last executing test programs: 11.475812767s ago: executing program 2 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2f3, &(0x7f0000000cc0)="$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") preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x4006, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 9.56719051s ago: executing program 2 (id=673): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_clone(0x20000, 0x0, 0x24, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setpriority(0x0, r2, 0x100002a14b58) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) read(0xffffffffffffffff, 0x0, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.631409476s ago: executing program 1 (id=675): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r6, 0x10, 0x101}, 0xc) 8.531750681s ago: executing program 2 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 7.450548314s ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030", @ANYBLOB], 0xb8}}, 0x4000) 7.449849875s ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 7.365542569s ago: executing program 1 (id=683): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.72395912s ago: executing program 4 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r4, &(0x7f00000008c0)="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", 0xa01) 6.551823678s ago: executing program 0 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.978272246s ago: executing program 2 (id=686): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000300), 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3}}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.977603406s ago: executing program 4 (id=687): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.942357498s ago: executing program 3 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 5.941977328s ago: executing program 1 (id=689): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 5.29594193s ago: executing program 2 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 5.075266111s ago: executing program 0 (id=691): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.069506091s ago: executing program 4 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.019874014s ago: executing program 3 (id=693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.131417147s ago: executing program 3 (id=694): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x4000001c, 0x800, 0xffffffff, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x59, 0x0, @fd=r1, 0x0, 0x0, 0xffff, 0x1, 0x1, {0x0, 0x0, r0}}) io_uring_enter(r2, 0x1d68, 0xfffffffe, 0x2, 0x0, 0x0) 4.130996148s ago: executing program 0 (id=695): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 4.06311963s ago: executing program 1 (id=696): fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) timerfd_create(0x7, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setresgid(0x0, 0x0, 0xee01) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/102364, 0x18fdc}], 0x1, 0x5, 0x400006) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.851894491s ago: executing program 3 (id=697): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) keyctl$setperm(0x5, 0x0, 0x1032925) 2.678766439s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 2.644460001s ago: executing program 4 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000004"], 0x14}}, 0x0) 1.581739433s ago: executing program 0 (id=700): syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100}}}}}, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@nombcache}, {}]}, 0xfe, 0x45c, &(0x7f0000000d80)="$eJzs3D9sG9UfAPDvneP036+/hFIo/QeBgqj4kzTpHzqwFIHUgQEJhiImk6ZVqdugJki0qqAwlBFVYkeMSGxsLJQFARMSK+wIqUJdKExGZ9+lrmsncePEJf58pKvf8z33ve/dvfj5PZ8DGFhjEbE7Iv4XEb9GxEhEJK0FxhoPt25env775uXpJGq11/9M6uX+unl5uihavG5LI1Mr3VHT13fkrr4VUalWZy7k+Yn5c+9OzF289PyZc5XTM6dnzk8dPXro4N7hI1OHexLn1qytuz6Y3bPz+JvX0jhx7e0fv0ryuKMljl4Zqx+19p7qdWV9trUpnQz1sSF0Jeuj2ekq1/v/SJRi08K+kXjl4742DlhVtVpa29B595UasI5lo3lgEBVv9Nnn32Jbo6HHfeHGsViYx7iVb409Q5HmZcqrWP9YRJy48s/n2RarNA8BANDs+rGIeK7d+C+Nh5vK/T9fGxqNiAciYltEPBgR2yPioYh62R0R8UiX9beukNw9/qmN3FNgy5SN/17M17buHP8Vo78YLeW5rfX4y8mpM9WZA/kx2R/lDVl+cpE6vnv5l0877Wse/2VbVn8xFszb8cdQywTdyUq5spKYm934KPv3eJv4kyiWcbLx8c6I2NXl/70jfzzzzJd7OpVZOv5F9GCdqfZFxNON838lWuIvJB3XJydfODJ1eGJjVGcOTDSuiuE2dfz089XXOtW/ovh74Mb1Wmxue/0vxD+abIyYu3jpbH29dq77Oq7+9knHzzT3dv3PV4aTN+rp4ni/X5mfvzAZMZy8evfzU7dfW+SL8tn1v39fpNGm/2+L20did0RkF/HeiHg0Ih7L2/54RDwREfsWif+Hl558p/v4F5mV76Es/pNLnf9oPv/dJ0pnv/+m+/gL2fk/VE/tz5/Jzv9ScS23gSs5dgAAAPBfkda/A5+k4wvpNB0fb3yHf3tsTquzc/PPnpp97/zJxnflR6OcFvOfI03zoZP53HCRn2rJH8znjT8rbarnx6dnq93OJwK9taVD/8/8Xup364BV534tGFz6Pwwu/R8Gl/4Pg0v/h8HVrv9/2Id2AGtviff/TWvVDmDtGf/D4NL/YXDp/zCQOt4bn67olv/7L7HOwumU+HZ4Zb/VsPxEpPdJyOsmUY62u4aW/WMW95jY0HZXv/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ma/AQAA///iauBa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]}) 1.581476533s ago: executing program 3 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4071, 0xff7}], 0x1}, 0x6}], 0x400000000000294, 0x2101, 0x0) socket$caif_stream(0x25, 0x1, 0x2) 947.953884ms ago: executing program 4 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="030304000000000000002a"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) 479.763467ms ago: executing program 0 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x8, 0x5, 0xfffffffd}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x200088d0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 472.118377ms ago: executing program 3 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0, 0x46}], 0x100000ad, 0x10dd3, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 271.828577ms ago: executing program 1 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000840)=ANY=[], 0x1a) 0s ago: executing program 4 (id=706): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 31.142522][ T4308] cgroup: Unknown subsys name 'net' [ 31.369067][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.623998][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.306086][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.311929][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.313372][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.314834][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.316212][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.317410][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.318716][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.320426][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.321673][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.322906][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.324045][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.325272][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.329072][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.330307][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.331515][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.333299][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.333764][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.334922][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.336794][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.338388][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.339684][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.340492][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.341425][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.343494][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.344747][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.346285][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.347777][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.349579][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.350074][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.366336][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.500202][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.502486][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.541242][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 32.563623][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.564990][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.567718][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.569671][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.570759][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.572268][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.574809][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.575863][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.577928][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.585226][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 32.588684][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.589863][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.591350][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.599883][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.610386][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.630851][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.632370][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.633991][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.636854][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.648168][ T4321] team0: Port device team_slave_0 added [ 32.649279][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.650583][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.652187][ T4329] device bridge_slave_0 entered promiscuous mode [ 32.654520][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.660768][ T4320] team0: Port device team_slave_0 added [ 32.663253][ T4320] team0: Port device team_slave_1 added [ 32.664254][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.665506][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.668877][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.670361][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 32.673222][ T4321] team0: Port device team_slave_1 added [ 32.674314][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.675500][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.677870][ T4329] device bridge_slave_1 entered promiscuous mode [ 32.683738][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.686344][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.700532][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.701610][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.705611][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.717224][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.718360][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.722376][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.725713][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.728808][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.735156][ T4325] team0: Port device team_slave_0 added [ 32.737350][ T4329] team0: Port device team_slave_0 added [ 32.739126][ T4325] team0: Port device team_slave_1 added [ 32.740297][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.741458][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.745783][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.751859][ T4329] team0: Port device team_slave_1 added [ 32.762759][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.763881][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.768054][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.772477][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.773583][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.780354][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.788971][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.790173][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.794383][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.802935][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.804091][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.808689][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.837336][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.876186][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.916529][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.917677][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.919215][ T4328] device bridge_slave_0 entered promiscuous mode [ 32.921072][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.922215][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.926715][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.933854][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.935033][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.936656][ T4328] device bridge_slave_1 entered promiscuous mode [ 32.951415][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.987218][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.026219][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.086124][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.087336][ T4321] Cannot create hsr debugfs directory [ 33.127578][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.176303][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.216089][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.217310][ T4325] Cannot create hsr debugfs directory [ 33.219596][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.277129][ T4329] device hsr_slave_0 entered promiscuous mode [ 33.316343][ T4329] device hsr_slave_1 entered promiscuous mode [ 33.366130][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.367359][ T4329] Cannot create hsr debugfs directory [ 33.369381][ T4328] team0: Port device team_slave_0 added [ 33.371023][ T4328] team0: Port device team_slave_1 added [ 33.391794][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.392857][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.398505][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.407918][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.409085][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.413152][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.517195][ T4328] device hsr_slave_0 entered promiscuous mode [ 33.566293][ T4328] device hsr_slave_1 entered promiscuous mode [ 33.606132][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.607481][ T4328] Cannot create hsr debugfs directory [ 33.652156][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.687272][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.731969][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.770096][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.814120][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.847205][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.890804][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.921541][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.956472][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.988374][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.028261][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.069714][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.146973][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.167818][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.226280][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.287204][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.333228][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.377294][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.416571][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 34.417585][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 34.418675][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 34.419648][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 34.420769][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 34.454646][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.479570][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.525005][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.533632][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.538692][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.540694][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.547572][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.549183][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.553310][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.557691][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.564263][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.565811][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.568293][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.569540][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.571196][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.572951][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.574420][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.575540][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.577748][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.579291][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.580679][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.581853][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.583165][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.584606][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.599092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.600743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.602193][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.603358][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.604795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.606821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.613760][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.620707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.626845][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.629266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.631305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.632957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.634589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.639336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.640811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.645155][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.647270][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.648726][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.650255][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.654693][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.659106][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.660554][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.662034][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.663922][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.669184][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.670665][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.679229][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.684044][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.685592][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.688299][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.689743][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.691289][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.692405][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.694155][ T85] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.698397][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.703369][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.705700][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.710776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.712252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.713649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.715230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.720397][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.721636][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.723311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.724970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.728471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.729877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.733082][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.735228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.738326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.739868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.740980][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.742367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.743901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.745395][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.746603][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.749606][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.760441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.761906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.764151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.765971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.769203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.770735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.772322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.784247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.785861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.791484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.793107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.794723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.798892][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.800066][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.801671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.803243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.804827][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.806177][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.810947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.812710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.820303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.821787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.823880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.825614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.831525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.833701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.835313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.837525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.839082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.840979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.842564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.844280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.845770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.854652][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.856876][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.865610][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.867476][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.869062][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.870474][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.871928][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.873599][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.877877][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.880598][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.889135][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.890489][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.893464][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.895310][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.902799][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.910124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.911603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.914072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.915353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.924489][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.933407][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.937854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.939539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.959775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.961459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.968213][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.969863][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.971648][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.973044][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.984521][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.986524][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.988486][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.999660][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.002341][ T4320] device veth0_vlan entered promiscuous mode [ 35.003635][ T4321] device veth0_vlan entered promiscuous mode [ 35.012577][ T4321] device veth1_vlan entered promiscuous mode [ 35.018615][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.020153][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.021352][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.024163][ T4320] device veth1_vlan entered promiscuous mode [ 35.031855][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.034363][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.035902][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.037942][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.049505][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.054739][ T4321] device veth0_macvtap entered promiscuous mode [ 35.060408][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.062000][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.063408][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.065068][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.069190][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.072318][ T4321] device veth1_macvtap entered promiscuous mode [ 35.085387][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.087800][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.089428][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.091059][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.092277][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.097814][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.102476][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.104071][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.105693][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.108777][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.111996][ T4329] device veth0_vlan entered promiscuous mode [ 35.115550][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.118637][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.121599][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.127589][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.129161][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.135031][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.137120][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.141863][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.143109][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.144864][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.149592][ T4320] device veth0_macvtap entered promiscuous mode [ 35.153004][ T4329] device veth1_vlan entered promiscuous mode [ 35.155795][ T4320] device veth1_macvtap entered promiscuous mode [ 35.158065][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.159466][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.160904][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.162339][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.171739][ T4329] device veth0_macvtap entered promiscuous mode [ 35.175018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.176921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.178492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.180017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.181417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.184396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.185929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.190499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.202227][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.203807][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.209304][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.211315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.212828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.214228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.215514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.218646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.221498][ T4329] device veth1_macvtap entered promiscuous mode [ 35.225644][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.229064][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.230603][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.232529][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.234744][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.239531][ T4325] device veth0_vlan entered promiscuous mode [ 35.242074][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.243650][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.245161][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.250353][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.252009][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.254506][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.256617][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.258159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.265764][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.268788][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.272039][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.273629][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.275898][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.281040][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.282480][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.283891][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.285383][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.289925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.291487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.296573][ T4325] device veth1_vlan entered promiscuous mode [ 35.309052][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.310494][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.311829][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.313140][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.328140][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.329442][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.331841][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.334010][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.335538][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.337279][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.338877][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.363079][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.364685][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.371668][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.372878][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.374193][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.379123][ T4325] device veth0_macvtap entered promiscuous mode [ 35.383399][ T4328] device veth0_vlan entered promiscuous mode [ 35.385701][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.387045][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.391823][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.393337][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.394821][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.397714][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.399275][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.400726][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.402384][ T4325] device veth1_macvtap entered promiscuous mode [ 35.407886][ T4328] device veth1_vlan entered promiscuous mode [ 35.432868][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.434078][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.437978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.439392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.440769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.442271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.462212][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.463465][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.477742][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.492627][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.494543][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.498166][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.499892][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.501475][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.503295][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.505789][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.515854][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.517993][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.519581][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.521076][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.538977][ T4328] device veth0_macvtap entered promiscuous mode [ 35.541874][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.543131][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.544651][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.547873][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.551992][ T4328] device veth1_macvtap entered promiscuous mode [ 35.565561][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.577073][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.578643][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.580373][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.582008][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.583731][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.653468][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.656471][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.657892][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.659371][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.661847][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.669044][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.670783][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.677191][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.678882][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.680597][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.682403][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.684034][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.685877][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.692926][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.694687][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.698648][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.706274][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.707983][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.025247][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.027634][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.029249][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.030042][ T4408] loop3: detected capacity change from 0 to 40427 [ 36.030961][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.030990][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.035576][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.042060][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.049742][ T4408] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 36.051481][ T4408] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 36.053768][ T4408] F2FS-fs (loop3): invalid crc value [ 36.057826][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.068867][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.117294][ T4408] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.123821][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.125531][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.150445][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152143][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.153647][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.155227][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.155380][ T4408] F2FS-fs (loop3): Start checkpoint disabled! [ 36.307643][ T4419] loop1: detected capacity change from 0 to 4096 [ 36.477484][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.478808][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.496088][ T4408] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 36.497413][ T4408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 36.502423][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 36.503519][ T4324] Bluetooth: hci1: command 0x041b tx timeout [ 36.504517][ T4324] Bluetooth: hci2: command 0x041b tx timeout [ 36.505578][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 36.506591][ T4324] Bluetooth: hci3: command 0x041b tx timeout [ 36.616385][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.642894][ T4419] ntfs: (device loop1): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 37.308365][ T4419] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 37.310420][ T4419] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 37.326700][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.328915][ T4419] ntfs: (device loop1): load_system_files(): Failed to load $Volume. [ 37.329818][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.331869][ T4419] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 37.357267][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.383405][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.384836][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.389550][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.494956][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.501739][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.506168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.522638][ T4434] loop1: detected capacity change from 0 to 128 [ 37.525261][ T4434] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 37.830214][ T4310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.608863][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 38.608892][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 38.609320][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.612445][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 38.614686][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 38.878409][ T11] kworker/u4:1: attempt to access beyond end of device [ 38.878409][ T11] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 38.895430][ T4460] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 39.664186][ T4469] loop0: detected capacity change from 0 to 32768 [ 41.123073][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 41.123183][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 41.125692][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 41.358131][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 41.359528][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 41.597363][ T4492] device syzkaller0 entered promiscuous mode [ 44.575999][ C1] sched: RT throttling activated [ 44.909803][ T4511] loop0: detected capacity change from 0 to 128 [ 44.911515][ T4511] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 45.008527][ T4310] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.461529][ T4529] loop1: detected capacity change from 0 to 1024 [ 45.687486][ T4533] process 'syz.1.29' launched './file0' with NULL argv: empty string added [ 45.701980][ T4533] hfsplus: bad catalog entry type [ 46.424563][ T4413] hfsplus: b-tree write err: -5, ino 25 [ 46.425708][ T4413] hfsplus: b-tree write err: -5, ino 4 [ 46.430242][ T4413] hfsplus: b-tree write err: -5, ino 2 [ 46.431221][ T4413] hfsplus: b-tree write err: -5, ino 26 [ 46.608389][ T4545] loop2: detected capacity change from 0 to 256 [ 47.432225][ T4550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 47.482591][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.484195][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.499980][ T4554] loop4: detected capacity change from 0 to 512 [ 47.501336][ T4554] ======================================================= [ 47.501336][ T4554] WARNING: The mand mount option has been deprecated and [ 47.501336][ T4554] and is ignored by this kernel. Remove the mand [ 47.501336][ T4554] option from the mount to silence this warning. [ 47.501336][ T4554] ======================================================= [ 47.508248][ T4554] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.543436][ T4554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.587946][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.103972][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.105847][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.109247][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.110910][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.112171][ T4327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.113400][ T4327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.130591][ T4557] tipc: Failed to obtain node identity [ 48.131607][ T4557] tipc: Enabling of bearer rejected, failed to enable media [ 48.408550][ T1703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.458608][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 48.568720][ T1703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.585534][ T4564] chnl_net:caif_netlink_parms(): no params data found [ 49.857693][ T1703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.260516][ T4596] loop3: detected capacity change from 0 to 512 [ 50.261960][ T4596] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.263085][ T4596] EXT4-fs: inline encryption not supported [ 50.264194][ T4596] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.292593][ T4596] EXT4-fs (loop3): Test dummy encryption mode enabled [ 50.293703][ T4596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.295767][ T4596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.298066][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 50.540183][ T4596] EXT4-fs (loop3): 1 truncate cleaned up [ 50.541227][ T4596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.639621][ T4596] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 51.993836][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 52.038452][ T1703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.043846][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.044989][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.047121][ T4564] device bridge_slave_0 entered promiscuous mode [ 52.058626][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.059788][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.061162][ T4564] device bridge_slave_1 entered promiscuous mode [ 52.075636][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.085557][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.143586][ T4614] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 52.416340][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 52.468001][ T4622] loop4: detected capacity change from 0 to 512 [ 52.469370][ T4622] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.470416][ T4622] EXT4-fs: inline encryption not supported [ 52.472042][ T4622] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.479962][ T4622] EXT4-fs (loop4): can't mount with both data=journal and dax [ 52.582851][ T4614] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.585899][ T4564] team0: Port device team_slave_0 added [ 52.593197][ T4564] team0: Port device team_slave_1 added [ 52.604163][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.610068][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.903904][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.940114][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.941493][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.945839][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.292674][ T4630] syz.2.53 sent an empty control message without MSG_MORE. [ 53.342255][ T4564] device hsr_slave_0 entered promiscuous mode [ 53.426498][ T4564] device hsr_slave_1 entered promiscuous mode [ 53.821691][ T4564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.822885][ T4564] Cannot create hsr debugfs directory [ 54.496055][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 54.945487][ T4679] capability: warning: `syz.4.64' uses 32-bit capabilities (legacy support in use) [ 55.766285][ T4685] loop4: detected capacity change from 0 to 32768 [ 55.771182][ T4685] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.65 (4685) [ 55.777808][ T4685] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 55.779323][ T4685] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 55.780819][ T4685] BTRFS info (device loop4): enabling disk space caching [ 55.781874][ T4685] BTRFS info (device loop4): force clearing of disk cache [ 55.783082][ T4685] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 55.784567][ T4685] BTRFS info (device loop4): use zstd compression, level 3 [ 55.785703][ T4685] BTRFS info (device loop4): disk space caching is enabled [ 55.857875][ T4684] block device autoloading is deprecated and will be removed. [ 56.573449][ T4685] BTRFS info (device loop4): enabling ssd optimizations [ 56.576171][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 56.578626][ T4685] BTRFS info (device loop4): rebuilding free space tree [ 56.592182][ T4685] BTRFS info (device loop4): disabling free space tree [ 56.593331][ T4685] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 56.594909][ T4685] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 57.104128][ T4327] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 57.105481][ T4328] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 57.334208][ T4564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.796371][ T4564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.968823][ T4564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.017420][ T4564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.057952][ T4763] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 58.066969][ T4763] device bond1 entered promiscuous mode [ 58.068274][ T4763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.071533][ T4766] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.073651][ T4766] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 58.075297][ T4766] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 58.533720][ T4775] device syzkaller0 entered promiscuous mode [ 58.540437][ T4766] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.542440][ T4766] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 58.658145][ T4766] Zero length message leads to an empty skb [ 59.136098][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 59.136222][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 59.139335][ T4796] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET) [ 59.433835][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.448727][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.450183][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.452947][ T4564] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.461495][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.463184][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.464648][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.465723][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.476124][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.645336][ T4810] loop4: detected capacity change from 0 to 256 [ 59.691790][ T4810] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 60.165827][ T4810] exFAT-fs (loop4): hint_cluster is invalid (521) [ 60.167680][ T4810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 60.169006][ T4810] exFAT-fs (loop4): Filesystem has been set read-only [ 60.170184][ T4810] exFAT-fs (loop4): error, failed to bmap (inode : 0000000095ea551d iblock : 9, err : -5) [ 60.172266][ T4810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 60.173486][ T4810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 60.182901][ T4796] loop2: detected capacity change from 0 to 131072 [ 60.194892][ T4796] F2FS-fs (loop2): invalid crc value [ 60.195187][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.200821][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.202200][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.203269][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.204232][ T4810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 60.204659][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.205836][ T4810] exFAT-fs (loop4): error, failed to bmap (inode : 0000000095ea551d iblock : 8, err : -5) [ 60.208504][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.248350][ T4810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000208) [ 60.498071][ T4796] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.520004][ T4796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.551254][ T1703] device hsr_slave_0 left promiscuous mode [ 60.606939][ T1703] device hsr_slave_1 left promiscuous mode [ 60.689813][ T1703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.696817][ T1703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.756489][ T1703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.767105][ T1703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.797363][ T1703] device bridge_slave_1 left promiscuous mode [ 60.819268][ T1703] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.007765][ T1703] device bridge_slave_0 left promiscuous mode [ 61.008909][ T1703] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.096704][ T1703] device veth1_macvtap left promiscuous mode [ 61.097778][ T1703] device veth0_macvtap left promiscuous mode [ 61.098801][ T1703] device veth1_vlan left promiscuous mode [ 61.099792][ T1703] device veth0_vlan left promiscuous mode [ 61.217036][ T4843] loop2: detected capacity change from 0 to 40427 [ 61.224119][ T4843] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 61.225669][ T4843] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.229824][ T4843] F2FS-fs (loop2): invalid crc value [ 61.239067][ T4843] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 61.257929][ T4843] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.259200][ T4843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.961909][ T4329] syz-executor: attempt to access beyond end of device [ 61.961909][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.035860][ T1703] team0 (unregistering): Port device team_slave_1 removed [ 64.227128][ T1703] team0 (unregistering): Port device team_slave_0 removed [ 64.389838][ T1703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.497723][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499004][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.586945][ T1703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.077531][ T1703] bond0 (unregistering): Released all slaves [ 66.378503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.380494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.389372][ T4564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.391001][ T4564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.393986][ T4844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 66.453417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.455081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.456993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.458577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.460507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.465540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.468321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.485730][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.486718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.494962][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.535878][ T4601] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.542115][ T4601] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.544512][ T4893] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 66.640381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.641794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.645592][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.653541][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.655147][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.663427][ T4564] device veth0_vlan entered promiscuous mode [ 66.669697][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.671340][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.672969][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.674399][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.682255][ T4564] device veth1_vlan entered promiscuous mode [ 66.701089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.702937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.704513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.706913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.711816][ T4564] device veth0_macvtap entered promiscuous mode [ 66.717144][ T4564] device veth1_macvtap entered promiscuous mode [ 66.727589][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.729397][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.730949][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.744499][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.746309][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.747780][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.749458][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.751194][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.752567][ T4903] loop2: detected capacity change from 0 to 32768 [ 66.762725][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.763946][ T4903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.101 (4903) [ 66.766689][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.768400][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.770245][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.772768][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.776939][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.778632][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.780221][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.781904][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.783476][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.785177][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.792720][ T4903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.792847][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.797044][ T4903] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 66.798949][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.800705][ T4903] BTRFS info (device loop2): setting nodatacow, compression disabled [ 66.803155][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.804300][ T4903] BTRFS info (device loop2): turning on flush-on-commit [ 66.805638][ T4564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.810925][ T4564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.812011][ T4903] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 66.812387][ T4564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.813989][ T4903] BTRFS info (device loop2): use lzo compression, level 0 [ 66.815216][ T4564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.822698][ T4903] BTRFS info (device loop2): setting nodatasum [ 66.824314][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.826328][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.829905][ T4903] BTRFS info (device loop2): use no compression [ 66.832059][ T4903] BTRFS info (device loop2): trying to use backup root at mount time [ 66.834756][ T4903] BTRFS info (device loop2): max_inline at 0 [ 66.837976][ T4903] BTRFS info (device loop2): using free space tree [ 66.874169][ T4601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.875485][ T4601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.880626][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.891281][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.892674][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.894111][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.912570][ T4601] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 66.914854][ T4903] BTRFS warning (device loop2): couldn't read tree root [ 66.915870][ T4903] BTRFS warning (device loop2): try to load backup roots slot 1 [ 66.917787][ T4446] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 66.921277][ T4903] BTRFS warning (device loop2): couldn't read tree root [ 66.922480][ T4903] BTRFS warning (device loop2): try to load backup roots slot 2 [ 66.924074][ T4903] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 66.925894][ T4903] BTRFS warning (device loop2): couldn't read tree root [ 66.929868][ T4903] BTRFS warning (device loop2): try to load backup roots slot 3 [ 66.933177][ T4903] BTRFS info (device loop2): enabling ssd optimizations [ 66.934455][ T4903] BTRFS info (device loop2): rebuilding free space tree [ 66.938801][ T4903] BTRFS info (device loop2): checking UUID tree [ 66.971732][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 67.090709][ T4329] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.107545][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 67.117702][ T4927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.169908][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 67.290241][ T4936] loop1: detected capacity change from 0 to 128 [ 67.840627][ T4946] device syzkaller0 entered promiscuous mode [ 67.930350][ T4946] tipc: Started in network mode [ 67.931197][ T4946] tipc: Node identity 966732674401, cluster identity 4711 [ 67.932567][ T4946] tipc: Enabled bearer , priority 0 [ 67.936950][ T4945] tipc: Resetting bearer [ 68.047722][ T4945] tipc: Disabling bearer [ 68.050683][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 68.173663][ T4954] netlink: 'syz.2.111': attribute type 12 has an invalid length. [ 68.186815][ T4956] loop1: detected capacity change from 0 to 8 [ 68.192480][ T4956] SQUASHFS error: Unable to read inode 0x11f [ 68.527340][ T4960] loop0: detected capacity change from 0 to 2048 [ 68.576208][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 68.629443][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 68.648436][ T4960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.665764][ T4960] device syzkaller0 entered promiscuous mode [ 69.015777][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 69.078635][ T4332] block nbd0: Receive control failed (result -1) [ 70.893134][ T24] cfg80211: failed to load regulatory.db [ 70.903629][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.121'. [ 70.966486][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.121'. [ 71.319451][ T4992] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 71.918921][ T5008] capability: warning: `syz.1.125' uses deprecated v2 capabilities in a way that may be insecure [ 72.004575][ T5018] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 72.042114][ T5018] bond2: (slave bridge1): making interface the new active one [ 72.044254][ T5018] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 72.048845][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 72.059304][ T5018] device macvlan2 entered promiscuous mode [ 72.061195][ T5018] device bond2 entered promiscuous mode [ 72.062208][ T5018] device bridge1 entered promiscuous mode [ 72.063496][ T5018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.065454][ T5018] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 72.069996][ T5018] device bond2 left promiscuous mode [ 72.073179][ T5018] device bridge1 left promiscuous mode [ 72.168527][ T5021] tipc: Started in network mode [ 72.169430][ T5021] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.171198][ T5021] tipc: Enabling of bearer rejected, failed to enable media [ 72.778955][ T5031] device syzkaller0 entered promiscuous mode [ 73.283313][ T5035] xt_CT: No such helper "snmp_trap" [ 73.461940][ T4963] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 74.345374][ T4564] EXT4-fs (loop0): unmounting filesystem. [ 74.392969][ T4332] Bluetooth: hci2: unexpected event 0x48 length: 27 > 3 [ 74.392990][ T4332] Bluetooth: hci2: wrong event for mode 0 [ 74.411868][ T5062] device syzkaller0 entered promiscuous mode [ 74.416330][ T5064] loop3: detected capacity change from 0 to 512 [ 74.428248][ T5064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.436572][ T5064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 74.437889][ T5064] System zones: 1-12 [ 74.448429][ T5064] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.449355][ T5053] loop4: detected capacity change from 0 to 40427 [ 74.450775][ T5064] EXT4-fs (loop3): 1 truncate cleaned up [ 74.452610][ T5064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.465768][ T5053] F2FS-fs (loop4): invalid crc value [ 74.474598][ T5053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.498315][ T5053] F2FS-fs (loop4): Start checkpoint disabled! [ 74.566839][ T5053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 74.809009][ T5071] syz.4.139: attempt to access beyond end of device [ 74.809009][ T5071] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.159115][ T4682] kworker/u4:16: attempt to access beyond end of device [ 75.159115][ T4682] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 75.339353][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 75.627160][ T5087] loop1: detected capacity change from 0 to 1024 [ 75.991005][ T5092] hfsplus: bad catalog entry type [ 76.537665][ T5103] loop2: detected capacity change from 0 to 256 [ 78.419054][ T4420] hfsplus: b-tree write err: -5, ino 25 [ 78.420163][ T4420] hfsplus: b-tree write err: -5, ino 4 [ 78.420997][ T4420] hfsplus: b-tree write err: -5, ino 2 [ 78.612665][ T5106] loop0: detected capacity change from 0 to 512 [ 79.034421][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.074809][ T5106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.077763][ T5106] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 79.355107][ T5106] serio: Serial port ptm0 [ 79.360046][ T4332] Bluetooth: Wrong link type (-22) [ 79.472682][ T5128] trusted_key: encrypted_key: insufficient parameters specified [ 79.482217][ T5136] binder: 5135:5136 tried to acquire reference to desc 0, got 1 instead [ 79.485300][ T5136] binder: 5135:5136 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.487596][ T5136] binder: 5136 RLIMIT_NICE not set [ 79.488392][ T5136] binder: 5136 RLIMIT_NICE not set [ 79.489998][ T5136] binder: send failed reply for transaction 5 to 5135:5136 [ 79.491457][ T5136] binder: 5135:5136 transaction 5 fd fixups failed 29201/-12, line 4667 [ 79.494110][ T4744] binder: undelivered TRANSACTION_COMPLETE [ 79.495266][ T4744] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.518894][ T5134] 9pnet: p9_errstr2errno: server reported unknown error ½pw$Ž”Ía>ý [ 79.553325][ T5142] binder: 5141:5142 tried to acquire reference to desc 0, got 1 instead [ 79.557076][ T5142] binder: 5141:5142 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.558908][ T5142] binder: 5142 RLIMIT_NICE not set [ 79.559819][ T5142] binder: 5142 RLIMIT_NICE not set [ 79.561043][ T5142] binder: 5142 RLIMIT_NICE not set [ 79.628466][ T24] binder: undelivered TRANSACTION_COMPLETE [ 79.629503][ T24] binder: undelivered transaction 11, process died. [ 79.630677][ T24] binder: undelivered TRANSACTION_COMPLETE [ 79.686183][ T112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.043540][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 80.064894][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 80.266069][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 80.275295][ T112] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.290640][ T112] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.508742][ T112] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.511489][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.529035][ T112] usb 1-1: Product: syz [ 80.531981][ T112] usb 1-1: Manufacturer: syz [ 80.532767][ T112] usb 1-1: SerialNumber: syz [ 81.608725][ T5183] loop3: detected capacity change from 0 to 128 [ 81.610351][ T5183] ext4: Unknown parameter 'hash' [ 81.638556][ T4312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.161370][ T4564] EXT4-fs (loop0): unmounting filesystem. [ 82.169386][ T112] usb 1-1: USB disconnect, device number 2 [ 82.182464][ T5185] loop4: detected capacity change from 0 to 1764 [ 82.221097][ T5197] device syzkaller0 entered promiscuous mode [ 82.222274][ T4312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.677210][ T5197] tipc: Started in network mode [ 82.678100][ T5197] tipc: Node identity 02ca08cd2497, cluster identity 4711 [ 82.679387][ T5197] tipc: Enabled bearer , priority 0 [ 82.745054][ T5196] tipc: Resetting bearer [ 82.791497][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.147900][ T5196] tipc: Disabling bearer [ 84.564954][ T5240] binder: tried to use weak ref as strong ref [ 84.566213][ T5240] binder: 5232:5240 Acquire 1 refcount change on invalid ref 0 ret -22 [ 85.023546][ T5240] binder: 5232:5240 got transaction to invalid handle, 1 [ 85.024810][ T5240] binder: 5240:5232 cannot find target node [ 85.025775][ T5240] binder: 5232:5240 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3045 [ 85.058016][ T5233] binder: 5232:5233 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 85.060017][ T5233] binder: 5233 RLIMIT_NICE not set [ 85.060843][ T5233] binder: 5232:5233 ioctl c0306201 20001440 returned -11 [ 85.079848][ T5249] loop2: detected capacity change from 0 to 128 [ 85.263487][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.337198][ T5249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.349880][ T5247] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 85.685295][ T5257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 85.697140][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 85.784815][ T5268] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 85.799515][ T5268] device bond1 entered promiscuous mode [ 85.805771][ T5268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.859318][ T5268] bond1: (slave bridge1): making interface the new active one [ 85.860671][ T5268] device bridge1 entered promiscuous mode [ 85.862683][ T5268] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 86.267798][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 86.929781][ T5285] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 86.948335][ T5281] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 86.966414][ T5281] device veth3 entered promiscuous mode [ 87.000959][ T5285] bond2: (slave veth3): Enslaving as an active interface with a down link [ 87.003899][ T5284] 8021q: VLANs not supported on xfrm0 [ 87.008233][ T5286] loop2: detected capacity change from 0 to 8192 [ 87.023363][ T5286] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 87.086353][ T5285] bond2: (slave dummy0): making interface the new active one [ 87.093507][ T5285] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 87.183409][ T5285] netlink: 14 bytes leftover after parsing attributes in process `syz.3.208'. [ 88.881924][ T5285] bond2: (slave dummy0): Releasing active interface [ 89.551180][ T5316] loop0: detected capacity change from 0 to 512 [ 89.589188][ T5316] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.216: bad orphan inode 15 [ 89.593091][ T5316] ext4_test_bit(bit=14, block=18) = 1 [ 89.618484][ T5316] is_bad_inode(inode)=0 [ 89.619232][ T5316] NEXT_ORPHAN(inode)=1023 [ 89.619923][ T5316] max_ino=32 [ 89.620444][ T5316] i_nlink=0 [ 89.632792][ T5316] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2916: inode #15: comm syz.0.216: corrupted xattr block 19 [ 89.640583][ T5316] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 89.645593][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.171665][ T5332] Illegal XDP return value 4240654080 on prog (id 25) dev N/A, expect packet loss! [ 90.267826][ T5333] "syz.3.223" (5333) uses obsolete ecb(arc4) skcipher [ 91.903929][ T5323] loop4: detected capacity change from 0 to 40427 [ 91.905598][ T5323] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.943509][ T5323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.950414][ T5323] F2FS-fs (loop4): invalid crc value [ 92.061073][ T5323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.469003][ T5323] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.470255][ T5323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.642938][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 92.726207][ T4564] EXT4-fs (loop0): unmounting filesystem. [ 94.857745][ T5380] loop4: detected capacity change from 0 to 1024 [ 94.899723][ T5380] hfsplus: failed to load extents file [ 96.428130][ T5399] netlink: 56 bytes leftover after parsing attributes in process `syz.0.240'. [ 96.429704][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 96.449741][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 96.656969][ T5408] netlink: 'syz.1.242': attribute type 29 has an invalid length. [ 96.932260][ T5408] netlink: 'syz.1.242': attribute type 29 has an invalid length. [ 97.008048][ T5414] device syzkaller0 entered promiscuous mode [ 99.434558][ T5451] loop3: detected capacity change from 0 to 128 [ 99.436340][ T5451] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.442162][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.475781][ T5426] loop2: detected capacity change from 0 to 32768 [ 99.482237][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 99.493493][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 99.503332][ T5426] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.504668][ T5426] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.871294][ T5426] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 99.874893][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.876096][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.883759][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 99.902198][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 99.906994][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.909976][ T5426] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 100.027427][ T5470] binder: 5469:5470 tried to acquire reference to desc 0, got 1 instead [ 100.033425][ T5470] binder: 5469:5470 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.043291][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.044859][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.046053][ T5470] binder: 5470 RLIMIT_NICE not set [ 100.047217][ T5470] binder: 5470 RLIMIT_NICE not set [ 100.057381][ T22] binder: release 5469:5470 transaction 20 out, still active [ 100.058691][ T22] binder: undelivered TRANSACTION_COMPLETE [ 100.086104][ T22] binder: release 5469:5470 transaction 20 in, still active [ 100.087412][ T22] binder: send failed reply for transaction 20, target dead [ 100.326824][ T5474] loop3: detected capacity change from 0 to 256 [ 100.501147][ T5474] FAT-fs (loop3): Directory bread(block 64) failed [ 100.502385][ T5474] FAT-fs (loop3): Directory bread(block 65) failed [ 100.503801][ T5474] FAT-fs (loop3): Directory bread(block 66) failed [ 100.505005][ T5474] FAT-fs (loop3): Directory bread(block 67) failed [ 100.506285][ T5474] FAT-fs (loop3): Directory bread(block 68) failed [ 100.507399][ T5474] FAT-fs (loop3): Directory bread(block 69) failed [ 100.508782][ T5474] FAT-fs (loop3): Directory bread(block 70) failed [ 100.510004][ T5474] FAT-fs (loop3): Directory bread(block 71) failed [ 100.511214][ T5474] FAT-fs (loop3): Directory bread(block 72) failed [ 100.512336][ T5474] FAT-fs (loop3): Directory bread(block 73) failed [ 101.424052][ T5484] binder: 5483:5484 tried to acquire reference to desc 0, got 1 instead [ 101.715180][ T5484] binder: 5483:5484 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.735388][ T5484] binder: 5484 RLIMIT_NICE not set [ 101.739474][ T5484] binder: 5484 RLIMIT_NICE not set [ 101.743297][ T5484] binder: 5484 RLIMIT_NICE not set [ 101.744215][ T5484] binder: 5483:5484 got transaction with invalid parent offset or type [ 101.748417][ T5484] binder: 5483:5484 transaction reply to 5483:5484 failed 26/29201/-22, size 104-24 line 3439 [ 101.751065][ T5484] binder: send failed reply for transaction 25 to 5483:5484 [ 101.760965][ T4743] binder: undelivered TRANSACTION_COMPLETE [ 101.761952][ T4743] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.763020][ T4743] binder: undelivered TRANSACTION_ERROR: 29190 [ 102.268325][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.292830][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.973741][ T5457] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.975286][ T5457] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.977080][ T5457] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.978697][ T5457] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.231812][ T5457] device bond1 left promiscuous mode [ 103.236992][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.304824][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.310135][ T5497] bond0: (slave rose0): Enslaving as an active interface with an up link [ 103.468648][ T5519] ptrace attach of "./syz-executor exec"[4320] was attempted by " [ 103.648280][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 104.613817][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 104.627639][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 104.817543][ T5565] loop1: detected capacity change from 0 to 164 [ 104.857117][ T4310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.887186][ T5603] loop3: detected capacity change from 0 to 8 [ 106.857534][ T5626] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 107.380018][ T5644] device syzkaller0 entered promiscuous mode [ 107.393252][ T5639] tipc: Enabled bearer , priority 0 [ 107.399171][ T5638] tipc: Resetting bearer [ 107.467953][ T4332] Bluetooth: hci0: Malformed Event: 0x48 [ 107.806790][ T5652] Bluetooth: MGMT ver 1.22 [ 107.808614][ T5652] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 107.840058][ T5638] tipc: Disabling bearer [ 107.864142][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 108.048691][ T5659] tipc: Started in network mode [ 108.049775][ T5659] tipc: Node identity 4, cluster identity 4711 [ 108.050794][ T5659] tipc: Node number set to 4 [ 109.814375][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 110.304395][ T5699] loop0: detected capacity change from 0 to 512 [ 110.305791][ T5699] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.558031][ T5699] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.594768][ T5699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.849173][ T4564] EXT4-fs (loop0): unmounting filesystem. [ 112.609749][ T5732] binder: 5728:5732 tried to acquire reference to desc 0, got 1 instead [ 112.681211][ T5738] binder: 5728:5738 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.683502][ T5738] binder: 5738 RLIMIT_NICE not set [ 112.693487][ T112] binder: release 5728:5732 transaction 31 out, still active [ 112.909545][ T112] binder: undelivered TRANSACTION_COMPLETE [ 112.987071][ T112] binder: send failed reply for transaction 31, target dead [ 112.995030][ T4332] Bluetooth: hci1: Malformed Event: 0x48 [ 113.004345][ T5737] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 113.091911][ T5737] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.875915][ T5759] ptrace attach of "./syz-executor exec"[4329] was attempted by " [ 114.243665][ T5764] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 114.267642][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'. [ 114.459816][ T5773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.329'. [ 115.998343][ T5786] binder: 5785:5786 tried to acquire reference to desc 0, got 1 instead [ 116.020482][ T5786] binder: 5785:5786 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 116.022520][ T5786] binder: 5786 RLIMIT_NICE not set [ 116.023780][ T4744] binder: release 5785:5786 transaction 36 out, still active [ 116.416453][ T4744] binder: undelivered TRANSACTION_COMPLETE [ 116.516708][ T4744] binder: send failed reply for transaction 36, target dead [ 116.537281][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.539401][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.015094][ T4332] Bluetooth: hci2: Malformed Event: 0x48 [ 117.925301][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.940560][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.223088][ T5770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.224795][ T5770] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.226299][ T5770] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.227735][ T5770] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.038535][ T5764] bond1: (slave veth3): Enslaving as an active interface with a down link [ 119.044487][ T5774] bond1: (slave dummy0): making interface the new active one [ 119.049703][ T5774] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 119.055398][ T5779] netlink: 14 bytes leftover after parsing attributes in process `syz.4.330'. [ 119.251541][ T5820] ptrace attach of "./syz-executor exec"[4564] was attempted by " [ 119.486898][ T5779] bond1: (slave dummy0): Releasing active interface [ 119.531329][ T5822] binder: 5821:5822 tried to acquire reference to desc 0, got 1 instead [ 119.539190][ T5822] binder: 5821:5822 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 119.546111][ T5822] binder: 5822 RLIMIT_NICE not set [ 119.547362][ T5826] device syzkaller0 entered promiscuous mode [ 119.547427][ T5822] binder: 5822 RLIMIT_NICE not set [ 119.565686][ T112] binder: release 5821:5822 transaction 41 out, still active [ 119.570434][ T112] binder: send failed reply for transaction 48 to 5821:5822 [ 119.580165][ T112] binder: release 5821:5822 transaction 41 in, still active [ 119.581402][ T112] binder: send failed reply for transaction 41, target dead [ 119.585670][ T112] binder: undelivered TRANSACTION_COMPLETE [ 119.603777][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.117701][ T5826] tipc: Enabled bearer , priority 0 [ 120.120559][ T5834] netlink: 76 bytes leftover after parsing attributes in process `syz.0.347'. [ 120.131539][ T5825] tipc: Resetting bearer [ 120.227862][ T5825] tipc: Disabling bearer [ 120.229867][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 120.231348][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 120.234792][ T5836] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.236277][ T5836] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.237567][ T5836] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.238876][ T5836] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.242278][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 120.245243][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 120.246728][ T5847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.346'. [ 120.248339][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 120.250485][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 120.252061][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 120.747764][ T5863] loop4: detected capacity change from 0 to 512 [ 120.749359][ T5863] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.990010][ T5863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.022521][ T5863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.091065][ T5872] loop1: detected capacity change from 0 to 256 [ 121.126553][ T5872] FAT-fs (loop1): Directory bread(block 64) failed [ 121.127721][ T5872] FAT-fs (loop1): Directory bread(block 65) failed [ 121.129034][ T5872] FAT-fs (loop1): Directory bread(block 66) failed [ 121.130184][ T5872] FAT-fs (loop1): Directory bread(block 67) failed [ 121.131509][ T5872] FAT-fs (loop1): Directory bread(block 68) failed [ 121.132714][ T5872] FAT-fs (loop1): Directory bread(block 69) failed [ 121.133928][ T5872] FAT-fs (loop1): Directory bread(block 70) failed [ 121.135047][ T5872] FAT-fs (loop1): Directory bread(block 71) failed [ 121.136277][ T5872] FAT-fs (loop1): Directory bread(block 72) failed [ 121.137403][ T5872] FAT-fs (loop1): Directory bread(block 73) failed [ 122.610480][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 124.089386][ T5906] ptrace attach of "./syz-executor exec"[4321] was attempted by " [ 124.625936][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.641299][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.483320][ T5923] loop3: detected capacity change from 0 to 512 [ 125.484790][ T5923] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.768811][ T5923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.796445][ T5923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.998636][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.999730][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.287788][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 126.445792][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.462571][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.626353][ T5903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.636295][ T5903] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.640150][ T5903] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.642866][ T5903] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.873056][ T5903] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.874549][ T5903] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.875978][ T5903] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.877481][ T5903] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.947091][ T5907] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 128.883911][ T5911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.362'. [ 128.946615][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.948319][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.019267][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 129.021907][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 129.064755][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'. [ 129.144423][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 130.588177][ T5964] serio: Serial port ptm1 [ 130.605176][ T5979] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 130.613178][ T5979] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.664287][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.671194][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.259594][ T4332] Bluetooth: hci3: unexpected event 0x10 length: 10 > 1 [ 132.259649][ T4332] Bluetooth: hci3: hardware error 0xfb [ 132.518611][ T6013] loop4: detected capacity change from 0 to 4096 [ 132.522327][ T6013] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 134.479508][ T6021] loop0: detected capacity change from 0 to 40427 [ 134.530565][ T6021] F2FS-fs (loop0): invalid crc value [ 134.545333][ T6021] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.582957][ T6021] F2FS-fs (loop0): Start checkpoint disabled! [ 134.671967][ T6021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 134.694251][ T4332] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 135.720927][ T6058] loop4: detected capacity change from 0 to 1024 [ 135.775015][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 135.896093][ T4449] kworker/u4:11: attempt to access beyond end of device [ 135.896093][ T4449] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.912126][ T6066] loop3: detected capacity change from 0 to 256 [ 135.977300][ T6067] hfsplus: bad catalog entry type [ 136.796154][ T1703] hfsplus: b-tree write err: -5, ino 25 [ 136.797268][ T1703] hfsplus: b-tree write err: -5, ino 4 [ 136.798278][ T1703] hfsplus: b-tree write err: -5, ino 2 [ 139.025442][ T6103] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 139.043447][ T6103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.065006][ T6103] bond3: (slave veth7): Enslaving as an active interface with a down link [ 139.411732][ T6103] device veth1 entered promiscuous mode [ 139.412865][ T6103] device veth1 left promiscuous mode [ 139.414674][ T6103] bond3: (slave vlan2): making interface the new active one [ 139.416742][ T6103] device veth1 entered promiscuous mode [ 139.418091][ T6103] device vlan2 entered promiscuous mode [ 139.431282][ T6103] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 139.433741][ T5520] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 140.944025][ T6127] device syzkaller0 entered promiscuous mode [ 141.321011][ T6127] tipc: Enabled bearer , priority 0 [ 141.328608][ T6126] tipc: Resetting bearer [ 141.785531][ T6126] tipc: Disabling bearer [ 145.242547][ T6200] binder: 6199:6200 tried to acquire reference to desc 0, got 1 instead [ 145.244607][ T6200] binder_alloc: 6199: pid 6199 spamming oneway? 2 buffers allocated for a total size of 5120 [ 145.251051][ T6200] binder_alloc: 6199: pid 6199 spamming oneway? 3 buffers allocated for a total size of 5128 [ 145.467234][ T4456] binder: undelivered TRANSACTION_COMPLETE [ 145.470625][ T4456] binder: undelivered TRANSACTION_COMPLETE [ 145.471703][ T4456] binder: undelivered TRANSACTION_COMPLETE [ 145.480443][ T4456] binder: undelivered transaction 54, process died. [ 145.481824][ T4456] binder: undelivered transaction 55, process died. [ 145.483014][ T4456] binder: undelivered transaction 53, process died. [ 145.989814][ T6215] loop3: detected capacity change from 0 to 128 [ 145.991364][ T6215] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 146.016455][ T4310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.828028][ T6255] loop2: detected capacity change from 32768 to 1 [ 148.067494][ T6261] loop4: detected capacity change from 0 to 512 [ 148.777261][ T6270] loop0: detected capacity change from 0 to 16 [ 150.084662][ T6270] erofs: (device loop0): mounted with root inode @ nid 36. [ 150.173054][ T6276] loop3: detected capacity change from 0 to 1024 [ 151.023357][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.066328][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 151.278391][ T6294] hfsplus: bad catalog entry type [ 151.945080][ T6297] xt_CT: No such helper "snmp_trap" [ 151.983592][ T5520] hfsplus: b-tree write err: -5, ino 25 [ 151.984628][ T5520] hfsplus: b-tree write err: -5, ino 4 [ 151.985577][ T5520] hfsplus: b-tree write err: -5, ino 2 [ 152.070392][ T6305] netlink: 84 bytes leftover after parsing attributes in process `syz.1.479'. [ 152.071868][ T6305] device vlan0 entered promiscuous mode [ 152.081593][ T6304] loop0: detected capacity change from 0 to 2048 [ 152.084869][ T6304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.555192][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.575615][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.171067][ T4564] EXT4-fs (loop0): unmounting filesystem. [ 154.895871][ T6350] loop0: detected capacity change from 0 to 256 [ 155.197517][ T6359] loop3: detected capacity change from 0 to 512 [ 155.205827][ T6359] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.486: invalid block [ 155.455719][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 155.468686][ T6359] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.486: invalid indirect mapped block 1024 (level 0) [ 155.575114][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 155.587615][ T6359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.486: bg 0: block 35: padding at end of block bitmap is not set [ 155.593107][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 155.735888][ T6359] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 155.809237][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 155.823193][ T6359] EXT4-fs (loop3): 1 truncate cleaned up [ 155.830683][ T6359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.342521][ T27] audit: type=1326 audit(156.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.3.486" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97977128 code=0x0 [ 156.472032][ T6382] netlink: 10 bytes leftover after parsing attributes in process `syz.4.493'. [ 156.475530][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.761166][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 157.672167][ T6406] device gretap1 entered promiscuous mode [ 157.673500][ T6406] batman_adv: batadv0: Adding interface: gretap1 [ 157.674696][ T6406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 157.678350][ T6406] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 158.119351][ T5520] device vlan2 left promiscuous mode [ 158.215553][ T6409] loop0: detected capacity change from 0 to 32768 [ 158.812727][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 158.814067][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 158.815315][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 159.036866][ T6430] device syzkaller0 entered promiscuous mode [ 160.820378][ T5468] gfs2_quotad: attempt to access beyond end of device [ 160.820378][ T5468] loop2: rw=12288, sector=18748, nr_sectors = 2 limit=1 [ 160.823709][ T5468] gfs2: fsid=syz:syz.0: gfs2_quotad: statfs error -5 [ 160.846227][ T5466] gfs2: fsid=syz:syz.0: GFS2: fsid=syz:syz.0: error -5: withdrawing the file system to prevent further damage. [ 160.869182][ T5466] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 161.066756][ T5466] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 161.074530][ T5466] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 161.086406][ T5466] gfs2: fsid=syz:syz.0: File system withdrawn [ 161.087428][ T5466] CPU: 1 PID: 5466 Comm: gfs2_logd Not tainted syzkaller #0 [ 161.088526][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 161.090199][ T5466] Call trace: [ 161.090793][ T5466] dump_backtrace+0x1c0/0x1ec [ 161.091590][ T5466] show_stack+0x2c/0x3c [ 161.092325][ T5466] __dump_stack+0x30/0x40 [ 161.092993][ T5466] dump_stack_lvl+0xf4/0x15c [ 161.093682][ T5466] dump_stack+0x1c/0x5c [ 161.094376][ T5466] gfs2_withdraw+0xfa4/0x1390 [ 161.095092][ T5466] gfs2_logd+0x1a0/0xbf0 [ 161.095784][ T5466] kthread+0x250/0x2d8 [ 161.096487][ T5466] ret_from_fork+0x10/0x20 [ 161.114511][ T6471] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 161.192004][ T6471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.200759][ T6474] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 161.202231][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 161.297835][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 165.086668][ T6527] binder: 6526:6527 Acquire 1 refcount change on invalid ref 0 ret -22 [ 166.265563][ T6562] loop3: detected capacity change from 0 to 128 [ 166.281356][ T6562] omfs: sysblock number (f784317bf884317b) is out of range [ 166.363762][ T6569] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 166.789789][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 166.801412][ T6585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.819234][ T6585] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.820935][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 166.945123][ T6578] loop4: detected capacity change from 0 to 32768 [ 166.948276][ T6578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.549 (6578) [ 166.951556][ T6578] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.953386][ T6578] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 166.955010][ T6578] BTRFS info (device loop4): setting nodatasum [ 166.958185][ T6578] BTRFS info (device loop4): force zlib compression, level 3 [ 166.960505][ T6578] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.962734][ T6578] BTRFS info (device loop4): use lzo compression, level 0 [ 166.964746][ T6578] BTRFS info (device loop4): turning on flush-on-commit [ 166.967165][ T6578] BTRFS info (device loop4): enabling auto defrag [ 166.968662][ T6578] BTRFS info (device loop4): max_inline at 4096 [ 166.970436][ T6578] BTRFS info (device loop4): using free space tree [ 167.387071][ T6578] BTRFS info (device loop4): enabling ssd optimizations [ 168.898405][ T6632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input2 [ 169.045803][ T4328] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.566158][ T6658] fuse: Invalid rootmode [ 172.326498][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 172.331572][ T6683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.332990][ T6683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.334302][ T6683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.335604][ T6683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.350678][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 172.356213][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 172.358537][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 174.148644][ T6700] loop4: detected capacity change from 0 to 32768 [ 174.173835][ T6700] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.571 (6700) [ 174.188444][ T6700] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.190317][ T6700] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 174.310735][ T6700] BTRFS info (device loop4): using free space tree [ 174.492910][ T6700] BTRFS info (device loop4): enabling ssd optimizations [ 174.864650][ T6700] mmap: syz.4.571 (6700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.895983][ T4328] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.967120][ T6740] loop3: detected capacity change from 0 to 16 [ 174.972683][ T6740] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.946136][ T6746] fuse: Invalid rootmode [ 179.123928][ T6762] netlink: 'syz.3.585': attribute type 10 has an invalid length. [ 179.127863][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 180.734236][ T6806] Soft offlining pfn 0x147e68 at process virtual address 0x20000000 [ 180.738898][ T6806] Soft offlining pfn 0x147e69 at process virtual address 0x20001000 [ 180.740334][ T6806] Soft offlining pfn 0x147e6a at process virtual address 0x20002000 [ 180.741752][ T6806] Soft offlining pfn 0x147e6b at process virtual address 0x20003000 [ 180.743128][ T6806] Soft offlining pfn 0x147e6c at process virtual address 0x20004000 [ 180.744420][ T6806] Soft offlining pfn 0x147e6d at process virtual address 0x20005000 [ 180.745864][ T6806] Soft offlining pfn 0x147e6f at process virtual address 0x20006000 [ 180.747386][ T6806] Soft offlining pfn 0x13938b at process virtual address 0x20007000 [ 180.748808][ T6806] Soft offlining pfn 0x13938c at process virtual address 0x20008000 [ 180.750196][ T6806] Soft offlining pfn 0x13938d at process virtual address 0x20009000 [ 180.751666][ T6806] Soft offlining pfn 0x13938e at process virtual address 0x2000a000 [ 180.753156][ T6806] Soft offlining pfn 0x13938f at process virtual address 0x2000b000 [ 180.754493][ T6806] Soft offlining pfn 0x139390 at process virtual address 0x2000c000 [ 180.755886][ T6806] Soft offlining pfn 0x139391 at process virtual address 0x2000d000 [ 180.757264][ T6806] Soft offlining pfn 0x139392 at process virtual address 0x2000e000 [ 180.758630][ T6806] Soft offlining pfn 0x139393 at process virtual address 0x2000f000 [ 180.760051][ T6806] Soft offlining pfn 0x139394 at process virtual address 0x20010000 [ 180.761431][ T6806] Soft offlining pfn 0x139395 at process virtual address 0x20011000 [ 181.741936][ T6817] loop3: detected capacity change from 0 to 1024 [ 182.141734][ T6822] fuse: Invalid rootmode [ 182.829582][ T6828] hfsplus: bad catalog entry type [ 183.355034][ T4449] hfsplus: b-tree write err: -5, ino 25 [ 183.356917][ T4449] hfsplus: b-tree write err: -5, ino 4 [ 183.357843][ T4449] hfsplus: b-tree write err: -5, ino 2 [ 183.358695][ T4449] hfsplus: b-tree write err: -5, ino 26 [ 183.490051][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 185.437475][ T6849] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 185.751235][ T6873] device syzkaller0 entered promiscuous mode [ 185.777828][ T6877] fuse: Bad value for 'fd' [ 186.366922][ T6885] fuse: Invalid rootmode [ 187.406996][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.408076][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.913283][ T6897] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 188.219400][ T6901] loop3: detected capacity change from 0 to 32768 [ 188.513250][ T6901] overlayfs: missing 'lowerdir' [ 188.930171][ T6909] loop4: detected capacity change from 0 to 256 [ 188.931646][ T6909] exfat: Deprecated parameter 'namecase' [ 188.953574][ T6909] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 189.876993][ T6918] random: crng reseeded on system resumption [ 190.252374][ T6921] loop3: detected capacity change from 0 to 32768 [ 190.254115][ T6921] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.626 (6921) [ 190.617434][ T6921] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 190.619172][ T6921] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 190.620688][ T6921] BTRFS info (device loop3): enabling disk space caching [ 190.621752][ T6921] BTRFS info (device loop3): force clearing of disk cache [ 190.622853][ T6921] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.624321][ T6921] BTRFS info (device loop3): use zstd compression, level 3 [ 190.625616][ T6921] BTRFS info (device loop3): disk space caching is enabled [ 190.785306][ T6921] BTRFS info (device loop3): enabling ssd optimizations [ 190.787144][ T6921] BTRFS info (device loop3): rebuilding free space tree [ 190.793698][ T6921] BTRFS info (device loop3): disabling free space tree [ 190.794819][ T6921] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.796493][ T6921] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.269450][ T4321] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 191.317703][ T6926] loop4: detected capacity change from 0 to 40427 [ 191.383298][ T6956] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 192.218973][ T6968] xt_connbytes: Forcing CT accounting to be enabled [ 192.238449][ T6968] set match dimension is over the limit! [ 193.231060][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.246427][ T6983] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 193.250744][ T6983] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.283994][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.870177][ T7033] serio: Serial port ptm0 [ 196.957390][ T7027] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 196.960220][ T7027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.232969][ T7047] loop3: detected capacity change from 0 to 4096 [ 198.330120][ T7047] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 198.331955][ T7047] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 198.334802][ T7047] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 198.336619][ T7047] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 198.338811][ T7047] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 198.343255][ T7047] ntfs: volume version 3.1. [ 198.347678][ T7047] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 198.349877][ T7047] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 198.353083][ T7047] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 198.354801][ T7047] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 198.356556][ T7047] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 199.798991][ T7066] device syzkaller0 entered promiscuous mode [ 200.175146][ T7078] set match dimension is over the limit! [ 202.382197][ T7107] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 202.383454][ T7107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.386178][ T7107] vhci_hcd vhci_hcd.0: Device attached [ 202.403614][ T7108] vhci_hcd: connection closed [ 202.407888][ T4682] vhci_hcd: stop threads [ 202.410066][ T4682] vhci_hcd: release socket [ 202.410986][ T4682] vhci_hcd: disconnect device [ 207.447097][ T7231] device syzkaller0 entered promiscuous mode [ 207.553434][ T7246] overlayfs: unrecognized mount option "/" or missing value [ 211.205621][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 211.205645][ T27] audit: type=1326 audit(211.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.0.700" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77128 code=0x0 [ 211.929111][ T7305] tipc: Enabled bearer , priority 0 [ 211.930611][ T7305] device syzkaller0 entered promiscuous mode [ 212.041761][ T7305] tipc: Resetting bearer [ 212.044120][ T7304] tipc: Resetting bearer [ 212.388384][ T7314] loop4: detected capacity change from 0 to 128 [ 212.397230][ T7304] tipc: Disabling bearer [ 212.436588][ T7314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.476116][ T5466] ================================================================== [ 212.477585][ T5466] BUG: KASAN: use-after-free in gfs2_logd+0x120/0xbf0 [ 212.478795][ T5466] Read of size 8 at addr ffff0000d46240a8 by task gfs2_logd/5466 [ 212.479931][ T5466] [ 212.480301][ T5466] CPU: 0 PID: 5466 Comm: gfs2_logd Not tainted syzkaller #0 [ 212.481416][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 212.483002][ T5466] Call trace: [ 212.483493][ T5466] dump_backtrace+0x1c0/0x1ec [ 212.484203][ T5466] show_stack+0x2c/0x3c [ 212.484893][ T5466] __dump_stack+0x30/0x40 [ 212.485537][ T5466] dump_stack_lvl+0xf4/0x15c [ 212.486223][ T5466] print_address_description+0x88/0x218 [ 212.487057][ T5466] print_report+0x50/0x68 [ 212.487733][ T5466] kasan_report+0xa8/0xfc [ 212.488419][ T5466] __asan_report_load8_noabort+0x2c/0x38 [ 212.489396][ T5466] gfs2_logd+0x120/0xbf0 [ 212.490111][ T5466] kthread+0x250/0x2d8 [ 212.490772][ T5466] ret_from_fork+0x10/0x20 [ 212.491453][ T5466] [ 212.491812][ T5466] Allocated by task 5426: [ 212.492522][ T5466] kasan_set_track+0x4c/0x80 [ 212.493270][ T5466] kasan_save_alloc_info+0x24/0x30 [ 212.494122][ T5466] __kasan_kmalloc+0xa0/0xb8 [ 212.494906][ T5466] kmalloc_trace+0x7c/0x94 [ 212.495626][ T5466] gfs2_fill_super+0x108/0x194c [ 212.496484][ T5466] get_tree_bdev+0x358/0x544 [ 212.497307][ T5466] gfs2_get_tree+0x54/0x1b4 [ 212.498042][ T5466] vfs_get_tree+0x90/0x274 [ 212.498807][ T5466] do_new_mount+0x228/0x810 [ 212.499605][ T5466] path_mount+0x5bc/0xe80 [ 212.500355][ T5466] __arm64_sys_mount+0x49c/0x59c [ 212.501191][ T5466] invoke_syscall+0x98/0x2b4 [ 212.501996][ T5466] el0_svc_common+0x138/0x258 [ 212.502814][ T5466] do_el0_svc+0x58/0x130 [ 212.503534][ T5466] el0_svc+0x58/0x128 [ 212.504289][ T5466] el0t_64_sync_handler+0x84/0xf0 [ 212.505088][ T5466] el0t_64_sync+0x18c/0x190 [ 212.505761][ T5466] [ 212.506125][ T5466] Freed by task 7128: [ 212.506795][ T5466] kasan_set_track+0x4c/0x80 [ 212.507597][ T5466] kasan_save_free_info+0x38/0x5c [ 212.508410][ T5466] ____kasan_slab_free+0x148/0x1b0 [ 212.509121][ T5466] __kasan_slab_free+0x18/0x28 [ 212.509832][ T5466] slab_free_freelist_hook+0x16c/0x1e8 [ 212.510675][ T5466] __kmem_cache_free+0xbc/0x218 [ 212.511443][ T5466] kfree+0xd0/0x1a8 [ 212.512061][ T5466] free_sbd+0x5c/0x6c [ 212.512668][ T5466] gfs2_put_super+0x6f8/0x760 [ 212.513448][ T5466] generic_shutdown_super+0x130/0x324 [ 212.514303][ T5466] kill_block_super+0x70/0xdc [ 212.515096][ T5466] gfs2_kill_sb+0xc0/0xd4 [ 212.515787][ T5466] deactivate_locked_super+0xac/0x120 [ 212.516684][ T5466] deactivate_super+0xe4/0x104 [ 212.517504][ T5466] cleanup_mnt+0x390/0x418 [ 212.518200][ T5466] __cleanup_mnt+0x20/0x30 [ 212.518927][ T5466] task_work_run+0x1ec/0x278 [ 212.519680][ T5466] do_exit+0x550/0x19b0 [ 212.520356][ T5466] do_group_exit+0x194/0x22c [ 212.521092][ T5466] get_signal+0x11cc/0x1304 [ 212.521864][ T5466] do_notify_resume+0x28c/0x2aa4 [ 212.522726][ T5466] el0_da+0xb4/0x144 [ 212.523367][ T5466] el0t_64_sync_handler+0x90/0xf0 [ 212.524200][ T5466] el0t_64_sync+0x18c/0x190 [ 212.524984][ T5466] [ 212.525358][ T5466] Last potentially related work creation: [ 212.526276][ T5466] kasan_save_stack+0x40/0x70 [ 212.527052][ T5466] __kasan_record_aux_stack+0xc0/0xdc [ 212.528106][ T5466] kasan_record_aux_stack_noalloc+0x14/0x20 [ 212.529073][ T5466] kvfree_call_rcu+0xb4/0x6e8 [ 212.529838][ T5466] css_free_rwork_fn+0x78c/0xb94 [ 212.530634][ T5466] process_one_work+0x7f8/0x13a4 [ 212.531432][ T5466] worker_thread+0x8c4/0xfec [ 212.532244][ T5466] kthread+0x250/0x2d8 [ 212.532952][ T5466] ret_from_fork+0x10/0x20 [ 212.533732][ T5466] [ 212.534136][ T5466] Second to last potentially related work creation: [ 212.535197][ T5466] kasan_save_stack+0x40/0x70 [ 212.536032][ T5466] __kasan_record_aux_stack+0xc0/0xdc [ 212.536910][ T5466] kasan_record_aux_stack_noalloc+0x14/0x20 [ 212.537888][ T5466] insert_work+0x64/0x37c [ 212.538578][ T5466] __queue_work+0xcbc/0x1234 [ 212.539352][ T5466] rcu_work_rcufn+0x94/0xb0 [ 212.540056][ T5466] rcu_core+0x828/0x18b0 [ 212.540717][ T5466] rcu_core_si+0x10/0x1c [ 212.541429][ T5466] handle_softirqs+0x318/0xc60 [ 212.542229][ T5466] __do_softirq+0x14/0x20 [ 212.543045][ T5466] [ 212.543446][ T5466] The buggy address belongs to the object at ffff0000d4624000 [ 212.543446][ T5466] which belongs to the cache kmalloc-8k of size 8192 [ 212.545657][ T5466] The buggy address is located 168 bytes inside of [ 212.545657][ T5466] 8192-byte region [ffff0000d4624000, ffff0000d4626000) [ 212.547806][ T5466] [ 212.548181][ T5466] The buggy address belongs to the physical page: [ 212.549197][ T5466] page:000000009acd3d8e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114620 [ 212.550934][ T5466] head:000000009acd3d8e order:3 compound_mapcount:0 compound_pincount:0 [ 212.552362][ T5466] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 212.553667][ T5466] raw: 05ffc00000010200 fffffc000405d200 dead000000000002 ffff0000c0002c00 [ 212.555039][ T5466] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 212.556446][ T5466] page dumped because: kasan: bad access detected [ 212.557534][ T5466] [ 212.557928][ T5466] Memory state around the buggy address: [ 212.558856][ T5466] ffff0000d4623f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.560123][ T5466] ffff0000d4624000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.561430][ T5466] >ffff0000d4624080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.562648][ T5466] ^ [ 212.563455][ T5466] ffff0000d4624100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.564739][ T5466] ffff0000d4624180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.565982][ T5466] ================================================================== [ 212.584757][ T7312] netlink: 10 bytes leftover after parsing attributes in process `syz.1.705'. [ 212.589864][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.607255][ T5466] Disabling lock debugging due to kernel taint [ 213.237160][ T4328] EXT4-fs (loop4): unmounting filesystem.