from 0 to 1024 [ 65.486876][ T4330] loop3: detected capacity change from 0 to 1024 [ 65.502068][ T4335] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 65.516498][ T4341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.70'. [ 65.594832][ T4330] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.635858][ T4342] loop4: detected capacity change from 0 to 1024 [ 65.714528][ T4342] hfsplus: unable to parse mount options [ 69.397857][ T4391] loop2: detected capacity change from 0 to 64 [ 69.624988][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.626703][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.644454][ T1959] cfg80211: failed to load regulatory.db [ 69.697263][ T4398] device vlan2 entered promiscuous mode [ 70.249148][ T4415] loop1: detected capacity change from 0 to 128 [ 71.168781][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.179574][ T4423] binder: 4422:4423 tried to acquire reference to desc 0, got 1 instead [ 71.239104][ T4423] binder_alloc: 4422: binder_alloc_buf size -624 failed, no address space [ 71.281338][ T4423] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 71.292681][ T4423] binder: 4422:4423 transaction failed 29201/-28, size 0--626 line 3085 [ 71.318564][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 71.322527][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 71.330717][ T1959] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.353056][ T4077] binder: undelivered transaction 6, process died. [ 71.354547][ T4077] binder: undelivered transaction 5, process died. [ 71.438384][ T4415] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 71.446241][ T4429] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 71.456284][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.474221][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.494795][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.666036][ T4443] device syzkaller0 entered promiscuous mode [ 71.677924][ T4419] loop0: detected capacity change from 0 to 32768 [ 71.779119][ T4419] XFS (loop0): Mounting V5 Filesystem [ 71.839991][ T4419] XFS (loop0): Ending clean mount [ 71.850844][ T4419] XFS (loop0): Quotacheck needed: Please wait. [ 71.937256][ T4419] XFS (loop0): Quotacheck: Done. [ 71.954564][ T4458] loop3: detected capacity change from 0 to 1024 [ 72.000498][ T4037] XFS (loop0): Unmounting Filesystem [ 73.031896][ T4465] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 73.148655][ T9] hfsplus: b-tree write err: -5, ino 4 [ 73.286801][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 73.287495][ T4476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.114'. [ 79.347245][ T4550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.138'. [ 79.424388][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 79.928620][ T4563] loop1: detected capacity change from 0 to 4096 [ 79.945961][ T26] audit: type=1326 audit(79.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4571 comm="syz.2.147" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab1ef9a8 code=0x0 [ 79.991344][ T4563] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 80.413801][ T4585] loop3: detected capacity change from 0 to 256 [ 80.472137][ T4585] exfat: Deprecated parameter 'namecase' [ 80.473456][ T4585] exfat: Deprecated parameter 'utf8' [ 80.474633][ T4585] exfat: Deprecated parameter 'namecase' [ 80.475898][ T4585] exfat: Deprecated parameter 'utf8' [ 80.536535][ T4585] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 81.718841][ T4597] loop1: detected capacity change from 0 to 64 [ 81.743719][ T4594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.154'. [ 81.829606][ T4594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.154'. [ 81.832679][ T4600] ======================================================= [ 81.832679][ T4600] WARNING: The mand mount option has been deprecated and [ 81.832679][ T4600] and is ignored by this kernel. Remove the mand [ 81.832679][ T4600] option from the mount to silence this warning. [ 81.832679][ T4600] ======================================================= [ 81.967174][ T4602] ip6gretap0 speed is unknown, defaulting to 1000 [ 82.069593][ T4607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.159'. [ 82.450967][ T4616] binder: 4615:4616 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.453998][ T4616] binder: 4616 RLIMIT_NICE not set [ 82.504890][ T4617] binder: 4615:4617 tried to acquire reference to desc 0, got 1 instead [ 82.507311][ T4616] binder: 4616 RLIMIT_NICE not set [ 82.523416][ T1534] binder: release 4615:4617 transaction 12 out, still active [ 82.525119][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 82.541279][ T1534] binder: release 4615:4616 transaction 12 in, still active [ 82.542989][ T1534] binder: send failed reply for transaction 12, target dead [ 83.515858][ T4622] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.666246][ T4612] loop0: detected capacity change from 0 to 32768 [ 83.830652][ T4612] XFS (loop0): Mounting V5 Filesystem [ 83.834666][ T4622] chnl_net:caif_netlink_parms(): no params data found [ 83.852636][ T4642] loop2: detected capacity change from 0 to 128 [ 83.865791][ T4642] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 83.930426][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,sysvgroups,bsdgroups,barrier=0x0000000000000005,mblk_io_submit,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 83.985984][ T4612] XFS (loop0): Ending clean mount [ 84.001145][ T4612] capability: warning: `syz.0.161' uses deprecated v2 capabilities in a way that may be insecure [ 84.006615][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.011695][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.033306][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.036712][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.063999][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.075405][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.085946][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.091472][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.093552][ T4622] device bridge_slave_0 entered promiscuous mode [ 84.097063][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.099805][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.104650][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.106884][ T4622] device bridge_slave_1 entered promiscuous mode [ 84.161147][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.184052][ T4037] XFS (loop0): Unmounting Filesystem [ 84.209348][ T4655] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.232337][ T4655] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.245296][ T4656] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.252634][ T4622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.262952][ T4622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.266132][ T4656] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.292292][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.307895][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.319355][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.327263][ T4622] team0: Port device team_slave_0 added [ 84.329538][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.339349][ T4622] team0: Port device team_slave_1 added [ 84.340832][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.356353][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.360955][ T4642] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.168: No space for directory leaf checksum. Please run e2fsck -D. [ 84.379184][ T4642] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.168: checksumming directory block 0 [ 84.396035][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.399455][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.405626][ T4622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.411756][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.413191][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.419905][ T4622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.493334][ T4622] device hsr_slave_0 entered promiscuous mode [ 84.633035][ T4622] device hsr_slave_1 entered promiscuous mode [ 84.701610][ T4622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.839512][ T4622] Cannot create hsr debugfs directory [ 84.845024][ T1959] Bluetooth: hci3: command 0x0409 tx timeout [ 85.603098][ T4662] ip6gretap0 speed is unknown, defaulting to 1000 [ 86.075928][ T4675] loop4: detected capacity change from 0 to 32768 [ 86.123128][ T4675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.178 (4675) [ 86.168801][ T4622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.184574][ T4675] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 86.186695][ T4675] BTRFS info (device loop4): setting nodatacow, compression disabled [ 86.188525][ T4675] BTRFS info (device loop4): turning on flush-on-commit [ 86.189917][ T4675] BTRFS info (device loop4): enabling auto defrag [ 86.191975][ T4675] BTRFS info (device loop4): max_inline at 0 [ 86.193210][ T4675] BTRFS info (device loop4): using free space tree [ 86.195465][ T4675] BTRFS info (device loop4): has skinny extents [ 86.316840][ T4622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.407983][ T4622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.990586][ T4675] BTRFS info (device loop4): enabling ssd optimizations [ 87.237517][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 87.292354][ T4622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.575745][ T4705] loop0: detected capacity change from 0 to 2048 [ 89.301441][ T4716] Bluetooth: hci3: command 0x040f tx timeout [ 90.168966][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.184577][ T4723] loop2: detected capacity change from 0 to 2048 [ 90.194779][ T4622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.223904][ T4622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.226582][ T4723] NILFS (loop2): invalid segment: Sequence number mismatch [ 90.228345][ T4723] NILFS (loop2): trying rollback from an earlier position [ 90.245573][ T4723] NILFS (loop2): recovery complete [ 90.265109][ T4724] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.465369][ T4622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.393067][ T4731] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.181: bg 0: block 288: padding at end of block bitmap is not set [ 91.405531][ T4731] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 91.417865][ T4622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.434774][ T4713] Bluetooth: hci3: command 0x0419 tx timeout [ 91.518937][ T4734] loop1: detected capacity change from 0 to 512 [ 91.554126][ T4734] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.571067][ T4734] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 91.621843][ T4734] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.186: attempt to clear invalid blocks 2 len 1 [ 91.631910][ T4622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.658132][ T4734] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 91.705822][ T4622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.712045][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.713954][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.722111][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.724183][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.726075][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.727511][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.733924][ T4734] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 0) [ 91.747359][ T4734] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 1) [ 91.760561][ T4734] EXT4-fs (loop1): 1 truncate cleaned up [ 91.768981][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,grpid,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 91.804053][ T4734] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.186: corrupted in-inode xattr [ 92.035484][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.075183][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.077367][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.079536][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.081091][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.106344][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.237911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.240441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.244161][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.246885][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.260292][ T4622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.263958][ T4622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.267319][ T4750] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 92.268990][ T4750] netlink: 17 bytes leftover after parsing attributes in process `syz.2.189'. [ 92.289602][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.292061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.294766][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.296900][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.299306][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.317187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.370706][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.398674][ T4765] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.400288][ T4765] vhci_hcd: invalid port number 23 [ 92.404642][ T4768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 92.450934][ T4765] loop4: detected capacity change from 0 to 512 [ 92.567409][ T4765] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.198: iget: bogus i_mode (0) [ 92.570351][ T4765] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.198: couldn't read orphan inode 17 (err -117) [ 92.611068][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.636576][ T4765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.198: bg 0: block 7: invalid block bitmap [ 92.659224][ T4779] netlink: 'syz.2.202': attribute type 3 has an invalid length. [ 92.664846][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.136704][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.562431][ T4622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.654923][ T4783] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 93.656469][ T4783] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.203'. [ 93.699042][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.706712][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.772007][ T4622] device veth0_vlan entered promiscuous mode [ 93.774575][ T4792] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 93.776681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.778944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.781110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.792286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.927307][ T4622] device veth1_vlan entered promiscuous mode [ 93.963744][ T4795] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 94.870218][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.873659][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.901887][ T4622] device veth0_macvtap entered promiscuous mode [ 94.912856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.917299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.941966][ T4622] device veth1_macvtap entered promiscuous mode [ 95.040805][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.043327][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.045930][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.048133][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.050699][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.052985][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.055050][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.057161][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.059502][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.068226][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.072510][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.074351][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.076664][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.082153][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.084522][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.018377][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.020576][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.031246][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.033358][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.054597][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.056725][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.058796][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.060944][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.063430][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.065577][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.073849][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.244199][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.246593][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.256355][ T4622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258222][ T4622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.259963][ T4622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.272706][ T4622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.243337][ T4825] loop1: detected capacity change from 0 to 512 [ 97.278060][ T4825] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 97.442205][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.445448][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.449891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.537349][ T4178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.539214][ T4178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.543850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.545226][ T4827] loop2: detected capacity change from 0 to 32768 [ 97.799547][ T4837] kernel profiling enabled (shift: 0) [ 97.811032][ T4827] XFS (loop2): Mounting V5 Filesystem [ 97.981093][ T4274] device hsr_slave_0 left promiscuous mode [ 97.990194][ T4827] XFS (loop2): Ending clean mount [ 98.110073][ T4274] device hsr_slave_1 left promiscuous mode [ 99.512834][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.514553][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.534373][ T4039] XFS (loop2): Unmounting Filesystem [ 99.537788][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.539406][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.571512][ T4274] device bridge_slave_1 left promiscuous mode [ 99.573333][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.645781][ T4274] device bridge_slave_0 left promiscuous mode [ 99.648297][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.000890][ T26] audit: type=1326 audit(99.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.227" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c679a8 code=0x0 [ 100.012867][ T4861] loop4: detected capacity change from 0 to 2048 [ 100.013517][ T4274] device veth1_macvtap left promiscuous mode [ 100.015947][ T4274] device veth0_macvtap left promiscuous mode [ 100.017200][ T4274] device veth1_vlan left promiscuous mode [ 100.018446][ T4274] device veth0_vlan left promiscuous mode [ 101.069033][ T4861] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.270452][ T4878] binder: 4877:4878 tried to acquire reference to desc 0, got 1 instead [ 101.286947][ T4711] binder: undelivered TRANSACTION_COMPLETE [ 101.288120][ T4711] binder: undelivered TRANSACTION_COMPLETE [ 101.302253][ T4711] binder: undelivered transaction 21, process died. [ 101.303729][ T4711] binder: undelivered transaction 20, process died. [ 102.509725][ T4890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.232'. [ 102.616921][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 102.627967][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 102.648060][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.701297][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.731713][ T4892] loop0: detected capacity change from 0 to 2048 [ 102.859125][ T4892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.879989][ T4274] bond0 (unregistering): Released all slaves [ 103.202110][ T4898] loop1: detected capacity change from 0 to 512 [ 103.399264][ T4898] EXT4-fs (loop1): old and new quota format mixing [ 105.448227][ T4917] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.241'. [ 105.451904][ T4917] netlink: zone id is out of range [ 108.457613][ T4935] loop1: detected capacity change from 0 to 128 [ 108.517617][ T4935] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 108.519485][ T4935] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (54545!=39978) [ 108.522894][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 108.526705][ T4935] EXT4-fs (loop1): group descriptors corrupted! [ 108.666947][ T4945] binder: 4943:4945 tried to acquire reference to desc 0, got 1 instead [ 108.682708][ T4945] binder: 4943:4945 BC_FREE_BUFFER u0000000025000000 no match [ 108.694925][ T4945] binder: 4943:4945 unknown command 0 [ 108.695990][ T4945] binder: 4943:4945 ioctl c0306201 20000540 returned -22 [ 108.705189][ T4023] binder: release 4943:4945 transaction 26 out, still active [ 108.706892][ T4023] binder: undelivered TRANSACTION_COMPLETE [ 108.751149][ T4023] binder: send failed reply for transaction 26, target dead [ 108.772326][ T4946] ip6gretap0 speed is unknown, defaulting to 1000 [ 108.783835][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 109.054871][ T4959] loop0: detected capacity change from 0 to 47 [ 109.076756][ T4935] loop1: detected capacity change from 0 to 40427 [ 109.121281][ T4935] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.123174][ T4935] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.153387][ T4946] chnl_net:caif_netlink_parms(): no params data found [ 109.195668][ T4935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.342263][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.343758][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.346333][ T4946] device bridge_slave_0 entered promiscuous mode [ 109.366577][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.374916][ T4935] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.376512][ T4935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.389246][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.412378][ T4946] device bridge_slave_1 entered promiscuous mode [ 109.626680][ T4946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.651830][ T4946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.576248][ T4946] team0: Port device team_slave_0 added [ 110.579577][ T4946] team0: Port device team_slave_1 added [ 110.757976][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.759491][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.799066][ T4946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.802793][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.804256][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.809444][ T4946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.818666][ T4951] loop4: detected capacity change from 0 to 40427 [ 110.822012][ T4711] Bluetooth: hci5: command 0x0409 tx timeout [ 111.725615][ T4951] F2FS-fs (loop4): invalid crc value [ 111.797445][ T4951] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 111.928235][ T4946] device hsr_slave_0 entered promiscuous mode [ 111.982223][ T4946] device hsr_slave_1 entered promiscuous mode [ 112.156279][ T4946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.215363][ T4946] Cannot create hsr debugfs directory [ 112.444597][ T136] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 112.911522][ T4714] Bluetooth: hci5: command 0x041b tx timeout [ 112.922694][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.924320][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.128907][ T4997] Injecting memory failure for pfn 0x157809 at process virtual address 0x20009000 [ 113.153951][ T4997] Memory failure: 0x157809: recovery action for dirty LRU page: Recovered [ 113.206520][ T4999] loop1: detected capacity change from 0 to 8192 [ 113.270688][ T4999] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 113.273268][ T4999] REISERFS (device loop1): using ordered data mode [ 113.274702][ T4999] reiserfs: using flush barriers [ 113.314693][ T4999] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.318566][ T4999] REISERFS (device loop1): checking transaction log (loop1) [ 113.354042][ T4999] REISERFS (device loop1): Using rupasov hash to sort names [ 113.355636][ T4999] REISERFS (device loop1): using 3.5.x disk format [ 113.357446][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.360222][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.433068][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.435558][ T4999] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 113.526807][ T4946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.529651][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.548256][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.556597][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.565599][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.568069][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.578221][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.580351][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.595696][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.598310][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.600498][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.610543][ T5005] loop0: detected capacity change from 0 to 8 [ 113.617768][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.620252][ T4999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.638175][ T4946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.645515][ T4998] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.648287][ T4998] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 113.790212][ T4946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.920741][ T4946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.983751][ T5004] loop0: detected capacity change from 0 to 256 [ 115.058163][ T5004] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 115.093320][ T4714] Bluetooth: hci5: command 0x040f tx timeout [ 115.113320][ T5004] netlink: 'syz.0.262': attribute type 12 has an invalid length. [ 116.279481][ T4946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.443885][ T4946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.507272][ T4710] Bluetooth: hci5: command 0x0419 tx timeout [ 117.514931][ T4946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.711805][ T4946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.468891][ T5042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.285'. [ 119.663627][ T5044] loop2: detected capacity change from 0 to 2048 [ 119.737868][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.751516][ T5044] loop2: p1 < > p3 p4 < > [ 119.779017][ T5044] loop2: p3 start 4284289 is beyond EOD, truncated [ 119.780864][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.785035][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.793402][ T5051] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.810445][ T4946] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.815959][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.818090][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.820338][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.821855][ T4178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.717336][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.733548][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.735790][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.749051][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.750570][ T4178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.784685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.786955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.797515][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.811783][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.816010][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.845949][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.848462][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.850597][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.862941][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.870058][ T4946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.874749][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.876772][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.878933][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.988995][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.045130][ T4026] udevd[4026]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 121.967125][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.969162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.983781][ T4946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.174162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.176400][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.195756][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.198034][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.200449][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.203376][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.211172][ T4946] device veth0_vlan entered promiscuous mode [ 122.217707][ T4946] device veth1_vlan entered promiscuous mode [ 122.442571][ T5053] loop1: detected capacity change from 0 to 40427 [ 122.759079][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.269426][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.350444][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.353316][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.380937][ T4946] device veth0_macvtap entered promiscuous mode [ 123.390587][ T4946] device veth1_macvtap entered promiscuous mode [ 123.466806][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.469006][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.509114][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.519240][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.526309][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.528484][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.546037][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.559462][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.583043][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.585278][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.589073][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.593108][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.595476][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.597642][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.599877][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.602171][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.604301][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.606310][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.608556][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.615036][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.617462][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.622562][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.625471][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.632289][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.292162][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.321694][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.750929][ T4946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.762374][ T4946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.764458][ T4946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.766487][ T4946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.781027][ T5106] loop2: detected capacity change from 0 to 128 [ 126.065099][ T5113] loop1: detected capacity change from 0 to 64 [ 126.090943][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.166641][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.169606][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.227996][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.239691][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.270960][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.277615][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.331015][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.333585][ T5113] hfs: request for non-existent node 131072 in B*Tree [ 127.337489][ T5113] hfs: request for non-existent node 12 in B*Tree [ 127.339021][ T5113] hfs: request for non-existent node 12 in B*Tree [ 127.428764][ T4274] device hsr_slave_0 left promiscuous mode [ 127.463100][ T4274] device hsr_slave_1 left promiscuous mode [ 127.623993][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.625717][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.629792][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.633924][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.638989][ T4274] device bridge_slave_1 left promiscuous mode [ 127.645224][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.703040][ T4274] device bridge_slave_0 left promiscuous mode [ 127.704516][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.831686][ T4274] device veth1_macvtap left promiscuous mode [ 128.833063][ T4274] device veth0_macvtap left promiscuous mode [ 128.834391][ T4274] device veth1_vlan left promiscuous mode [ 128.836003][ T4274] device veth0_vlan left promiscuous mode [ 130.914261][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 130.923945][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 130.935629][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.978513][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.062987][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.064468][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.108310][ T4274] bond0 (unregistering): Released all slaves [ 131.211750][ T4101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.213644][ T4101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.221771][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.239222][ T4101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.241004][ T4101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.249072][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.418780][ T5150] loop0: detected capacity change from 0 to 4096 [ 131.504301][ T5150] ntfs: volume version 3.1. [ 132.929702][ T5171] loop1: detected capacity change from 0 to 512 [ 132.966781][ T5171] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.126694][ T5177] mmap: syz.4.306 (5177) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 134.598695][ T5171] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.604148][ T5171] EXT4-fs (loop1): 1 truncate cleaned up [ 134.605339][ T5171] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.894493][ T5191] loop3: detected capacity change from 0 to 128 [ 136.421824][ T5191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.922536][ T5214] loop3: detected capacity change from 0 to 256 [ 141.300796][ T5230] loop2: detected capacity change from 0 to 8 [ 141.303083][ T5225] loop1: detected capacity change from 0 to 4096 [ 141.337150][ T5229] input: syz0 as /devices/virtual/input/input3 [ 141.404441][ T5225] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 141.406693][ T5225] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 141.408461][ T5225] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 141.411012][ T5225] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 141.441572][ T5230] SQUASHFS error: zlib decompression failed, data probably corrupt [ 141.443423][ T5230] SQUASHFS error: Failed to read block 0x9b: -5 [ 141.444696][ T5230] SQUASHFS error: Unable to read metadata cache entry [99] [ 141.446506][ T5230] SQUASHFS error: Unable to read inode 0x127 [ 141.482212][ T5225] ntfs: volume version 3.1. [ 142.721744][ T5246] device syzkaller0 entered promiscuous mode [ 142.930961][ T5246] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 145.124021][ T5268] No such timeout policy "syz0" [ 147.417792][ T5279] tipc: Started in network mode [ 147.418870][ T5279] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 147.420699][ T5279] tipc: Enabling of bearer rejected, failed to enable media [ 148.477570][ T5287] loop4: detected capacity change from 0 to 1024 [ 148.621679][ T5287] hfsplus: request for non-existent node 3 in B*Tree [ 148.626525][ T5287] hfsplus: request for non-existent node 3 in B*Tree [ 149.573977][ T5287] hfsplus: xattr searching failed [ 151.059040][ T5316] loop1: detected capacity change from 0 to 256 [ 151.297426][ T5316] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 151.844694][ T5326] Cannot find add_set index 0 as target [ 153.827268][ T5328] loop4: detected capacity change from 0 to 256 [ 153.848432][ T5333] loop3: detected capacity change from 0 to 512 [ 153.920067][ T5333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.857797][ T5333] EXT4-fs (loop3): 1 truncate cleaned up [ 154.859009][ T5333] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,journal_ioprio=0x0000000000000003,nombcache,quota,,errors=continue. Quota mode: writeback. [ 154.871772][ T5340] loop1: detected capacity change from 0 to 256 [ 155.172307][ T26] audit: type=1400 audit(155.060:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/thrr/current" pid=5338 comm="syz.0.374" [ 155.894142][ T5346] device syzkaller0 entered promiscuous mode [ 156.113852][ T5346] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 157.174520][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.466506][ T5398] loop4: detected capacity change from 0 to 1024 [ 160.641679][ T5390] udc-core: couldn't find an available UDC or it's busy [ 160.717831][ T5390] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.932460][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.877795][ T26] audit: type=1326 audit(161.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.2.383" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab1ef9a8 code=0x0 [ 161.969824][ T5419] loop0: detected capacity change from 0 to 128 [ 162.105025][ T5423] device syzkaller0 entered promiscuous mode [ 162.151009][ T5423] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 162.180550][ T5419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.212559][ T5449] loop2: detected capacity change from 0 to 1024 [ 164.643900][ T5450] xt_TCPMSS: Only works on TCP SYN packets [ 164.660530][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.735244][ T5449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.272062][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.280865][ T5457] udc-core: couldn't find an available UDC or it's busy [ 165.286611][ T5457] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.287830][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.169699][ T5450] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.220396][ T5459] loop2: detected capacity change from 0 to 2048 [ 166.326846][ T5459] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.381076][ T5471] loop1: detected capacity change from 0 to 512 [ 167.039189][ T5480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.397: bg 0: block 288: padding at end of block bitmap is not set [ 167.061869][ T5480] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 167.712602][ T5471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 167.714407][ T5471] System zones: 1-12 [ 167.721014][ T5471] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.403: inline data xattr refers to an external xattr inode [ 167.737147][ T5471] EXT4-fs (loop1): Remounting filesystem read-only [ 167.738905][ T5471] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.403: couldn't read orphan inode 12 (err -117) [ 167.748709][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 168.005434][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 169.523929][ T4023] Bluetooth: hci0: command 0x0406 tx timeout [ 169.525188][ T4023] Bluetooth: hci1: command 0x0406 tx timeout [ 169.526633][ T4023] Bluetooth: hci2: command 0x0406 tx timeout [ 170.478540][ T5471] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.403: Directory hole found for htree leaf block 0 [ 170.488484][ T5471] EXT4-fs (loop1): Remounting filesystem read-only [ 171.656519][ T5510] tipc: Cannot configure node identity twice [ 172.544550][ T5515] netlink: 'syz.3.425': attribute type 21 has an invalid length. [ 172.546232][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 173.609966][ T5514] loop4: detected capacity change from 0 to 1024 [ 173.624459][ T5514] EXT4-fs (loop4): Ignoring removed orlov option [ 173.625701][ T5514] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 173.744349][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 173.824254][ T5527] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 173.826328][ T5527] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.416'. [ 177.099640][ T5554] sctp: [Deprecated]: syz.4.421 (pid 5554) Use of int in maxseg socket option. [ 177.099640][ T5554] Use struct sctp_assoc_value instead [ 177.134650][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.421'. [ 177.378284][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 177.432572][ T5564] binder: 5563:5564 ioctl c0189374 20000040 returned -22 [ 177.478513][ T5564] binder: 5563:5564 got reply transaction with no transaction stack [ 177.480326][ T5564] binder: 5563:5564 transaction failed 29201/-71, size 0-0 line 2822 [ 178.396138][ T5574] loop4: detected capacity change from 0 to 64 [ 178.415466][ T1534] binder: undelivered TRANSACTION_ERROR: 29201 [ 178.426689][ T5576] loop3: detected capacity change from 0 to 256 [ 178.576603][ T5578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.434'. [ 178.728386][ T5581] loop2: detected capacity change from 0 to 2048 [ 179.711856][ T5581] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 179.790163][ T5581] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,min_batch_time=0x0000000000000002,bsddf,. Quota mode: none. [ 179.826062][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 179.991122][ T5602] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.436: bg 0: block 234: padding at end of block bitmap is not set [ 181.421437][ T5592] loop4: detected capacity change from 0 to 1024 [ 181.822646][ T5602] EXT4-fs (loop2): Remounting filesystem read-only [ 182.070969][ T5609] "syz.3.443" (5609) uses obsolete ecb(arc4) skcipher [ 182.306276][ T4036] hfsplus: walked past end of dir [ 183.138178][ T4036] hfsplus: xattr search failed [ 183.308828][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.450'. [ 184.440949][ T5641] loop2: detected capacity change from 0 to 512 [ 184.748075][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 185.284218][ T5650] loop1: detected capacity change from 0 to 512 [ 185.290807][ T5637] device syzkaller0 entered promiscuous mode [ 185.377231][ T5652] loop4: detected capacity change from 0 to 2048 [ 185.412223][ T5641] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.560014][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 186.660323][ T5661] loop3: detected capacity change from 0 to 1024 [ 187.302947][ T5663] loop0: detected capacity change from 0 to 512 [ 187.334311][ T5652] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.529350][ T4946] hfsplus: walked past end of dir [ 187.662084][ T4946] hfsplus: xattr search failed [ 188.534161][ T5663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.159864][ T5687] udc-core: couldn't find an available UDC or it's busy [ 189.177143][ T5687] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 190.158970][ T4713] Bluetooth: hci4: command 0x0406 tx timeout [ 190.216499][ T5697] loop3: detected capacity change from 0 to 47 [ 190.509878][ T5712] loop2: detected capacity change from 0 to 64 [ 191.481175][ T5719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.474'. [ 192.313962][ T4713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 192.652434][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.653788][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.905118][ T5727] loop4: detected capacity change from 0 to 256 [ 193.155360][ T5727] exfat: Deprecated parameter 'namecase' [ 195.827781][ T5742] udc-core: couldn't find an available UDC or it's busy [ 195.832818][ T5742] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 195.848886][ T5743] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.854675][ T5743] FAT-fs (loop3): unable to read boot sector [ 195.977397][ T5727] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 197.117210][ T5761] input: syz0 as /devices/virtual/input/input4 [ 197.159668][ T5762] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 197.299792][ T5769] loop1: detected capacity change from 0 to 1024 [ 197.428010][ T5769] EXT4-fs (loop1): Ignoring removed oldalloc option [ 197.488461][ T5769] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 198.643221][ T5802] tmpfs: Unknown parameter '00000000000000000005' [ 198.654136][ T5794] bridge0: port 3(vlan3) entered blocking state [ 198.655617][ T5794] bridge0: port 3(vlan3) entered disabled state [ 199.975874][ T5808] loop3: detected capacity change from 0 to 764 [ 200.355171][ C1] vcan0: j1939_tp_rxtimer: 0x00000000dd8ecf69: rx timeout, send abort [ 200.357045][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bea0afb4: rx timeout, send abort [ 200.908914][ C1] vcan0: j1939_tp_rxtimer: 0x00000000dd8ecf69: abort rx timeout. Force session deactivation [ 200.913411][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bea0afb4: abort rx timeout. Force session deactivation [ 201.622280][ T5808] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 201.625198][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 201.830011][ T5818] delete_channel: no stack [ 201.869931][ T5822] fuse: Unknown parameter '0x0000000000000003' [ 203.321861][ T5829] tipc: Cannot configure node identity twice [ 203.914319][ T5849] xt_socket: unknown flags 0x50 [ 204.908247][ T5858] loop4: detected capacity change from 0 to 1024 [ 204.940309][ T5863] loop3: detected capacity change from 0 to 512 [ 204.943142][ T5862] xt_l2tp: v2 doesn't support IP mode [ 204.987324][ T5863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.987372][ T5858] EXT4-fs (loop4): Ignoring removed oldalloc option [ 205.012717][ T5863] EXT4-fs (loop3): 1 truncate cleaned up [ 205.014044][ T5863] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.026067][ T5858] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 206.767838][ T5880] device vlan2 entered promiscuous mode [ 206.781618][ T5880] device bond0 entered promiscuous mode [ 206.783053][ T5880] device bond_slave_0 entered promiscuous mode [ 206.791663][ T5880] device bond_slave_1 entered promiscuous mode [ 206.892224][ T5880] device bond0 left promiscuous mode [ 206.893539][ T5880] device bond_slave_0 left promiscuous mode [ 206.894905][ T5880] device bond_slave_1 left promiscuous mode [ 207.419292][ T5895] xt_socket: unknown flags 0x50 [ 209.372988][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 209.376374][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.138820][ T5930] tipc: Cannot configure node identity twice [ 212.484612][ T4178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.690846][ T5945] ip6gretap0 speed is unknown, defaulting to 1000 [ 213.603176][ T4178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.480033][ T4178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.591540][ T4713] Bluetooth: hci3: command 0x0409 tx timeout [ 214.617590][ T5970] loop2: detected capacity change from 0 to 512 [ 214.640212][ T5971] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 214.822501][ T5973] loop4: detected capacity change from 0 to 2048 [ 214.977239][ T5973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.143109][ T5970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.155971][ T4178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.452185][ T5970] EXT4-fs (loop2): 1 truncate cleaned up [ 215.453479][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.564538][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 215.779841][ T5985] loop0: detected capacity change from 0 to 764 [ 216.969339][ T4708] Bluetooth: hci3: command 0x041b tx timeout [ 217.151880][ T5985] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 217.717082][ T5990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.562'. [ 217.845484][ T5990] netlink: 6 bytes leftover after parsing attributes in process `syz.1.562'. [ 217.866509][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.870354][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.873027][ T5945] device bridge_slave_0 entered promiscuous mode [ 217.889322][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.890917][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.893566][ T5945] device bridge_slave_1 entered promiscuous mode [ 217.921719][ T5997] loop0: detected capacity change from 0 to 2048 [ 217.951958][ T5990] IPVS: Error connecting to the multicast addr [ 217.969012][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.006760][ T5998] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.024853][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.075966][ T5945] team0: Port device team_slave_0 added [ 218.266864][ T5945] team0: Port device team_slave_1 added [ 219.351640][ T4042] Bluetooth: hci3: command 0x040f tx timeout [ 219.430700][ T6006] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 219.457882][ T6006] Remounting filesystem read-only [ 219.617492][ T6006] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 219.666817][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.668266][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.685897][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.730542][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.735882][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.777967][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.990770][ T5945] device hsr_slave_0 entered promiscuous mode [ 220.026486][ T5945] device hsr_slave_1 entered promiscuous mode [ 220.071739][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.073341][ T5945] Cannot create hsr debugfs directory [ 220.098244][ T4037] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 220.108975][ T4037] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 220.131488][ T4037] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 220.133004][ T4037] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 220.168061][ T4037] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 220.224810][ T4037] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 220.226450][ T4037] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 220.228106][ T4037] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.230267][ T4037] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.245258][ T4037] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 220.261233][ T6031] device vxcan1 entered promiscuous mode [ 220.270070][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 220.273089][ T6031] team0: Device vlan3 is up. Set it down before adding it as a team port [ 220.283600][ T6031] device vxcan1 left promiscuous mode [ 220.346440][ T6035] loop0: detected capacity change from 0 to 512 [ 220.443980][ T6032] ip6gretap0 speed is unknown, defaulting to 1000 [ 221.539411][ T4042] Bluetooth: hci3: command 0x0419 tx timeout [ 221.584969][ C0] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(110983524288851) <= P.seqno(110983524288850) <= S.SWH(110983524288925)) and (P.ackno exists or LAWL(136000295695459) <= P.ackno(136000295695459) <= S.AWH(136000295695459), sending SYNC... [ 221.633422][ T6035] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.717445][ T6056] batman_adv: Cannot find parent device [ 221.719693][ T6056] batman_adv: batadv0: Adding interface: ip6gretap1 [ 221.721103][ T6056] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.731379][ T6056] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 221.839636][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 221.841727][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.843557][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.845972][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.851018][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.856475][ T6050] batman_adv: batadv0: Removing interface: ip6gretap1 [ 221.882635][ T6035] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.570: Directory hole found for htree leaf block 0 [ 221.897433][ T6032] chnl_net:caif_netlink_parms(): no params data found [ 222.014859][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.020006][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.027384][ T6032] device bridge_slave_0 entered promiscuous mode [ 222.050587][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.069260][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.078583][ T6032] device bridge_slave_1 entered promiscuous mode [ 222.101523][ T4042] Bluetooth: hci0: command 0x0c20 tx timeout [ 222.109852][ T6077] loop0: detected capacity change from 0 to 256 [ 222.158377][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.195904][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 222.196120][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.216664][ T6086] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 222.233482][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.238726][ T6077] FAT-fs (loop0): bogus logical sector size 2145 [ 222.240755][ T6077] FAT-fs (loop0): Can't find a valid FAT filesystem [ 222.309315][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.341332][ T4042] Bluetooth: hci4: command 0x0409 tx timeout [ 222.358120][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.520519][ T6032] team0: Port device team_slave_0 added [ 222.540350][ T6032] team0: Port device team_slave_1 added [ 222.550686][ T6096] kernel read not supported for file /šLŲ (pid: 6096 comm: syz.0.581) [ 223.290304][ T6100] netlink: 'syz.1.582': attribute type 20 has an invalid length. [ 223.541798][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.643160][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.646009][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.715889][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.751848][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.753424][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.758724][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.663296][ T4042] Bluetooth: hci4: command 0x041b tx timeout [ 226.363936][ T6032] device hsr_slave_0 entered promiscuous mode [ 226.412006][ T6032] device hsr_slave_1 entered promiscuous mode [ 226.463837][ T6032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.465520][ T6032] Cannot create hsr debugfs directory [ 226.515684][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 226.592605][ T4178] device hsr_slave_0 left promiscuous mode [ 226.626618][ T4178] device hsr_slave_1 left promiscuous mode [ 226.693695][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.695568][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.697877][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.699433][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.719264][ T4178] device bridge_slave_1 left promiscuous mode [ 226.720676][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.745688][ T4708] Bluetooth: hci4: command 0x040f tx timeout [ 226.773887][ T4178] device bridge_slave_0 left promiscuous mode [ 226.775296][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.857146][ T6174] binder: 6169:6174 tried to acquire reference to desc 0, got 1 instead [ 226.911568][ T4178] device veth1_macvtap left promiscuous mode [ 226.912839][ T4178] device veth0_macvtap left promiscuous mode [ 226.914092][ T4178] device veth1_vlan left promiscuous mode [ 226.915260][ T4178] device veth0_vlan left promiscuous mode [ 227.152056][ T4178] team0 (unregistering): Port device team_slave_1 removed [ 227.164430][ T4178] team0 (unregistering): Port device team_slave_0 removed [ 227.173624][ T4178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.220878][ T4178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.380523][ T6178] loop0: detected capacity change from 0 to 128 [ 227.397819][ T4178] bond0 (unregistering): Released all slaves [ 227.415262][ T6178] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.514688][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'. [ 227.598757][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.604471][ T4023] binder: release 6169:6174 transaction 34 out, still active [ 227.606032][ T4023] binder: undelivered TRANSACTION_COMPLETE [ 227.668808][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.671556][ T4023] binder: send failed reply for transaction 34, target dead [ 227.674484][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.676466][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.687675][ T6032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.720920][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.723320][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.725438][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.726954][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.728828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.731543][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.733719][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.735239][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.737249][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.739758][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.744220][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.746728][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.758440][ T5945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.760864][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.788445][ T6032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.798577][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.800803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.802994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.805309][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.807627][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.809832][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.823446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.825703][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.833865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.875961][ T6032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.904797][ T6192] loop1: detected capacity change from 0 to 512 [ 227.939691][ T6032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.099043][ T6192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.030502][ T4042] Bluetooth: hci4: command 0x0419 tx timeout [ 229.091699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.094616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.115872][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.133215][ T6032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.177213][ T6192] EXT4-fs (loop1): 1 truncate cleaned up [ 229.178474][ T6192] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 229.203639][ T6032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.334078][ T6032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.340410][ T6205] loop0: detected capacity change from 0 to 256 [ 229.364200][ T4032] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /132/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 229.408441][ T4032] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 229.429622][ T4032] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /132/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 229.438860][ T4032] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 229.469323][ T6032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.490597][ T4032] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /132/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 229.503883][ T4032] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 229.508929][ T4032] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /132/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 229.541843][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.544237][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.548516][ T4032] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 229.553415][ T4032] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /132/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 229.582802][ T4032] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 229.592235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.594347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.596977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.599686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.610450][ T5945] device veth0_vlan entered promiscuous mode [ 229.643445][ T5945] device veth1_vlan entered promiscuous mode [ 229.700913][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.706523][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.708686][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.710765][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.721183][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.725957][ T5945] device veth0_macvtap entered promiscuous mode [ 229.730110][ T5945] device veth1_macvtap entered promiscuous mode [ 229.749770][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.752230][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.754429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.757934][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.775271][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.831635][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.833709][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.835712][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.837885][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.841008][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.854900][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.857091][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.858982][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.861102][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.870452][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.873376][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.877319][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.882254][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.884570][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.886885][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.889143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.918025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.922132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.924736][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.926221][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.929126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.938022][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.939699][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.947016][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.948703][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.967154][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.969296][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.971391][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.972956][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.993909][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.997253][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.030789][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.034105][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.036590][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.041045][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.053402][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.096941][ T6032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.099061][ T6032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.137265][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.139428][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.143158][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.152851][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.183289][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.205989][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.207764][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.230499][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.256446][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.258350][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.268898][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.396344][ T6212] loop3: detected capacity change from 0 to 512 [ 230.482968][ T6216] loop0: detected capacity change from 0 to 1024 [ 230.484336][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.487393][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.500908][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.517154][ T6212] SET target dimension over the limit! [ 231.331424][ T6032] device veth0_vlan entered promiscuous mode [ 231.352935][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.355358][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.357701][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.359766][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.492667][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.494772][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.501604][ T6032] device veth1_vlan entered promiscuous mode [ 231.538122][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 231.565280][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.572043][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.585432][ T6032] device veth0_macvtap entered promiscuous mode [ 231.589847][ T6032] device veth1_macvtap entered promiscuous mode [ 231.599094][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.614916][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.617481][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.648443][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.650658][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.667314][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.673925][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.680800][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.699363][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.705576][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.710092][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.720854][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.723257][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.725630][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.727815][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.729970][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.740970][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.745519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.747866][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.750133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.765984][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.773225][ T6032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.775067][ T6032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.776940][ T6032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.778596][ T6032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.934089][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.940591][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.048335][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.059276][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.061184][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.068046][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.109807][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 232.331429][ T6234] tipc: Started in network mode [ 232.334697][ T6234] tipc: Node identity ffffffff, cluster identity 4711 [ 232.336104][ T6234] tipc: Node number set to 4294967295 [ 232.354249][ T6236] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 232.393496][ T6237] ip6gretap0 speed is unknown, defaulting to 1000 [ 232.476982][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 232.615999][ T6244] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 232.669355][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.672662][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.674920][ T6237] device bridge_slave_0 entered promiscuous mode [ 232.679067][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.680897][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.696531][ T6237] device bridge_slave_1 entered promiscuous mode [ 233.520405][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.524987][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.542497][ T6237] team0: Port device team_slave_0 added [ 233.614689][ T6237] team0: Port device team_slave_1 added [ 233.726531][ T6256] loop4: detected capacity change from 0 to 512 [ 233.812439][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.813890][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.819391][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.863485][ T6256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.882378][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.883791][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.889204][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.896880][ T6256] EXT4-fs (loop4): 1 orphan inode deleted [ 233.898163][ T6256] EXT4-fs (loop4): 1 truncate cleaned up [ 233.899380][ T6256] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,block_validity,quota,. Quota mode: writeback. [ 234.423607][ T4023] Bluetooth: hci0: command 0x0409 tx timeout [ 234.865431][ T6256] EXT4-fs (loop4): shut down requested (0) [ 234.873993][ T6237] device hsr_slave_0 entered promiscuous mode [ 234.902657][ T6237] device hsr_slave_1 entered promiscuous mode [ 234.918034][ T6267] EXT4-fs error (device loop4): ext4_lookup:1856: inode #15: comm syz.4.621: iget: bad extra_isize 46 (inode size 256) [ 234.935183][ T6267] EXT4-fs (loop4): Remounting filesystem read-only [ 234.942419][ T6237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.944287][ T6237] Cannot create hsr debugfs directory [ 235.824551][ T6272] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 236.179537][ T6099] ------------[ cut here ]------------ [ 236.181028][ T6099] WARNING: CPU: 1 PID: 6099 at kernel/rcu/sync.c:193 rcu_sync_dtor+0x14c/0x170 [ 236.182854][ T6099] Modules linked in: [ 236.183728][ T6099] CPU: 1 PID: 6099 Comm: kworker/1:8 Not tainted 5.15.167-syzkaller #0 [ 236.185387][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.187442][ T6099] Workqueue: events destroy_super_work [ 236.188548][ T6099] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 236.190166][ T6099] pc : rcu_sync_dtor+0x14c/0x170 [ 236.191232][ T6099] lr : percpu_free_rwsem+0x48/0x88 [ 236.192364][ T6099] sp : ffff800020507ad0 [ 236.193225][ T6099] x29: ffff800020507ad0 x28: ffff0001b41c1100 x27: ffff0000c1a6fc18 [ 236.194921][ T6099] x26: ffff0000d9ad0848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 236.196585][ T6099] x23: 1fffe0001b35a109 x22: 1fffe0001b35a07f x21: dfff800000000000 [ 236.198232][ T6099] x20: ffff0000d9ad0394 x19: ffff0000d9ad0390 x18: 1fffe00036835d8e [ 236.199817][ T6099] x17: 1fffe00036835d8e x16: ffff800011ac23e0 x15: ffff800014b5ef40 [ 236.201445][ T6099] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000562af29c [ 236.203104][ T6099] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 236.204666][ T6099] x8 : 0000000000000001 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 236.206256][ T6099] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 236.207880][ T6099] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d9ad0390 [ 236.209610][ T6099] Call trace: [ 236.210267][ T6099] rcu_sync_dtor+0x14c/0x170 [ 236.211228][ T6099] percpu_free_rwsem+0x48/0x88 [ 236.212305][ T6099] destroy_super_work+0x20/0x48 [ 236.213320][ T6099] process_one_work+0x790/0x11b8 [ 236.214311][ T6099] worker_thread+0x910/0x1034 [ 236.215310][ T6099] kthread+0x37c/0x45c [ 236.216178][ T6099] ret_from_fork+0x10/0x20 [ 236.217140][ T6099] irq event stamp: 14894 [ 236.218062][ T6099] hardirqs last enabled at (14893): [] finish_lock_switch+0xbc/0x1e8 [ 236.220054][ T6099] hardirqs last disabled at (14894): [] el1_dbg+0x24/0x80 [ 236.221989][ T6099] softirqs last enabled at (14716): [] nsim_dev_trap_report_work+0x610/0x90c [ 236.224278][ T6099] softirqs last disabled at (14714): [] nsim_dev_trap_report_work+0x58c/0x90c [ 236.226316][ T6099] ---[ end trace aab1243479299a67 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.770680][ T6099] ------------[ cut here ]------------ [ 236.771870][ T6099] WARNING: CPU: 1 PID: 6099 at kernel/rcu/sync.c:194 rcu_sync_dtor+0xd8/0x170 [ 236.773725][ T6099] Modules linked in: [ 236.774574][ T6099] CPU: 1 PID: 6099 Comm: kworker/1:8 Tainted: G W 5.15.167-syzkaller #0 [ 236.776485][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.778534][ T6099] Workqueue: events destroy_super_work [ 236.779650][ T6099] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 236.781213][ T6099] pc : rcu_sync_dtor+0xd8/0x170 [ 236.782273][ T6099] lr : percpu_free_rwsem+0x48/0x88 [ 236.783376][ T6099] sp : ffff800020507ad0 [ 236.784257][ T6099] x29: ffff800020507ad0 x28: ffff0001b41c1100 x27: ffff0000c1a6fc18 [ 236.786024][ T6099] x26: ffff0000d9ad0848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 236.787684][ T6099] x23: 1fffe0001b35a109 x22: 1fffe0001b35a072 x21: dfff800000000000 [ 236.789371][ T6099] x20: ffff0000d9ad0394 x19: ffff0000d9ad0390 x18: 1fffe00036835d8e [ 236.791046][ T6099] x17: 1fffe00036835d8e x16: ffff800011ac23e0 x15: ffff800014b5ef40 [ 236.792757][ T6099] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000562af29c [ 236.794450][ T6099] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 236.796131][ T6099] x8 : 0000000000000002 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 236.797817][ T6099] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 236.799431][ T6099] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d9ad0390 [ 236.801072][ T6099] Call trace: [ 236.801737][ T6099] rcu_sync_dtor+0xd8/0x170 [ 236.802724][ T6099] percpu_free_rwsem+0x48/0x88 [ 236.803731][ T6099] destroy_super_work+0x20/0x48 [ 236.804790][ T6099] process_one_work+0x790/0x11b8 [ 236.805777][ T6099] worker_thread+0x910/0x1034 [ 236.806761][ T6099] kthread+0x37c/0x45c [ 236.807648][ T6099] ret_from_fork+0x10/0x20 [ 236.808601][ T6099] irq event stamp: 14960 [ 236.809490][ T6099] hardirqs last enabled at (14959): [] exit_to_kernel_mode+0x100/0x178 [ 236.811549][ T6099] hardirqs last disabled at (14960): [] el1_dbg+0x24/0x80 [ 236.813325][ T6099] softirqs last enabled at (14954): [] handle_softirqs+0xb88/0xdbc [ 236.815309][ T6099] softirqs last disabled at (14899): [] __irq_exit_rcu+0x268/0x4d8 [ 236.817245][ T6099] ---[ end trace aab1243479299a68 ]--- [ 236.831929][ T4079] Bluetooth: hci0: command 0x041b tx timeout [ 236.859155][ T6099] ------------[ cut here ]------------ [ 236.860247][ T6099] WARNING: CPU: 1 PID: 6099 at kernel/rcu/sync.c:204 rcu_sync_dtor+0xe0/0x170 [ 236.862158][ T6099] Modules linked in: [ 236.862995][ T6099] CPU: 1 PID: 6099 Comm: kworker/1:8 Tainted: G W 5.15.167-syzkaller #0 [ 236.864944][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.867093][ T6099] Workqueue: events destroy_super_work [ 236.868250][ T6099] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 236.869773][ T6099] pc : rcu_sync_dtor+0xe0/0x170 [ 236.870759][ T6099] lr : rcu_sync_dtor+0xb0/0x170 [ 236.871754][ T6099] sp : ffff800020507ad0 [ 236.872567][ T6099] x29: ffff800020507ad0 x28: ffff0001b41c1100 x27: ffff0000c1a6fc18 [ 236.874288][ T6099] x26: ffff0000d9ad0848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 236.875978][ T6099] x23: 0000000000000002 x22: 1fffe0001b35a072 x21: dfff800000000000 [ 236.877804][ T6099] x20: ffff0000d9ad0398 x19: ffff0000d9ad0390 x18: ffff800020507240 [ 236.879498][ T6099] x17: 1fffff7ffdfe637e x16: ffff8000088d66a0 x15: 0000000000042ce2 [ 236.881166][ T6099] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000000001 [ 236.882928][ T6099] x11: 1ffff000040a0f34 x10: 0000000000000000 x9 : 8c01b1cfd1efe300 [ 236.884573][ T6099] x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000 [ 236.886211][ T6099] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800011b88df4 [ 236.887855][ T6099] x2 : 0000000000000000 x1 : ffff0000c7a21b40 x0 : ffff0000c7a21b40 [ 236.889430][ T6099] Call trace: [ 236.890112][ T6099] rcu_sync_dtor+0xe0/0x170 [ 236.891068][ T6099] percpu_free_rwsem+0x48/0x88 [ 236.892097][ T6099] destroy_super_work+0x20/0x48 [ 236.893070][ T6099] process_one_work+0x790/0x11b8 [ 236.894067][ T6099] worker_thread+0x910/0x1034 [ 236.895046][ T6099] kthread+0x37c/0x45c [ 236.895917][ T6099] ret_from_fork+0x10/0x20 [ 236.896739][ T6099] irq event stamp: 15368 [ 236.897597][ T6099] hardirqs last enabled at (15367): [] _raw_spin_unlock_irq+0x9c/0x134 [ 236.899503][ T6099] hardirqs last disabled at (15368): [] el1_dbg+0x24/0x80 [ 236.901212][ T6099] softirqs last enabled at (15350): [] handle_softirqs+0xb88/0xdbc [ 236.903150][ T6099] softirqs last disabled at (14963): [] __irq_exit_rcu+0x268/0x4d8 [ 236.904984][ T6099] ---[ end trace aab1243479299a69 ]--- [ 237.457307][ T4178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.602578][ T4178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.679524][ T4178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.738696][ T4178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.201795][ T4178] tipc: Left network mode [ 239.618128][ T4178] IPVS: stopping master sync thread 4792 ... [ 240.248740][ T4178] device hsr_slave_0 left promiscuous mode [ 240.282084][ T4178] device hsr_slave_1 left promiscuous mode [ 240.381354][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.383102][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.385250][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.386812][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.388857][ T4178] device bridge_slave_1 left promiscuous mode [ 240.390286][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.432613][ T4178] device bridge_slave_0 left promiscuous mode [ 240.434030][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.479266][ T4178] device hsr_slave_0 left promiscuous mode [ 240.601391][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.602932][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.605115][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.606575][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.608521][ T4178] device bridge_slave_1 left promiscuous mode [ 240.609955][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.652612][ T4178] device bridge_slave_0 left promiscuous mode [ 240.654053][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.792190][ T4178] device veth1_macvtap left promiscuous mode [ 240.793642][ T4178] device veth0_macvtap left promiscuous mode [ 240.795032][ T4178] device veth1_vlan left promiscuous mode [ 240.796343][ T4178] device veth0_vlan left promiscuous mode [ 240.801167][ T4178] device hsr_slave_1 left promiscuous mode [ 240.881505][ T4178] device veth1_macvtap left promiscuous mode [ 240.882825][ T4178] device veth0_macvtap left promiscuous mode [ 240.884072][ T4178] device veth1_vlan left promiscuous mode [ 240.885390][ T4178] device veth0_vlan left promiscuous mode [ 241.135794][ T4178] bond1 (unregistering): Released all slaves [ 241.265406][ T4178] team0 (unregistering): Port device team_slave_1 removed [ 241.274817][ T4178] team0 (unregistering): Port device team_slave_0 removed [ 241.283740][ T4178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.339625][ T4178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.507540][ T4178] bond0 (unregistering): Released all slaves [ 241.714711][ T4178] team0 (unregistering): Port device team_slave_1 removed [ 241.728404][ T4178] team0 (unregistering): Port device team_slave_0 removed [ 241.736601][ T4178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.769936][ T4178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.898625][ T4178] bond0 (unregistering): Released all slaves