last executing test programs: 15.594312587s ago: executing program 4 (id=789): syz_emit_ethernet(0x46, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x42) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000040) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[], 0x0, 0x229, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 12.822912143s ago: executing program 4 (id=793): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 12.536612992s ago: executing program 4 (id=794): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_io_uring_setup(0x356d, &(0x7f0000000400)={0x0, 0x200a5ba, 0x1, 0xffd, 0x136}, &(0x7f0000000200), &(0x7f0000000340), 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r5, r4], &(0x7f0000000340), 0x0, 0xfffdffffffffffff}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r6, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c", 0x2a, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 10.98477571s ago: executing program 4 (id=802): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a387, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x200008a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x366, &(0x7f0000000440)="$eJzs3T9oXHUcAPDv9SW5pLTmBqHodLoJUpqIg04JpUIxg1YO/y0eNvVP7izk8CAOudyiFCfBRdDJrYOOncVBxM3B1QpSFRe7FRp88u7e/b/YBLxY8fMZwpfv7/t9v9+7e+S9hMsvr7Vi6/J8XLl9+1YsLhZibu38WtwpRClORBJdezHVhwvT8wDAfe5OmsYfadc9i5fiZC907weA/67O/f+N04NE8QjN107NYkkAwIwd8uf/56Zmr85sWQDADE3c/x8dGR77Nf9c/zMBXUuzXyAA8I974eVXnl3fiLhULi9G1D9oVpqVeHowvn4l3opabMa5WI79iO6DQvdpIfv6zMWNC+fKmV9KUck6mpWIeqtZ6T4prCed/mKsxHKU8v60359k/Sud/nJE7LU680e90KzMdz5skM3/48nYjNVYjgcn+iMublxYLecHqNR7/a2Idiz2TiJb/9lYju9fj6tRi8uR9Q7Wv7tSLp9PN0b6m9eLnToAAAAAAAAAAAAAAAAAAAAAAJiFs+W+UpzK979J663m+5fGC0oj++NUusP5/kDt7v5AabGY785zLRnfH2h0f55mZS5O/KtnDgAAAAAAAAAAAAAAAAAAAPePxs5CVGu1ze3Gzntbw0FrKPPOt198vRS9obm89e1k0BV5cuQ4vcKhIyfRnyLtt6fJSE0eJBG94r3q9Rv9FQ/XFPtnMdGeBcWJoUK+pmqtdvqRnz+d1vVnFux1MklMvCyjQSGff2io/kCWWIyI/YO6Dg5W71FzM03TLJjP5x2u2f1kvCvfiqF15GUcIvjm1psPPdE482Qn81U+02OPL7948+PPf9uq1qLdW+HCdmM//fsDpq2InShETA4lQ9dPIX+dC1OuhOlBe5Bpbzd2qskPv7/08EffjRUn06+fdDjz7sFzfTmeWegGhYjS5Ns0GcxPufinB6/e7V+9R3/jzny2Vr2x+9Ov02qyV3S8a+ibhI06AAAAAAAAAAAAAAAAAADgWAz+6HdsIE3T1oFdTz0/84UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDEa/P//oaA9kTlMcLcVk0PFze3GgZMvHeupAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/ZXAAAA//+7HXYN") 9.332371301s ago: executing program 3 (id=816): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.982751612s ago: executing program 3 (id=817): semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) 8.238488175s ago: executing program 0 (id=818): r0 = socket(0x2, 0x80805, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) 8.214200615s ago: executing program 0 (id=819): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 8.171668977s ago: executing program 2 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x801, 0x84) 8.171477807s ago: executing program 0 (id=821): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = inotify_init1(0x80000) r6 = inotify_add_watch(r5, &(0x7f0000010280)='./file0\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.09665798s ago: executing program 2 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40000032, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(r4, 0x0, 0x0) 7.09617715s ago: executing program 3 (id=824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xbc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000040)={0x700, 0x42c0000000003f, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x494, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xa001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x100, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x4, 0xb, 0x9, 0x9fbc, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x9, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87f8, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x1, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x9, 0x8, 0x5ade, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x3, 0xa, 0xfffffff8, 0x2, 0xfffbfffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x1, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x865ad, 0x0, 0x5, 0x7, 0x36, 0x5, 0x6, 0x3, 0x4, 0x8, 0x5, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xecd, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x5a39, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x4, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x4, 0x9, 0x40000007, 0x8, 0x7, 0x1, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x10005, 0x2, 0x2, 0x9, 0x7, 0x40, 0xa, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x3, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x401, 0x3, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff2a5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x8, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x410, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@nombcache}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x48a, &(0x7f0000000b40)="$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") 7.09185895s ago: executing program 0 (id=835): syz_open_dev$sndctrl(0x0, 0x0, 0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000600)={[&(0x7f0000000540)='queue0\x00', &(0x7f0000000580)='\xe0)\x00', &(0x7f00000005c0)='/dev/snd/seq\x00']}, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() 5.912432177s ago: executing program 1 (id=826): readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) 5.746562302s ago: executing program 0 (id=827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xbc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000040)={0x700, 0x42c0000000003f, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x494, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xa001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x100, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x4, 0xb, 0x9, 0x9fbc, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x9, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87f8, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x1, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x9, 0x8, 0x5ade, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x3, 0xa, 0xfffffff8, 0x2, 0xfffbfffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x1, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x865ad, 0x0, 0x5, 0x7, 0x36, 0x5, 0x6, 0x3, 0x4, 0x8, 0x5, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xecd, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x5a39, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x4, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x4, 0x9, 0x40000007, 0x8, 0x7, 0x1, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x10005, 0x2, 0x2, 0x9, 0x7, 0x40, 0xa, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x3, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x401, 0x3, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff2a5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x8, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x410, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@nombcache}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x48a, &(0x7f0000000b40)="$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") 5.744916472s ago: executing program 3 (id=828): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x141080) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40844) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 5.744353222s ago: executing program 4 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x5, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 5.744094022s ago: executing program 2 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x7fffffe, 0x0, 0xff, 0xd9e0fe5014d32144}, 0x20) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 5.49375544s ago: executing program 1 (id=830): socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 5.048720203s ago: executing program 2 (id=832): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000000) 4.899620818s ago: executing program 3 (id=833): bind$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xff81}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 4.332820905s ago: executing program 0 (id=834): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000ac0), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4.330831165s ago: executing program 2 (id=846): syz_usb_connect(0x5, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.830398291s ago: executing program 1 (id=836): pipe(&(0x7f0000000480)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000380), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) 3.808087952s ago: executing program 4 (id=837): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) 3.770207023s ago: executing program 1 (id=838): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = inotify_init1(0x80000) r6 = inotify_add_watch(r5, &(0x7f0000010280)='./file0\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.225564561s ago: executing program 1 (id=840): syz_open_dev$sndctrl(0x0, 0x0, 0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000600)={[&(0x7f0000000540)='queue0\x00', &(0x7f0000000580)='\xe0)\x00', &(0x7f00000005c0)='/dev/snd/seq\x00']}, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() 126.917755ms ago: executing program 2 (id=841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xbc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40186e8d, &(0x7f0000000040)={0x700, 0x42c0000000003f, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x494, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xa001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x100, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x4, 0xb, 0x9, 0x9fbc, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x9, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87f8, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x1, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x9, 0x8, 0x5ade, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x3, 0xa, 0xfffffff8, 0x2, 0xfffbfffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x1, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x865ad, 0x0, 0x5, 0x7, 0x36, 0x5, 0x6, 0x3, 0x4, 0x8, 0x5, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xecd, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x5a39, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x4, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x4, 0x9, 0x40000007, 0x8, 0x7, 0x1, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x10005, 0x2, 0x2, 0x9, 0x7, 0x40, 0xa, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x3, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x401, 0x3, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff2a5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x8, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x410, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@nombcache}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x48a, &(0x7f0000000b40)="$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") 45.359798ms ago: executing program 3 (id=842): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a387, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x200008a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x366, &(0x7f0000000440)="$eJzs3T9oXHUcAPDv9SW5pLTmBqHodLoJUpqIg04JpUIxg1YO/y0eNvVP7izk8CAOudyiFCfBRdDJrYOOncVBxM3B1QpSFRe7FRp88u7e/b/YBLxY8fMZwpfv7/t9v9+7e+S9hMsvr7Vi6/J8XLl9+1YsLhZibu38WtwpRClORBJdezHVhwvT8wDAfe5OmsYfadc9i5fiZC907weA/67O/f+N04NE8QjN107NYkkAwIwd8uf/56Zmr85sWQDADE3c/x8dGR77Nf9c/zMBXUuzXyAA8I974eVXnl3fiLhULi9G1D9oVpqVeHowvn4l3opabMa5WI79iO6DQvdpIfv6zMWNC+fKmV9KUck6mpWIeqtZ6T4prCed/mKsxHKU8v60359k/Sud/nJE7LU680e90KzMdz5skM3/48nYjNVYjgcn+iMublxYLecHqNR7/a2Idiz2TiJb/9lYju9fj6tRi8uR9Q7Wv7tSLp9PN0b6m9eLnToAAAAAAAAAAAAAAAAAAAAAAJiFs+W+UpzK979J663m+5fGC0oj++NUusP5/kDt7v5AabGY785zLRnfH2h0f55mZS5O/KtnDgAAAAAAAAAAAAAAAAAAAPePxs5CVGu1ze3Gzntbw0FrKPPOt198vRS9obm89e1k0BV5cuQ4vcKhIyfRnyLtt6fJSE0eJBG94r3q9Rv9FQ/XFPtnMdGeBcWJoUK+pmqtdvqRnz+d1vVnFux1MklMvCyjQSGff2io/kCWWIyI/YO6Dg5W71FzM03TLJjP5x2u2f1kvCvfiqF15GUcIvjm1psPPdE482Qn81U+02OPL7948+PPf9uq1qLdW+HCdmM//fsDpq2InShETA4lQ9dPIX+dC1OuhOlBe5Bpbzd2qskPv7/08EffjRUn06+fdDjz7sFzfTmeWegGhYjS5Ns0GcxPufinB6/e7V+9R3/jzny2Vr2x+9Ov02qyV3S8a+ibhI06AAAAAAAAAAAAAAAAAADgWAz+6HdsIE3T1oFdTz0/84UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDEa/P//oaA9kTlMcLcVk0PFze3GgZMvHeupAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/ZXAAAA//+7HXYN") 0s ago: executing program 1 (id=843): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 58.070922][ T4176] cgroup: Unknown subsys name 'net' [ 58.185760][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.469983][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.135336][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.197262][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.210846][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 61.226109][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.275516][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 61.355937][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.363094][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.372252][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.394783][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.401923][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.409541][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.417324][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.424464][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.432399][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.439865][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.447001][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.455154][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.499226][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.506433][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.514856][ T4195] device bridge_slave_0 entered promiscuous mode [ 61.528547][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.535838][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.543741][ T4195] device bridge_slave_1 entered promiscuous mode [ 61.552482][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.566324][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.573536][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.581185][ T4199] device bridge_slave_0 entered promiscuous mode [ 61.588724][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.596486][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.604180][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.618186][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.625321][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.633545][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.641795][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.659081][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.668492][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.675812][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.683535][ T4199] device bridge_slave_1 entered promiscuous mode [ 61.703879][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.715273][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.729530][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.762523][ T4188] team0: Port device team_slave_0 added [ 61.782025][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.793231][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.803852][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.815117][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.825219][ T4188] team0: Port device team_slave_1 added [ 61.844539][ T4195] team0: Port device team_slave_0 added [ 61.874598][ T4193] team0: Port device team_slave_0 added [ 61.882490][ T4199] team0: Port device team_slave_0 added [ 61.889705][ T4195] team0: Port device team_slave_1 added [ 61.896303][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.903757][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.929722][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.947291][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.954552][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.980552][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.993002][ T4193] team0: Port device team_slave_1 added [ 62.005012][ T4199] team0: Port device team_slave_1 added [ 62.018802][ T4189] team0: Port device team_slave_0 added [ 62.053145][ T4189] team0: Port device team_slave_1 added [ 62.059219][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.066391][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.092536][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.103967][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.110910][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.137145][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.160237][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.167222][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.193300][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.210381][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.217443][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.243665][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.255201][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.262247][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.288156][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.310766][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.317731][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.343626][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.357404][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.364321][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.404939][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.412051][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.438305][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.470612][ T4199] device hsr_slave_0 entered promiscuous mode [ 62.477888][ T4199] device hsr_slave_1 entered promiscuous mode [ 62.484635][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.492450][ T4199] Cannot create hsr debugfs directory [ 62.500936][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.507984][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.514667][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.522638][ T4193] Cannot create hsr debugfs directory [ 62.532127][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.539060][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.565134][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.614611][ T4195] device hsr_slave_0 entered promiscuous mode [ 62.621705][ T4195] device hsr_slave_1 entered promiscuous mode [ 62.628169][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.635789][ T4195] Cannot create hsr debugfs directory [ 62.707854][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.714547][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.720927][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.728864][ T4189] Cannot create hsr debugfs directory [ 62.861845][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 62.868055][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 62.871426][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.941251][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 62.941884][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.977288][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.996516][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.005653][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.014980][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.030516][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.046586][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.068712][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.089774][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.123407][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.145490][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.160039][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.182500][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.198994][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.208024][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.238731][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.257466][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.293844][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.316881][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.324407][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.335003][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.367959][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.403390][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.410210][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.419261][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.435926][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.469623][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.478197][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.486593][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.496120][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.505599][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.512812][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.522586][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.537795][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.558389][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.565358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.574593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.586106][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.593188][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.600813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.611384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.621546][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.642870][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.653907][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.662676][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.669726][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.677646][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.686628][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.695144][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.702209][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.709850][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.717623][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.727158][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.736620][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.749214][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.767097][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.781464][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.789371][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.798440][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.807523][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.814604][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.822336][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.830776][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.839271][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.846946][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.856277][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.865023][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.873712][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.882444][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.890652][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.900277][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.910917][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.918963][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.927106][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.945512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.955142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.963855][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.970903][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.980477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.989173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.998126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.008390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.023774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.032610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.040878][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.047935][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.055667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.064977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.073581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.083704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.092126][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.099158][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.111476][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.126498][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.137829][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.154173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.162707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.172317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.180619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.199812][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.229486][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.239286][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.255534][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.267099][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.276292][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.284919][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.294484][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.303515][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.312313][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.320557][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.329472][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.338204][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.346792][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.355310][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.363881][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.373551][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.385798][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.401994][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.412388][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.431623][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.440568][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.450216][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.460230][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.469224][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.478192][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.491864][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.502061][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.528329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.559258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.580384][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.587512][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.597557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.619882][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.638718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.659828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.668138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.676000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.688779][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.697851][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.707070][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.714156][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.729167][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.738745][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.749827][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.787063][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.802003][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.816535][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.828313][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.858246][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.883687][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.893211][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.902844][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.911965][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.920087][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.928887][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.941371][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 64.947517][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 64.950666][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.960677][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 64.964387][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.979161][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.998030][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.007916][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.019159][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.027103][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 65.035426][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.039148][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 65.043397][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.057676][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.066542][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.074997][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.088641][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.112996][ T4193] device veth0_vlan entered promiscuous mode [ 65.123302][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.154656][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.172260][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.188727][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.203454][ T4188] device veth0_vlan entered promiscuous mode [ 65.216924][ T4193] device veth1_vlan entered promiscuous mode [ 65.234706][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.247804][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.258454][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.270264][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.282279][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.298448][ T4188] device veth1_vlan entered promiscuous mode [ 65.326632][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.335090][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.343838][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.354078][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.364423][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.377171][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.385621][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.394005][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.408160][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.418358][ T4195] device veth0_vlan entered promiscuous mode [ 65.437772][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.446625][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.459931][ T4193] device veth0_macvtap entered promiscuous mode [ 65.469327][ T4195] device veth1_vlan entered promiscuous mode [ 65.494292][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.504768][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.514247][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.539776][ T4193] device veth1_macvtap entered promiscuous mode [ 65.547022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.555386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.565380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.582722][ T4188] device veth0_macvtap entered promiscuous mode [ 65.596858][ T4199] device veth0_vlan entered promiscuous mode [ 65.610400][ T4195] device veth0_macvtap entered promiscuous mode [ 65.621664][ T4195] device veth1_macvtap entered promiscuous mode [ 65.628547][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.637766][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.646477][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.655659][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.665101][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.675022][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.683634][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.692396][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.700239][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.708401][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.717439][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.727460][ T4188] device veth1_macvtap entered promiscuous mode [ 65.739000][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.759191][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.767394][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.776283][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.792544][ T4199] device veth1_vlan entered promiscuous mode [ 65.807110][ T4189] device veth0_vlan entered promiscuous mode [ 65.820237][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.833080][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.844454][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.853188][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.860963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.869076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.877680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.886256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.894878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.903889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.912743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.921531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.929202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.939460][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.951108][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.960917][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.972201][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.983835][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.994344][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.005561][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.016548][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.028568][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037683][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.047440][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.056399][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.068964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.078111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.087472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.096576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.105090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.116108][ T4189] device veth1_vlan entered promiscuous mode [ 66.125288][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.136076][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.147508][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.158007][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.169828][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.178201][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.188240][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198458][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.207203][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.239852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.249014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.257608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.295876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.306928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.317431][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.327596][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.336367][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.345366][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.369084][ T4199] device veth0_macvtap entered promiscuous mode [ 66.392491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.430527][ T4199] device veth1_macvtap entered promiscuous mode [ 66.443414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.452216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.464315][ T4189] device veth0_macvtap entered promiscuous mode [ 66.518567][ T4189] device veth1_macvtap entered promiscuous mode [ 66.528702][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.539475][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.550079][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.560643][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.570501][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.580943][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.592788][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.612799][ T520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.620769][ T520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.631916][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.639950][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.649173][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.660931][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.669895][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.694256][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.706748][ T520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.715381][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.716262][ T520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.725853][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.743492][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.753481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.764121][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.774399][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.785188][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.798002][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.807110][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.817611][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.827770][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.838892][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.848931][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.859542][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.870810][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.880242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.888643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.897728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.906816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.915339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.928841][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.940405][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.951598][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.962106][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.972424][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.983161][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993016][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.003613][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.015014][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.022737][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 67.029161][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 67.030345][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035310][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 67.052369][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.061252][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.069935][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.086177][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.095067][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.104750][ T4190] Bluetooth: hci1: command 0x040f tx timeout [ 67.111219][ T4190] Bluetooth: hci4: command 0x040f tx timeout [ 67.112572][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.127693][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136629][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.145527][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.191402][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.201385][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.208063][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.217618][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.224100][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.233721][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.249209][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.259008][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.269561][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.332939][ T1416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.351748][ T1416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.392588][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.412933][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.420776][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.434950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.471103][ T520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.478947][ T520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.499122][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.536293][ T1416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.564477][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.604130][ T520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.632720][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.637003][ T520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.640570][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.640765][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.704947][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.823539][ T4284] device syzkaller0 entered promiscuous mode [ 67.865992][ T4284] tipc: Started in network mode [ 67.887830][ T4284] tipc: Node identity f24d6c1cdd88, cluster identity 4711 [ 67.899658][ T4284] tipc: Enabled bearer , priority 0 [ 67.912642][ T4283] tipc: Resetting bearer [ 67.936829][ T4283] tipc: Disabling bearer [ 68.782274][ T4302] loop3: detected capacity change from 0 to 8 [ 69.383228][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 69.389337][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 69.395435][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 69.401540][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 69.407569][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 69.432561][ T4302] squashfs: Unknown parameter 'erurs' [ 69.541732][ T4269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.658979][ T4314] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 69.698906][ T4314] device bond_slave_0 entered promiscuous mode [ 69.705352][ T4314] device bond_slave_1 entered promiscuous mode [ 69.712654][ T4314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.723193][ T4314] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 69.754091][ T4314] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13'. [ 69.796335][ T4314] device bond_slave_0 left promiscuous mode [ 69.804525][ T4314] device bond_slave_1 left promiscuous mode [ 69.907443][ T4269] usb 3-1: Using ep0 maxpacket: 32 [ 69.911019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 69.971277][ T4314] bond1: (slave macvlan2): Releasing active interface [ 69.995436][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.027770][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.053455][ T4314] bond0 (unregistering): Released all slaves [ 70.071423][ T4269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.107568][ T4269] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 70.139801][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.184039][ T4269] usb 3-1: config 0 descriptor?? [ 70.257787][ T4269] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 71.331182][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.347578][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.354260][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.583863][ T4332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 71.640342][ T4334] loop3: detected capacity change from 0 to 2048 [ 71.688380][ T4190] usb 3-1: USB disconnect, device number 2 [ 71.708001][ T26] audit: type=1326 audit(1778868048.172:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 71.731958][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 71.745630][ T26] audit: type=1326 audit(1778868048.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 71.764724][ T4334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.817715][ T26] audit: type=1326 audit(1778868048.172:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 71.881313][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.908879][ T4235] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 71.927289][ T26] audit: type=1326 audit(1778868048.172:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 71.969052][ T4342] loop2: detected capacity change from 0 to 128 [ 71.973758][ T26] audit: type=1326 audit(1778868048.172:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.007753][ T26] audit: type=1326 audit(1778868048.172:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.034120][ T26] audit: type=1326 audit(1778868048.172:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.037039][ T4342] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 72.058349][ T26] audit: type=1326 audit(1778868048.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.067599][ T4235] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.097700][ T26] audit: type=1326 audit(1778868048.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.100412][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.124637][ T26] audit: type=1326 audit(1778868048.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.2.22" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x7ffc0000 [ 72.139129][ T4235] usb 1-1: SerialNumber: syz [ 72.179821][ T4342] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.203294][ T4342] ext2 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.264824][ T4346] MPTCP: addr_signal error, add_addr=1, echo=0 [ 72.335238][ T4348] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 72.485805][ T4314] syz.4.13 (4314) used greatest stack depth: 20856 bytes left [ 72.694930][ T4235] usb 1-1: USB disconnect, device number 2 [ 73.941043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.951043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.961019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.971016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.981029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.991013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.001008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.011008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.021006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.978501][ T4381] sched: RT throttling activated [ 80.128337][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.201496][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 81.432397][ T1324] cfg80211: failed to load regulatory.db [ 81.533476][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.567304][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.589903][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 81.638787][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.671940][ T7] usb 1-1: config 0 descriptor?? [ 82.387647][ T7] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 83.016761][ T4446] syz.3.50 (4446): /proc/4442/oom_adj is deprecated, please use /proc/4442/oom_score_adj instead. [ 83.621340][ T4190] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 84.003830][ T4452] loop0: detected capacity change from 0 to 512 [ 84.059411][ T4459] netlink: 76 bytes leftover after parsing attributes in process `syz.3.54'. [ 84.102694][ T4461] loop4: detected capacity change from 0 to 1024 [ 84.151526][ T4452] ======================================================= [ 84.151526][ T4452] WARNING: The mand mount option has been deprecated and [ 84.151526][ T4452] and is ignored by this kernel. Remove the mand [ 84.151526][ T4452] option from the mount to silence this warning. [ 84.151526][ T4452] ======================================================= [ 84.440201][ T4452] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.854665][ T4452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 84.932376][ T4452] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.938771][ T4452] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.52: bad orphan inode 267 [ 85.070610][ T4452] EXT4-fs (loop0): Remounting filesystem read-only [ 85.114804][ T4395] usb 1-1: USB disconnect, device number 3 [ 85.121326][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 85.272041][ T4452] ip6t_srh: unknown srh invflags 4000 [ 85.339220][ T4454] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.52: dx entry: limit 0 != root limit 125 [ 85.383802][ T4454] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.52: Corrupt directory, running e2fsck is recommended [ 86.580877][ T4503] loop3: detected capacity change from 0 to 512 [ 86.592916][ T4498] team0: Port device bridge1 added [ 86.661091][ T4503] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.141954][ T4521] hugetlbfs: syz.3.72 (4521): Using mlock ulimits for SHM_HUGETLB is deprecated [ 88.226364][ T4523] loop3: detected capacity change from 0 to 16 [ 88.314348][ T4527] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 88.331777][ T4523] erofs: Unknown parameter '' [ 89.381991][ T4533] device syzkaller0 entered promiscuous mode [ 90.577933][ T4543] overlayfs: missing 'lowerdir' [ 90.773920][ T4548] device syzkaller0 entered promiscuous mode [ 94.437275][ T4614] ODEBUG: Out of memory. ODEBUG disabled [ 95.294736][ T4620] netlink: 'syz.3.100': attribute type 29 has an invalid length. [ 95.320508][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 95.394144][ T4620] netlink: 'syz.3.100': attribute type 29 has an invalid length. [ 95.402049][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 95.430268][ T4620] process 'syz.3.100' launched '/dev/fd/5' with NULL argv: empty string added [ 95.540122][ T4626] capability: warning: `syz.0.99' uses deprecated v2 capabilities in a way that may be insecure [ 96.152662][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.168331][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.176581][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.973372][ T4190] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.337155][ T4651] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 99.111128][ T4190] usb 5-1: device descriptor read/all, error -71 [ 102.275504][ T4685] futex_wake_op: syz.3.118 tries to shift op by 144; fix this program [ 107.469527][ T4726] Zero length message leads to an empty skb [ 107.481666][ T4728] loop2: detected capacity change from 0 to 512 [ 108.444488][ T4723] syz.4.128 (4723): drop_caches: 2 [ 111.431020][ T4395] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.448317][ T4395] usb 5-1: config 0 has no interfaces? [ 112.541278][ T4395] usb 5-1: string descriptor 0 read error: -71 [ 112.589659][ T4395] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 112.860604][ T4395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.233359][ T4395] usb 5-1: config 0 descriptor?? [ 113.273439][ T4395] usb 5-1: can't set config #0, error -71 [ 113.280166][ T4395] usb 5-1: USB disconnect, device number 4 [ 113.373009][ T4782] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 113.397918][ T4780] IPVS: stopping master sync thread 4782 ... [ 113.438041][ T4783] tipc: Started in network mode [ 113.460755][ T4783] tipc: Node identity 9ec8c1d98361, cluster identity 4711 [ 113.594369][ T4783] tipc: Enabled bearer , priority 0 [ 113.861649][ T4784] device syzkaller0 entered promiscuous mode [ 114.602567][ T4395] tipc: Node number set to 497664473 [ 114.768776][ T4783] tipc: Resetting bearer [ 115.112403][ T4781] tipc: Resetting bearer [ 115.196424][ T4781] tipc: Disabling bearer [ 115.629415][ T4806] device ip6gre1 entered promiscuous mode [ 116.644644][ T4806] syz.0.150 (4806) used greatest stack depth: 20112 bytes left [ 117.149907][ T4831] Cannot find set identified by id 0 to match [ 117.479046][ T4822] loop0: detected capacity change from 0 to 4096 [ 118.433792][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.581099][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.240632][ T4848] device syzkaller0 entered promiscuous mode [ 119.551131][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 119.711089][ T13] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 119.739209][ T4857] loop4: detected capacity change from 0 to 512 [ 119.746175][ T13] usb 3-1: config 0 has no interface number 0 [ 119.753937][ T13] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 119.974576][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 121.119414][ T4857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.164: bg 0: block 248: padding at end of block bitmap is not set [ 121.124169][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.149621][ T13] usb 3-1: Product: syz [ 121.156161][ T4867] device syzkaller0 entered promiscuous mode [ 121.169622][ T13] usb 3-1: Manufacturer: syz [ 121.179574][ T4857] __quota_error: 23 callbacks suppressed [ 121.179588][ T4857] Quota error (device loop4): write_blk: dquota write failed [ 121.199502][ T13] usb 3-1: SerialNumber: syz [ 121.297988][ T4857] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.308383][ T4857] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.164: Failed to acquire dquot type 1 [ 121.325961][ T13] usb 3-1: config 0 descriptor?? [ 121.351165][ T13] usb 3-1: can't set config #0, error -71 [ 121.573783][ T4878] loop1: detected capacity change from 0 to 8 [ 121.581428][ T26] audit: type=1107 audit(1778868098.032:35): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 121.817372][ T4857] EXT4-fs (loop4): 1 truncate cleaned up [ 122.808833][ T4878] SQUASHFS error: lzo decompression failed, data probably corrupt [ 122.817110][ T4878] SQUASHFS error: Failed to read block 0x91: -5 [ 122.823529][ T4878] SQUASHFS error: Unable to read metadata cache entry [8f] [ 122.830803][ T4878] SQUASHFS error: Unable to read inode 0x11f [ 122.850105][ T4857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.873411][ T13] usb 3-1: USB disconnect, device number 3 [ 123.000847][ T4857] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.094519][ T4885] device syzkaller0 entered promiscuous mode [ 123.568368][ T4892] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.577652][ T4892] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.586415][ T4892] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.595145][ T4892] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.592998][ T4892] team0: Port device vxlan0 added [ 130.917212][ T4958] device syzkaller0 entered promiscuous mode [ 131.221091][ T4965] loop2: detected capacity change from 0 to 512 [ 131.524101][ T4965] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.194: invalid block [ 131.728186][ T4965] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.194: Invalid block bitmap block 0 in block_group 0 [ 131.763961][ T4965] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 131.798957][ T4965] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.194: attempt to clear invalid blocks 983261 len 1 [ 131.832933][ T4965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.194: invalid indirect mapped block 2683928664 (level 0) [ 131.959461][ T4965] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.194: Invalid inode table block 0 in block_group 0 [ 131.976231][ T4965] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.987149][ T4965] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 131.996074][ T4965] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.194: Invalid inode table block 0 in block_group 0 [ 132.009759][ T4965] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 132.019841][ T4965] EXT4-fs error (device loop2): ext4_truncate:4286: inode #13: comm syz.2.194: mark_inode_dirty error [ 132.032743][ T4965] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 132.042368][ T4965] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.194: Invalid inode table block 0 in block_group 0 [ 132.056198][ T4965] EXT4-fs (loop2): 1 truncate cleaned up [ 132.061885][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 132.625926][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632944][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992525][ T4983] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 133.049243][ T4983] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 133.939358][ T4996] futex_wake_op: syz.0.204 tries to shift op by -1; fix this program [ 133.998846][ T4998] loop4: detected capacity change from 0 to 128 [ 134.063720][ T5001] netlink: 164 bytes leftover after parsing attributes in process `syz.1.201'. [ 134.700785][ T4997] loop2: detected capacity change from 0 to 128 [ 135.727208][ T4997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.738190][ T4997] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.337202][ T5042] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 139.309089][ T5050] loop2: detected capacity change from 0 to 16 [ 139.336851][ T5060] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 139.338688][ T5050] erofs: (device loop2): mounted with root inode @ nid 36. [ 139.366087][ T5062] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.601828][ T5060] device bond1 entered promiscuous mode [ 139.613815][ T5060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.760130][ T4883] kernel write not supported for file /137/net/ip6_tables_matches (pid: 4883 comm: kworker/0:7) [ 139.894744][ T26] audit: type=1800 audit(1778868116.362:36): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.213" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 139.932886][ T5064] bond1: (slave erspan1): making interface the new active one [ 139.960088][ T5064] device erspan1 entered promiscuous mode [ 140.039155][ T5064] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 140.131519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.801779][ T26] audit: type=1804 audit(1778868119.262:37): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.224" name="bus" dev="ramfs" ino=35159 res=1 errno=0 [ 144.082905][ T26] audit: type=1804 audit(1778868119.292:38): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.224" name="bus" dev="ramfs" ino=35159 res=1 errno=0 [ 144.138513][ T5088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'. [ 146.535986][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.542857][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.551561][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.563006][ T5113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.575363][ T5113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.674370][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.682124][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.689343][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.696677][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.704506][ T5113] virt_wifi0 speed is unknown, defaulting to 1000 [ 146.865084][ T5124] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 147.248863][ T5137] loop4: detected capacity change from 0 to 32768 [ 147.330627][ T5137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.240 (5137) [ 148.053162][ T5137] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 148.062334][ T5137] BTRFS info (device loop4): setting nodatacow, compression disabled [ 148.070464][ T5137] BTRFS info (device loop4): force clearing of disk cache [ 148.077651][ T5137] BTRFS info (device loop4): turning off barriers [ 148.084106][ T5137] BTRFS info (device loop4): use no compression [ 148.090356][ T5137] BTRFS info (device loop4): setting datasum, datacow enabled [ 148.098182][ T5137] BTRFS info (device loop4): enabling ssd optimizations [ 148.105195][ T5137] BTRFS info (device loop4): using spread ssd allocation scheme [ 148.112872][ T5137] BTRFS info (device loop4): enabling disk space caching [ 148.119915][ T5137] BTRFS info (device loop4): disk space caching is enabled [ 148.127171][ T5137] BTRFS info (device loop4): has skinny extents [ 148.133502][ T5137] workqueue: max_active 4097 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 148.208025][ T5137] workqueue: max_active 4097 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 148.247232][ T5137] workqueue: max_active 4097 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 149.120211][ T5137] workqueue: max_active 4097 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 149.749663][ T5137] workqueue: max_active 4097 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 150.040727][ T5137] workqueue: max_active 4097 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 150.052923][ T5137] workqueue: max_active 4097 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 150.064710][ T5137] workqueue: max_active 4097 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 150.076042][ T5137] workqueue: max_active 4097 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 150.088597][ T5137] workqueue: max_active 4097 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 150.273950][ T5137] BTRFS error (device loop4): open_ctree failed: -12 [ 151.101572][ T5191] siw: device registration error -23 [ 153.005750][ T5202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.926836][ T5235] device syzkaller0 entered promiscuous mode [ 156.421798][ T5255] netlink: 96 bytes leftover after parsing attributes in process `syz.1.267'. [ 159.137158][ T5282] device syzkaller0 entered promiscuous mode [ 159.304727][ T5290] loop1: detected capacity change from 0 to 16 [ 160.500222][ T5287] MPTCP: addr_signal error, rm_addr=1 [ 160.504242][ T5290] erofs: (device loop1): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 160.520253][ T5290] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.541028][ T4268] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.881062][ T4268] usb 3-1: Using ep0 maxpacket: 32 [ 161.031656][ T4268] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.092559][ T26] audit: type=1804 audit(1778868137.562:39): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.281" name="bus" dev="ramfs" ino=35417 res=1 errno=0 [ 161.561220][ T4268] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 162.387558][ T4268] usb 3-1: can't read configurations, error -71 [ 162.452478][ T26] audit: type=1804 audit(1778868137.582:40): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.281" name="bus" dev="ramfs" ino=35417 res=1 errno=0 [ 163.632144][ T26] audit: type=1326 audit(1778868140.102:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.2.284" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ad1924e59 code=0x0 [ 164.404037][ T5325] binder: 5314:5325 unknown command 0 [ 164.409490][ T5325] binder: 5314:5325 ioctl c0306201 2000000001c0 returned -22 [ 164.548169][ T5332] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 164.638706][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.859941][ T5332] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 165.531149][ T5338] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 165.699770][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.713501][ T5338] team0: Port device bond0 added [ 165.730137][ T5345] device syzkaller0 entered promiscuous mode [ 166.325258][ T5369] loop1: detected capacity change from 0 to 4096 [ 167.732715][ T5369] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.757889][ T5384] device syzkaller0 entered promiscuous mode [ 168.930499][ T5369] fscrypt: Error allocating hmac(sha512): -2 [ 168.936983][ T5369] EXT4-fs (loop1): Error processing option "test_dummy_encryption" [-2] [ 171.757172][ T5470] loop2: detected capacity change from 0 to 2048 [ 172.510196][ T5470] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.657444][ T4268] Bluetooth: hci0: command 0x0c20 tx timeout [ 172.922773][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 172.988045][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 173.095280][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.095280][ T9] [ 173.165110][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 173.206708][ T9] EXT4-fs (loop2): Free/Dirty block details [ 173.249805][ T9] EXT4-fs (loop2): free_blocks=4096 [ 173.286223][ T9] EXT4-fs (loop2): dirty_blocks=160 [ 173.323978][ T9] EXT4-fs (loop2): Block reservation details [ 173.366885][ T9] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 173.880095][ T26] audit: type=1804 audit(1778868150.342:42): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.326" name="bus" dev="ramfs" ino=35722 res=1 errno=0 [ 175.320348][ T26] audit: type=1804 audit(1778868150.372:43): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.326" name="bus" dev="ramfs" ino=35722 res=1 errno=0 [ 180.319780][ T5561] syz.4.341 (5561) used greatest stack depth: 17168 bytes left [ 184.065404][ T5605] loop1: detected capacity change from 0 to 512 [ 184.160363][ T5605] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.356: inode has both inline data and extents flags [ 184.221504][ T5605] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.356: couldn't read orphan inode 15 (err -117) [ 184.298758][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.336273][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 184.380776][ T5624] device bridge_slave_1 left promiscuous mode [ 184.388637][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.429467][ T5624] device bridge_slave_0 left promiscuous mode [ 184.439032][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.489855][ T5632] syz.2.360 uses obsolete (PF_INET,SOCK_PACKET) [ 186.068937][ T4883] Bluetooth: hci2: command 0x0406 tx timeout [ 186.085783][ T4883] Bluetooth: hci1: command 0x0406 tx timeout [ 186.106442][ T4883] Bluetooth: hci4: command 0x0406 tx timeout [ 186.131290][ T4883] Bluetooth: hci0: command 0x0406 tx timeout [ 186.151164][ T4883] Bluetooth: hci3: command 0x0406 tx timeout [ 189.288004][ T5683] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.375'. [ 191.041246][ T4425] wlan1: Trigger new scan to find an IBSS to join [ 191.147546][ T5700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 191.247509][ T4883] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 191.281935][ T4883] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.334974][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.358607][ T5703] device batadv_slave_0 entered promiscuous mode [ 191.501763][ T5715] tipc: Started in network mode [ 191.506681][ T5715] tipc: Node identity 3acd08ace551, cluster identity 4711 [ 191.543773][ T5715] tipc: Enabled bearer , priority 0 [ 191.560694][ T5718] device syzkaller0 entered promiscuous mode [ 191.601550][ T5715] tipc: Resetting bearer [ 191.607538][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.619585][ T5714] tipc: Resetting bearer [ 191.646989][ T5714] tipc: Disabling bearer [ 191.708732][ T5726] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.971247][ T13] usb 5-1: config 0 has no interfaces? [ 192.753798][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.762994][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.778847][ T13] usb 5-1: SerialNumber: syz [ 192.786408][ T13] usb 5-1: config 0 descriptor?? [ 192.806887][ T5745] loop1: detected capacity change from 0 to 128 [ 192.827989][ T5742] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 192.947383][ T5745] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 193.464824][ T5759] loop2: detected capacity change from 0 to 32768 [ 193.507154][ T5759] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.396 (5759) [ 193.528510][ T5759] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.537641][ T5759] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.547490][ T5759] BTRFS info (device loop2): use zstd compression, level 3 [ 193.554754][ T5759] BTRFS info (device loop2): force clearing of disk cache [ 193.561939][ T5759] BTRFS info (device loop2): enabling disk space caching [ 193.569477][ T5759] BTRFS info (device loop2): disk space caching is enabled [ 193.576834][ T5759] BTRFS info (device loop2): has skinny extents [ 193.588070][ T23] usb 5-1: USB disconnect, device number 5 [ 194.066446][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072832][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.082263][ T5759] BTRFS info (device loop2): enabling ssd optimizations [ 194.096823][ T5759] BTRFS info (device loop2): clearing free space tree [ 194.106663][ T5759] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.116679][ T5759] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.721071][ T4297] wlan1: Trigger new scan to find an IBSS to join [ 194.854112][ T26] audit: type=1326 audit(1778868171.302:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.0.401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcae2c86e59 code=0x0 [ 196.026193][ T4216] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 196.576317][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 196.680840][ T5821] x_tables: duplicate underflow at hook 3 [ 197.195557][ T5819] device dummy0 entered promiscuous mode [ 197.220797][ T5823] loop1: detected capacity change from 0 to 512 [ 197.313408][ T5819] device macvtap1 entered promiscuous mode [ 197.463127][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.519023][ T5823] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.018890][ T5891] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 206.075428][ T5895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.444902][ T5913] loop4: detected capacity change from 0 to 2048 [ 208.713896][ T5913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.296316][ T4216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 209.314170][ T4216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 209.327029][ T4216] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.327029][ T4216] [ 209.337764][ T4216] EXT4-fs (loop4): Total free blocks count 0 [ 209.344126][ T4216] EXT4-fs (loop4): Free/Dirty block details [ 209.350152][ T4216] EXT4-fs (loop4): free_blocks=4096 [ 209.355731][ T4216] EXT4-fs (loop4): dirty_blocks=160 [ 209.361315][ T4216] EXT4-fs (loop4): Block reservation details [ 209.367374][ T4216] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 211.011347][ T5954] overlayfs: failed to clone lowerpath [ 213.228396][ T5957] loop4: detected capacity change from 0 to 2048 [ 215.775867][ T5976] loop1: detected capacity change from 0 to 2048 [ 215.884285][ T4312] udevd[4312]: incorrect nilfs2 checksum on /dev/loop4 [ 215.916623][ T5989] device vlan2 entered promiscuous mode [ 216.993444][ T5976] EXT4-fs: error -4 creating inode table initialization thread [ 217.407650][ T5976] EXT4-fs (loop1): mount failed [ 217.484328][ T5995] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 217.493907][ T5995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 217.503481][ T5995] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 221.623775][ T6032] netlink: 'syz.3.461': attribute type 12 has an invalid length. [ 221.885223][ T6033] loop1: detected capacity change from 0 to 2048 [ 221.975103][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 222.192377][ T6036] netlink: 14 bytes leftover after parsing attributes in process `syz.4.464'. [ 222.315068][ T6033] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.522356][ T6033] NILFS (loop1): mounting unchecked fs [ 222.606585][ T6033] NILFS (loop1): recovery complete [ 222.637324][ T6043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.816585][ T6069] tipc: Enabling of bearer rejected, failed to enable media [ 226.204623][ T4425] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.220318][ T6084] tipc: Enabled bearer , priority 0 [ 226.313575][ T6084] tipc: Resetting bearer [ 226.454504][ T6082] tipc: Disabling bearer [ 227.652215][ T6108] loop4: detected capacity change from 0 to 16 [ 228.069659][ T6106] loop2: detected capacity change from 0 to 512 [ 228.083438][ T6108] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 228.093699][ T6108] erofs: (device loop4): mounted with root inode @ nid 36. [ 228.738464][ T6110] loop1: detected capacity change from 0 to 256 [ 229.236319][ T6124] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 230.228455][ T6132] loop1: detected capacity change from 0 to 1024 [ 230.254261][ T6106] EXT4-fs: failed to create workqueue [ 230.361298][ T6106] EXT4-fs (loop2): mount failed [ 230.429192][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.368115][ T6195] loop4: detected capacity change from 0 to 131072 [ 236.282428][ T6195] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.336301][ T6195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 239.678001][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 242.621038][ T6274] loop1: detected capacity change from 0 to 16 [ 242.808732][ T6274] erofs: (device loop1): mounted with root inode @ nid 36. [ 242.857498][ T6274] attempt to access beyond end of device [ 242.857498][ T6274] loop1: rw=524288, want=1072, limit=16 [ 242.973909][ T4202] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 243.070656][ T6274] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 243.081544][ T6274] attempt to access beyond end of device [ 243.081544][ T6274] loop1: rw=524288, want=56, limit=16 [ 243.095414][ T6274] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 243.300727][ T26] audit: type=1800 audit(1778868219.582:45): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.529" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 243.401583][ T6278] loop4: detected capacity change from 0 to 2048 [ 243.548515][ T6283] device syzkaller0 entered promiscuous mode [ 243.584974][ T6283] TC_ACT_REPEAT abuse ? [ 244.383133][ T6294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.160271][ T6311] IPVS: rr: FWM 3 0x00000003 - no destination available [ 246.069450][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 246.595376][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 246.780765][ T6338] loop2: detected capacity change from 0 to 64 [ 247.716105][ T6343] loop1: detected capacity change from 0 to 2048 [ 247.784706][ T6343] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.836231][ T6343] NILFS (loop1): mounting unchecked fs [ 247.906469][ T6343] NILFS (loop1): recovery complete [ 247.963619][ T6354] loop4: detected capacity change from 0 to 1764 [ 248.926636][ T6360] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.958936][ T6351] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 249.313800][ T6368] device syzkaller0 entered promiscuous mode [ 249.640165][ T6377] loop4: detected capacity change from 0 to 512 [ 251.315321][ T6386] tc action pedit 'at' offset 6 out of bounds [ 251.334705][ T6382] loop2: detected capacity change from 0 to 2048 [ 251.959086][ T6382] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.142999][ T6382] NILFS (loop2): mounting unchecked fs [ 252.331674][ T6382] NILFS (loop2): recovery complete [ 252.371159][ T6394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.524826][ T6398] loop1: detected capacity change from 0 to 2048 [ 253.996614][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.092130][ T6398] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.299558][ T6398] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 254.329493][ T6398] EXT4-fs (loop1): This should not happen!! Data will be lost [ 254.329493][ T6398] [ 254.518732][ T6398] EXT4-fs (loop1): Total free blocks count 0 [ 254.783231][ T6398] EXT4-fs (loop1): Free/Dirty block details [ 254.842772][ T6398] EXT4-fs (loop1): free_blocks=2415919104 [ 254.848695][ T6398] EXT4-fs (loop1): dirty_blocks=64 [ 254.856336][ T6398] EXT4-fs (loop1): Block reservation details [ 254.976270][ T6398] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 255.513646][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.520060][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821252][ T6440] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.143336][ T6438] loop2: detected capacity change from 0 to 4096 [ 257.376208][ T6438] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 257.571530][ T6438] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 257.642814][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.695319][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.695319][ T144] [ 257.794165][ T6448] tipc: Enabled bearer , priority 0 [ 257.801828][ T6448] device syzkaller0 entered promiscuous mode [ 257.827277][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.4.576'. [ 257.865978][ T6448] tipc: Resetting bearer [ 257.908703][ T6447] tipc: Resetting bearer [ 257.936078][ T6447] tipc: Disabling bearer [ 257.963363][ T6451] device syzkaller0 entered promiscuous mode [ 257.976705][ T6451] 0: reclassify loop, rule prio 0, protocol 700 [ 258.107038][ T6459] tipc: Enabling of bearer rejected, failed to enable media [ 260.851272][ T6504] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 260.958184][ T6506] tc action pedit unable to extract header offset for header type (0x5) [ 260.992274][ T6511] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 261.008939][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 261.213171][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 263.085422][ T4366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.098994][ T6530] device syzkaller0 entered promiscuous mode [ 265.245406][ T4701] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.177941][ T6558] device syzkaller0 entered promiscuous mode [ 266.190688][ T6558] tc action pedit offset must be on 32 bit boundaries [ 266.213892][ T6559] xt_NFQUEUE: number of total queues is 0 [ 267.390595][ T6580] loop4: detected capacity change from 0 to 4096 [ 267.422790][ T6580] EXT4-fs (loop4): inline encryption not supported [ 267.447581][ T6580] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 267.569963][ T6580] EXT4-fs (loop4): Ignoring removed bh option [ 267.884328][ T6580] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 268.139051][ T6580] System zones: 0-5 [ 269.234236][ T6580] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,journal_dev=0x00000000000007ff,inlinecrypt,mblk_io_submit,grpjquota=,bh,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 270.350097][ T6617] loop1: detected capacity change from 0 to 256 [ 270.867809][ T6617] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.829828][ T6636] xt_connbytes: Forcing CT accounting to be enabled [ 272.549480][ T6649] loop4: detected capacity change from 0 to 2048 [ 276.697078][ T6698] loop1: detected capacity change from 0 to 256 [ 276.845153][ T6698] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.901723][ T6698] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 277.175638][ T6698] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 282.898142][ T6779] smc: net device vcan0 applied user defined pnetid SYZ1 [ 284.110204][ T6796] loop1: detected capacity change from 0 to 128 [ 285.023024][ T6796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.064496][ T6796] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.256531][ T6820] device syzkaller0 entered promiscuous mode [ 286.314008][ T6824] 0: reclassify loop, rule prio 0, protocol 800 [ 286.599597][ T6830] loop7: detected capacity change from 0 to 7 [ 286.631165][ T6830] Dev loop7: unable to read RDB block 7 [ 286.637321][ T6830] loop7: AHDI p1 p2 p3 [ 286.641616][ T6830] loop7: partition table partially beyond EOD, truncated [ 286.654772][ T6830] loop7: p1 start 1601398130 is beyond EOD, truncated [ 286.661731][ T6830] loop7: p2 start 1702059890 is beyond EOD, truncated [ 287.168346][ T6829] device syzkaller0 entered promiscuous mode [ 289.226074][ T6839] loop4: detected capacity change from 0 to 512 [ 289.901228][ T6839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.914346][ T6839] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.349069][ T6870] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.357163][ T6866] loop2: detected capacity change from 0 to 2048 [ 291.384205][ T6870] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 291.426665][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 291.467162][ T6866] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 291.499880][ T6866] NILFS (loop2): mounting unchecked fs [ 291.548437][ T4312] udevd[4312]: incorrect nilfs2 checksum on /dev/loop2 [ 291.565182][ T6866] NILFS (loop2): recovery complete [ 291.851472][ T6884] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.077131][ T6906] loop1: detected capacity change from 0 to 1024 [ 295.903295][ T6917] loop4: detected capacity change from 0 to 512 [ 296.077343][ T6917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 296.090528][ T6917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 296.315195][ T6917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 296.323656][ T6917] System zones: 1-12 [ 296.396152][ T6917] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 296.417170][ T6917] EXT4-fs (loop4): 1 truncate cleaned up [ 296.422945][ T6917] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 296.555651][ T144] hfsplus: b-tree write err: -5, ino 25 [ 296.652909][ T144] hfsplus: b-tree write err: -5, ino 4 [ 296.658743][ T144] hfsplus: b-tree write err: -5, ino 2 [ 297.636141][ T6930] trusted_key: encrypted_key: insufficient parameters specified [ 297.812881][ T6943] 0: reclassify loop, rule prio 0, protocol 700 [ 298.917423][ T6960] loop4: detected capacity change from 0 to 2048 [ 298.997407][ T6965] device syzkaller0 entered promiscuous mode [ 299.479598][ T4300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.110679][ T6960] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 300.176733][ T6960] NILFS (loop4): mounting unchecked fs [ 300.247857][ T6960] NILFS (loop4): recovery complete [ 301.209162][ T6986] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.272491][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.651879][ T7002] loop2: detected capacity change from 0 to 128 [ 306.036911][ T7027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.455664][ T7040] loop2: detected capacity change from 0 to 131072 [ 309.575212][ T7040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 309.623940][ T7040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.088301][ T7079] loop4: detected capacity change from 0 to 256 [ 312.382400][ T7079] FAT-fs (loop4): Directory bread(block 64) failed [ 312.415192][ T7079] FAT-fs (loop4): Directory bread(block 65) failed [ 312.622545][ T7079] FAT-fs (loop4): Directory bread(block 66) failed [ 312.629459][ T7079] FAT-fs (loop4): Directory bread(block 67) failed [ 312.641287][ T7079] FAT-fs (loop4): Directory bread(block 68) failed [ 312.983872][ T7079] FAT-fs (loop4): Directory bread(block 69) failed [ 312.992136][ T7079] FAT-fs (loop4): Directory bread(block 70) failed [ 313.883159][ T7079] FAT-fs (loop4): Directory bread(block 71) failed [ 313.889841][ T7079] FAT-fs (loop4): Directory bread(block 72) failed [ 313.908103][ T7079] FAT-fs (loop4): Directory bread(block 73) failed [ 316.805455][ T26] audit: type=1326 audit(1778868289.987:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.748" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f219397fe59 code=0x0 [ 319.313360][ T7146] loop4: detected capacity change from 0 to 256 [ 319.870110][ T7157] netlink: 'syz.4.758': attribute type 2 has an invalid length. [ 320.343813][ T7154] netlink: 14 bytes leftover after parsing attributes in process `syz.0.769'. [ 320.504682][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.511049][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.183071][ T7225] loop2: detected capacity change from 0 to 1024 [ 324.273185][ T7227] netlink: 'syz.0.773': attribute type 2 has an invalid length. [ 328.879477][ T7266] loop2: detected capacity change from 0 to 16 [ 329.488737][ T7266] erofs: (device loop2): mounted with root inode @ nid 36. [ 329.522645][ T7266] attempt to access beyond end of device [ 329.522645][ T7266] loop2: rw=524288, want=1072, limit=16 [ 329.548535][ T4202] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 329.704734][ T7266] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 329.714288][ T7266] attempt to access beyond end of device [ 329.714288][ T7266] loop2: rw=524288, want=56, limit=16 [ 329.726197][ T7266] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 330.193223][ T26] audit: type=1800 audit(1778868301.933:47): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.784" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 330.329417][ T7271] trusted_key: encrypted_key: insufficient parameters specified [ 330.365070][ T7272] loop4: detected capacity change from 0 to 16 [ 330.373561][ T7274] loop2: detected capacity change from 0 to 128 [ 330.418167][ T7272] erofs: (device loop4): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 333.185302][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 333.267347][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 333.323850][ T7274] bond0: option min_links: invalid value (18446744072726994826) [ 333.642575][ T7274] bond0: option min_links: allowed values 0 - 2147483647 [ 335.182013][ T7324] loop2: detected capacity change from 0 to 2048 [ 338.589677][ C0] hrtimer: interrupt took 38850 ns [ 339.829813][ T4701] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.863742][ T7404] device syzkaller0 entered promiscuous mode [ 341.949889][ T6359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.460899][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.575620][ T7423] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.812648][ T7449] loop2: detected capacity change from 0 to 512 [ 345.887553][ T7449] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.103618][ T7449] [ 346.105991][ T7449] ====================================================== [ 346.113005][ T7449] WARNING: possible circular locking dependency detected [ 346.120030][ T7449] syzkaller #0 Not tainted [ 346.124438][ T7449] ------------------------------------------------------ [ 346.131447][ T7449] syz.2.841/7449 is trying to acquire lock: [ 346.137339][ T7449] ffff888061d68c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 346.147467][ T7449] [ 346.147467][ T7449] but task is already holding lock: [ 346.154827][ T7449] ffff8880281a9eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 346.164671][ T7449] [ 346.164671][ T7449] which lock already depends on the new lock. [ 346.164671][ T7449] [ 346.175070][ T7449] [ 346.175070][ T7449] the existing dependency chain (in reverse order) is: [ 346.184080][ T7449] [ 346.184080][ T7449] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 346.191642][ T7449] down_write+0x38/0x60 [ 346.196321][ T7449] ext4_destroy_inline_data+0x24/0xe0 [ 346.202220][ T7449] ext4_writepages+0x670/0x2df0 [ 346.207602][ T7449] do_writepages+0x476/0x6e0 [ 346.212722][ T7449] __writeback_single_inode+0x153/0xda0 [ 346.218786][ T7449] writeback_sb_inodes+0xa4e/0x1680 [ 346.224612][ T7449] wb_writeback+0x45d/0xbe0 [ 346.229641][ T7449] wb_workfn+0x43a/0xf20 [ 346.234412][ T7449] process_one_work+0x85f/0x1010 [ 346.239874][ T7449] worker_thread+0xaa6/0x1290 [ 346.245078][ T7449] kthread+0x436/0x520 [ 346.249666][ T7449] ret_from_fork+0x1f/0x30 [ 346.254603][ T7449] [ 346.254603][ T7449] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 346.263032][ T7449] __lock_acquire+0x2c42/0x7d10 [ 346.268407][ T7449] lock_acquire+0x19e/0x400 [ 346.273439][ T7449] percpu_down_read+0x46/0x1b0 [ 346.278727][ T7449] ext4_writepages+0x20f/0x2df0 [ 346.284103][ T7449] do_writepages+0x476/0x6e0 [ 346.289219][ T7449] __writeback_single_inode+0x153/0xda0 [ 346.295282][ T7449] writeback_single_inode+0x3cb/0x8e0 [ 346.301174][ T7449] write_inode_now+0x23b/0x2c0 [ 346.306452][ T7449] iput+0x5ab/0x8a0 [ 346.310790][ T7449] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 346.316689][ T7449] ext4_xattr_block_set+0x4fd/0x2d20 [ 346.322500][ T7449] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 346.328825][ T7449] __ext4_expand_extra_isize+0x301/0x3e0 [ 346.334982][ T7449] __ext4_mark_inode_dirty+0x469/0x700 [ 346.340966][ T7449] ext4_evict_inode+0xa8d/0x1090 [ 346.346422][ T7449] evict+0x4c9/0x8d0 [ 346.350842][ T7449] ext4_orphan_cleanup+0xad2/0x1320 [ 346.356560][ T7449] ext4_fill_super+0x8d6e/0x94f0 [ 346.362023][ T7449] mount_bdev+0x287/0x3c0 [ 346.366874][ T7449] legacy_get_tree+0xe6/0x180 [ 346.372094][ T7449] vfs_get_tree+0x88/0x270 [ 346.377034][ T7449] do_new_mount+0x24a/0xa40 [ 346.382070][ T7449] __se_sys_mount+0x2e3/0x3d0 [ 346.387273][ T7449] do_syscall_64+0x4c/0xa0 [ 346.392213][ T7449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.398631][ T7449] [ 346.398631][ T7449] other info that might help us debug this: [ 346.398631][ T7449] [ 346.408846][ T7449] Possible unsafe locking scenario: [ 346.408846][ T7449] [ 346.416287][ T7449] CPU0 CPU1 [ 346.421648][ T7449] ---- ---- [ 346.427004][ T7449] lock(&ei->xattr_sem); [ 346.431419][ T7449] lock(&sbi->s_writepages_rwsem); [ 346.439129][ T7449] lock(&ei->xattr_sem); [ 346.445977][ T7449] lock(&sbi->s_writepages_rwsem); [ 346.451166][ T7449] [ 346.451166][ T7449] *** DEADLOCK *** [ 346.451166][ T7449] [ 346.459298][ T7449] 3 locks held by syz.2.841/7449: [ 346.464315][ T7449] #0: ffff88807aae60e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 346.474431][ T7449] #1: ffff88807aae6650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 346.483931][ T7449] #2: ffff8880281a9eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 346.494206][ T7449] [ 346.494206][ T7449] stack backtrace: [ 346.500099][ T7449] CPU: 1 PID: 7449 Comm: syz.2.841 Not tainted syzkaller #0 [ 346.507382][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.517443][ T7449] Call Trace: [ 346.520726][ T7449] [ 346.523655][ T7449] dump_stack_lvl+0x188/0x250 [ 346.528331][ T7449] ? load_image+0x400/0x400 [ 346.532827][ T7449] ? show_regs_print_info+0x20/0x20 [ 346.538026][ T7449] ? print_circular_bug+0x12b/0x1a0 [ 346.543225][ T7449] check_noncircular+0x296/0x330 [ 346.548177][ T7449] ? look_up_lock_class+0x71/0x110 [ 346.553302][ T7449] ? add_chain_block+0x940/0x940 [ 346.558237][ T7449] ? lockdep_lock+0xf1/0x1f0 [ 346.562833][ T7449] ? mark_lock+0x94/0x320 [ 346.567160][ T7449] __lock_acquire+0x2c42/0x7d10 [ 346.572023][ T7449] ? verify_lock_unused+0x140/0x140 [ 346.577221][ T7449] ? mark_lock+0x94/0x320 [ 346.581549][ T7449] ? verify_lock_unused+0x140/0x140 [ 346.586752][ T7449] ? mark_lock+0x94/0x320 [ 346.591085][ T7449] lock_acquire+0x19e/0x400 [ 346.595588][ T7449] ? ext4_writepages+0x20f/0x2df0 [ 346.600620][ T7449] ? __might_sleep+0xf0/0xf0 [ 346.605216][ T7449] ? read_lock_is_recursive+0x10/0x10 [ 346.610589][ T7449] ? mark_lock+0x94/0x320 [ 346.614920][ T7449] ? __lock_acquire+0x13bc/0x7d10 [ 346.619949][ T7449] percpu_down_read+0x46/0x1b0 [ 346.624714][ T7449] ? ext4_writepages+0x20f/0x2df0 [ 346.629746][ T7449] ext4_writepages+0x20f/0x2df0 [ 346.634602][ T7449] ? verify_lock_unused+0x140/0x140 [ 346.639800][ T7449] ? verify_lock_unused+0x140/0x140 [ 346.644998][ T7449] ? verify_lock_unused+0x140/0x140 [ 346.650201][ T7449] ? mark_lock+0x94/0x320 [ 346.654524][ T7449] ? ext4_readpage+0x2e0/0x2e0 [ 346.659290][ T7449] ? __lock_acquire+0x13bc/0x7d10 [ 346.664334][ T7449] ? __lock_acquire+0x7d10/0x7d10 [ 346.669362][ T7449] ? do_raw_spin_lock+0x128/0x2f0 [ 346.674393][ T7449] ? do_raw_spin_unlock+0x11d/0x230 [ 346.679594][ T7449] ? ext4_readpage+0x2e0/0x2e0 [ 346.684360][ T7449] do_writepages+0x476/0x6e0 [ 346.688972][ T7449] ? __writepage+0x130/0x130 [ 346.693565][ T7449] ? writeback_single_inode+0x3c0/0x8e0 [ 346.699120][ T7449] ? __lock_acquire+0x7d10/0x7d10 [ 346.704153][ T7449] ? do_raw_spin_lock+0x128/0x2f0 [ 346.709185][ T7449] __writeback_single_inode+0x153/0xda0 [ 346.714738][ T7449] writeback_single_inode+0x3cb/0x8e0 [ 346.720117][ T7449] ? write_inode_now+0x2c0/0x2c0 [ 346.725062][ T7449] write_inode_now+0x23b/0x2c0 [ 346.729823][ T7449] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 346.735291][ T7449] ? do_raw_spin_unlock+0x11d/0x230 [ 346.740491][ T7449] iput+0x5ab/0x8a0 [ 346.744300][ T7449] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 346.749686][ T7449] ? ext4_xattr_ibody_set+0x330/0x330 [ 346.755058][ T7449] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 346.761390][ T7449] ? __might_sleep+0xf0/0xf0 [ 346.765974][ T7449] ? ext4_xattr_block_set+0xc2/0x2d20 [ 346.771347][ T7449] ext4_xattr_block_set+0x4fd/0x2d20 [ 346.776635][ T7449] ? ext4_get_inode_loc+0x120/0x120 [ 346.781834][ T7449] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 346.787564][ T7449] ? ext4_xattr_block_find+0x500/0x500 [ 346.793025][ T7449] ? ext4_xattr_block_find+0x433/0x500 [ 346.798498][ T7449] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 346.804326][ T7449] __ext4_expand_extra_isize+0x301/0x3e0 [ 346.809974][ T7449] __ext4_mark_inode_dirty+0x469/0x700 [ 346.815442][ T7449] ext4_evict_inode+0xa8d/0x1090 [ 346.820387][ T7449] ? _raw_spin_unlock+0x24/0x40 [ 346.825243][ T7449] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 346.831145][ T7449] ? do_raw_spin_unlock+0x11d/0x230 [ 346.836345][ T7449] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 346.842233][ T7449] evict+0x4c9/0x8d0 [ 346.846115][ T7449] ? proc_nr_inodes+0x320/0x320 [ 346.850947][ T7449] ? do_raw_spin_unlock+0x11d/0x230 [ 346.856118][ T7449] ? _raw_spin_unlock+0x24/0x40 [ 346.860941][ T7449] ? iput+0x706/0x8a0 [ 346.864898][ T7449] ext4_orphan_cleanup+0xad2/0x1320 [ 346.870078][ T7449] ? ext4_orphan_del+0xbf0/0xbf0 [ 346.874996][ T7449] ? errseq_check_and_advance+0x62/0x120 [ 346.880619][ T7449] ext4_fill_super+0x8d6e/0x94f0 [ 346.885560][ T7449] ? format_decode+0x898/0x1300 [ 346.890422][ T7449] ? ext4_mount+0x40/0x40 [ 346.894750][ T7449] ? set_blocksize+0x1f3/0x370 [ 346.899511][ T7449] ? sb_set_blocksize+0xa5/0xe0 [ 346.904360][ T7449] mount_bdev+0x287/0x3c0 [ 346.908691][ T7449] ? ext4_mount+0x40/0x40 [ 346.913022][ T7449] legacy_get_tree+0xe6/0x180 [ 346.917695][ T7449] ? ext4_errno_to_code+0x160/0x160 [ 346.922894][ T7449] vfs_get_tree+0x88/0x270 [ 346.927306][ T7449] do_new_mount+0x24a/0xa40 [ 346.931809][ T7449] __se_sys_mount+0x2e3/0x3d0 [ 346.936496][ T7449] ? __x64_sys_mount+0xc0/0xc0 [ 346.941261][ T7449] ? lockdep_hardirqs_on+0x94/0x140 [ 346.946459][ T7449] ? __x64_sys_mount+0x1c/0xc0 [ 346.951220][ T7449] do_syscall_64+0x4c/0xa0 [ 346.955633][ T7449] ? clear_bhb_loop+0x30/0x80 [ 346.960305][ T7449] ? clear_bhb_loop+0x30/0x80 [ 346.964978][ T7449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.970882][ T7449] RIP: 0033:0x7f0ad19260ca [ 346.975290][ T7449] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.994895][ T7449] RSP: 002b:00007f0acfb7de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.003309][ T7449] RAX: ffffffffffffffda RBX: 00007f0acfb7dee0 RCX: 00007f0ad19260ca [ 347.011272][ T7449] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f0acfb7dea0 [ 347.019237][ T7449] RBP: 0000200000000180 R08: 00007f0acfb7dee0 R09: 0000000000000410 [ 347.027202][ T7449] R10: 0000000000000410 R11: 0000000000000246 R12: 0000200000000040 [ 347.035167][ T7449] R13: 00007f0acfb7dea0 R14: 000000000000048a R15: 00002000000001c0 [ 347.043139][ T7449] [ 347.844234][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.841: iget: bad extra_isize 90 (inode size 256) [ 347.921794][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.841: error while reading EA inode 11 err=-117 [ 347.949167][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.841: iget: bad extra_isize 90 (inode size 256) [ 347.964400][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.841: error while reading EA inode 11 err=-117 [ 347.982095][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.841: iget: bad extra_isize 90 (inode size 256) [ 347.996614][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.841: error while reading EA inode 18 err=-117 [ 348.011982][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.841: iget: bad extra_isize 90 (inode size 256) [ 348.027542][ T7449] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.841: error while reading EA inode 18 err=-117 [ 348.040751][ T7449] EXT4-fs (loop2): 1 orphan inode deleted [ 348.047547][ T7449] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpid,nombcache,sysvgroups,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.