last executing test programs: 43.232900003s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() link(0x0, &(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000a00)=""/4096, 0x53, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 41.77978736s ago: executing program 0 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) 39.399093821s ago: executing program 0 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x400, &(0x7f0000000400)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000340)=""/172, 0xfffffffffffffe69) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000b00)={[0x1000, 0x9800, 0xf000, 0x10000], 0x5, 0x20, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) request_key(&(0x7f0000000540)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='\x00', r5) socket$nl_generic(0x11, 0x3, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r6, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/142, 0x8e}], 0x1, 0x7a, 0x4) 37.818647729s ago: executing program 0 (id=106): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x2000001, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) 36.962685113s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) 27.10667501s ago: executing program 0 (id=135): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) 26.761755451s ago: executing program 32 (id=135): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) 23.799634206s ago: executing program 2 (id=147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r3 = getpid() syz_emit_ethernet(0x6b, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="70758e3cf94b5f00"/28], 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e20, 0x0, 0x4e23, 0x80, 0xa, 0x20, 0x20, 0x2}, {0x61be, 0xdffd, 0x6, 0x1, 0x0, 0x60c7, 0x0, 0x7}, {0x8, 0x7fffffffffffffff, 0x2}, 0x8000, 0x6e6bbc}, {{@in=@remote, 0x4d3, 0xff}, 0x2, @in=@loopback, 0x3501, 0x3, 0x3, 0xff, 0x6, 0xb5b3, 0x401}}, 0xe8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRESDEC=r2], 0x48) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="34000000100001000000000009820000080000400000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b"], 0x34}], 0x1}, 0x0) 11.889253093s ago: executing program 4 (id=170): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 11.229856796s ago: executing program 4 (id=171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000fffc000300000a0000e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.133525346s ago: executing program 4 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') lseek(r5, 0x3fc04000000000, 0x0) 9.436444594s ago: executing program 2 (id=175): socket$nl_generic(0x11, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x7a, 0x4) 9.339108464s ago: executing program 2 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000231ccf7ffbd0a3a6fddf22ef2a5d457c9d33e6f4ff92ddf9eeeea58253c628de59c0c801db01bd303594b4f74d33f646c64c370319a7eb66b72a01fb5c393064e6d513a41c2401e1f0353f8a675e8fc377145b1f06071a0fff811479abaacf3cb1713e7b6d98e2c31aa0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) munlockall() 8.667811388s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) close(r6) fsetxattr$security_evm(r6, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x5, 0x2, 0xe, 0x8, 0x16, "25eaf81926e743aa88694c818703a73571a94958632f"}, 0x1f, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) listen(r6, 0x7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rxrpc_propose_ack\x00', r6, 0x0, 0x6}, 0x18) 8.13617102s ago: executing program 2 (id=179): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(0x0, 0x7) epoll_create1(0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0xcbc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@oldalloc}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") 7.181757215s ago: executing program 4 (id=181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000fffc000300000a0000e0ff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.774547097s ago: executing program 4 (id=184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r3 = getpid() syz_emit_ethernet(0x6b, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="70758e3cf94b5f00"/28], 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e20, 0x0, 0x4e23, 0x80, 0xa, 0x20, 0x20, 0x2}, {0x61be, 0xdffd, 0x6, 0x1, 0x0, 0x60c7, 0x0, 0x7}, {0x8, 0x7fffffffffffffff, 0x2}, 0x8000, 0x6e6bbc}, {{@in=@remote, 0x4d3, 0xff}, 0x2, @in=@loopback, 0x3501, 0x3, 0x3, 0xff, 0x6, 0xb5b3, 0x401}}, 0xe8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRESDEC=r2], 0x48) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="34000000100001000000000009820000080000400000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b"], 0x34}], 0x1}, 0x0) 5.819024142s ago: executing program 1 (id=186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f000076f000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x90b4e000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) syz_open_pts(r3, 0x0) 5.802685551s ago: executing program 2 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') lseek(r5, 0x3fc04000000000, 0x0) 4.914339086s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000231ccf7ffbd0a3a6fddf22ef2a5d457c9d33e6f4ff92ddf9eeeea58253c628de59c0c801db01bd303594b4f74d33f646c64c370319a7eb66b72a01fb5c393064e6d513a41c2401e1f0353f8a675e8fc377145b1f06071a0fff811479abaacf3cb1713e7b6d98e2c31aa0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) munlockall() 4.715469347s ago: executing program 1 (id=189): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5af1fa7526395e56, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x1a0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@delneigh={0x30, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0xc6}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.685973112s ago: executing program 2 (id=190): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2a0d82, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(r2, 0x0, 0x0) 3.314567583s ago: executing program 3 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) close(r6) fsetxattr$security_evm(r6, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x5, 0x2, 0xe, 0x8, 0x16, "25eaf81926e743aa88694c818703a73571a94958632f"}, 0x1f, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) listen(r6, 0x7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rxrpc_propose_ack\x00', r6, 0x0, 0x6}, 0x18) 2.243532628s ago: executing program 1 (id=192): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000000004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, 0xffffffffffffffff, 0x0) 2.237653529s ago: executing program 3 (id=193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000fffc000300000a0000e0ff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.164778879s ago: executing program 3 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.438219862s ago: executing program 3 (id=195): socket$nl_generic(0x11, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x7a, 0x4) 1.365571593s ago: executing program 1 (id=196): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@oldalloc}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 366.718347ms ago: executing program 3 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) 258.188688ms ago: executing program 1 (id=198): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 0s ago: executing program 1 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1e, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x4c, 0x1a, 0x1a0, 0x73, 0x2d0, 0x258, 0x258, 0x2d0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0x11}, 0xc) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000080)={0x17c04, r5, 0x5, 0x1000fffff, 0x0, 0xfffffffffffffffc}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. syzkaller login: [ 57.156593][ T4154] cgroup: Unknown subsys name 'net' [ 57.265706][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.719850][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.173067][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 60.200242][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 60.223021][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 60.242768][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 60.314668][ T4164] chnl_net:caif_netlink_parms(): no params data found [ 60.406223][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.413692][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.422027][ T4169] device bridge_slave_0 entered promiscuous mode [ 60.442393][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.449617][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.457690][ T4174] device bridge_slave_0 entered promiscuous mode [ 60.468927][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.476226][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.484536][ T4174] device bridge_slave_1 entered promiscuous mode [ 60.492412][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.499732][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.507985][ T4169] device bridge_slave_1 entered promiscuous mode [ 60.522353][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.529572][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.537564][ T4165] device bridge_slave_0 entered promiscuous mode [ 60.570882][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.578220][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.586500][ T4165] device bridge_slave_1 entered promiscuous mode [ 60.618663][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.628079][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.635238][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.643606][ T4166] device bridge_slave_0 entered promiscuous mode [ 60.669523][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.681036][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.697018][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.706452][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.713718][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.721519][ T4166] device bridge_slave_1 entered promiscuous mode [ 60.736037][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.743141][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.751665][ T4164] device bridge_slave_0 entered promiscuous mode [ 60.782977][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.794654][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.804046][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.811200][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.819286][ T4164] device bridge_slave_1 entered promiscuous mode [ 60.864885][ T4174] team0: Port device team_slave_0 added [ 60.874879][ T4169] team0: Port device team_slave_0 added [ 60.882439][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.908104][ T4174] team0: Port device team_slave_1 added [ 60.924175][ T4169] team0: Port device team_slave_1 added [ 60.931410][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.942936][ T4165] team0: Port device team_slave_0 added [ 60.950824][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.982848][ T4165] team0: Port device team_slave_1 added [ 60.990193][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.000272][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.007330][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.033845][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.074342][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.081299][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.107540][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.119342][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.126476][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.152424][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.166093][ T4166] team0: Port device team_slave_0 added [ 61.172401][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.179395][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.205764][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.243972][ T4166] team0: Port device team_slave_1 added [ 61.254212][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.261166][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.287216][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.301499][ T4164] team0: Port device team_slave_0 added [ 61.329139][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.336613][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.363209][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.375883][ T4164] team0: Port device team_slave_1 added [ 61.384863][ T4174] device hsr_slave_0 entered promiscuous mode [ 61.391702][ T4174] device hsr_slave_1 entered promiscuous mode [ 61.435998][ T4169] device hsr_slave_0 entered promiscuous mode [ 61.442757][ T4169] device hsr_slave_1 entered promiscuous mode [ 61.449681][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.457755][ T4169] Cannot create hsr debugfs directory [ 61.463827][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.470765][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.497059][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.509505][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.516610][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.542645][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.585209][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.592176][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.618353][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.633405][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.640414][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.666460][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.757752][ T4165] device hsr_slave_0 entered promiscuous mode [ 61.764579][ T4165] device hsr_slave_1 entered promiscuous mode [ 61.771245][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.778937][ T4165] Cannot create hsr debugfs directory [ 61.803907][ T4166] device hsr_slave_0 entered promiscuous mode [ 61.810749][ T4166] device hsr_slave_1 entered promiscuous mode [ 61.817622][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 61.823734][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 61.824362][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 61.836576][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 61.842937][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.850731][ T4166] Cannot create hsr debugfs directory [ 61.893597][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 61.913464][ T4164] device hsr_slave_0 entered promiscuous mode [ 61.920289][ T4164] device hsr_slave_1 entered promiscuous mode [ 61.926994][ T4164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.934659][ T4164] Cannot create hsr debugfs directory [ 62.172401][ T4174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.184004][ T4174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.197604][ T4174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.207019][ T4174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.246376][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.256771][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.267243][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.277746][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.362117][ T4165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.392326][ T4165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.402545][ T4165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.421999][ T4165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.445739][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.505205][ T4164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.515193][ T4164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.534219][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.547051][ T4164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.569849][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.578120][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.588773][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.597233][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.606380][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.617160][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.624431][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.633201][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.644973][ T4164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.675226][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.682660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.693107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.702658][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.709780][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.720302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.729358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.737198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.775874][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.785821][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.795354][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.802419][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.810855][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.819825][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.828545][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.838983][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.847955][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.876507][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.905771][ T4174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.916850][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.931017][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.938972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.949779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.958563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.968200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.977480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.986384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.994967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.004104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.012468][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.019589][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.028681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.037704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.047104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.057793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.066887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.075993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.086266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.094668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.102936][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.120294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.135011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.149884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.159009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.178027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.187029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.199552][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.208827][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.221300][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.234753][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.266028][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.297258][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.306620][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.313725][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.342759][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.351157][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.361059][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.372129][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.379250][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.388168][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.419784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.432015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.440627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.454124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.463207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.482980][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.514729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.523279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.534023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.542781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.555286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.585665][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.596284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.610558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.619545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.634164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.654966][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.672260][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.725872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.743819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.752703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.763242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.775648][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.787212][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.822674][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.838164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.848482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.857554][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.864688][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.873168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.882899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.891793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.893576][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 63.905241][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 63.907918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.911329][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 63.940771][ T4169] device veth0_vlan entered promiscuous mode [ 63.947431][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 63.960249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.970538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.973907][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 63.982621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.994404][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.001477][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.009608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.018598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.027401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.035802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.045049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.054984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.063455][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.070514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.079115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.087781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.096680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.125311][ T4164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.136882][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.157911][ T4174] device veth0_vlan entered promiscuous mode [ 64.171270][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.184983][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.194322][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.204002][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.212659][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.222473][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.231282][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.239061][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.246975][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.255747][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.264461][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.273101][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.282175][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.289280][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.298504][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.306932][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.320547][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.342657][ T4174] device veth1_vlan entered promiscuous mode [ 64.359415][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.375472][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.392455][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.401207][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.409623][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.418091][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.428108][ T4169] device veth1_vlan entered promiscuous mode [ 64.456415][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.466682][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.488963][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.498057][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.525307][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.544943][ T4174] device veth0_macvtap entered promiscuous mode [ 64.554493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.563185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.572033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.580831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.590323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.599253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.609695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.618445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.627565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.636414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.645023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.652734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.661698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.672538][ T4165] device veth0_vlan entered promiscuous mode [ 64.693044][ T4169] device veth0_macvtap entered promiscuous mode [ 64.704420][ T4174] device veth1_macvtap entered promiscuous mode [ 64.721572][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.730018][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.739026][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.747894][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.757616][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.766572][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.777907][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.786459][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.806102][ T4169] device veth1_macvtap entered promiscuous mode [ 64.818563][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.839282][ T4165] device veth1_vlan entered promiscuous mode [ 64.875617][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.887473][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.901344][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.914958][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.936332][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.946197][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.954802][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.962735][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.972303][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.981289][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.990617][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.000418][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.009345][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.018478][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.027725][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.036447][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.045288][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.059172][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.070725][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.081348][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.099926][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.112519][ T4165] device veth0_macvtap entered promiscuous mode [ 65.126582][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.136177][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.145497][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.154796][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.164778][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.173452][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.182213][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.191579][ T4164] device veth0_vlan entered promiscuous mode [ 65.200185][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.209308][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.218655][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.227401][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245712][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.256862][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.267027][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.276089][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.314838][ T4165] device veth1_macvtap entered promiscuous mode [ 65.322571][ T4164] device veth1_vlan entered promiscuous mode [ 65.382926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.397382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.407289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.416346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.424213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.468591][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.483834][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.507257][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.514790][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.525709][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.535587][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.546498][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.558085][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.574675][ T4164] device veth0_macvtap entered promiscuous mode [ 65.595350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.604101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.612706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.630522][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.644061][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.654298][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.664952][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.676124][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.688682][ T4164] device veth1_macvtap entered promiscuous mode [ 65.705157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.713809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.722586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.734777][ T4165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.744668][ T4165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.753659][ T4165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.762376][ T4165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.790972][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.807356][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.818706][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.828353][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.858278][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.870417][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.881421][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.896242][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.907560][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.918437][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931001][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.938909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.947354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.956709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.965522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.974206][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 65.974622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.980348][ T1110] Bluetooth: hci3: command 0x040f tx timeout [ 65.989104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.001085][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 66.023862][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 66.044646][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.044817][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.053004][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.064618][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.073521][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 66.087263][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.099759][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.111366][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.122206][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.132723][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.148438][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.158403][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.168880][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.180059][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.191622][ T4166] device veth0_vlan entered promiscuous mode [ 66.205834][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.214544][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.222593][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.230911][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.241770][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.250828][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.274496][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283248][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.301075][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.310946][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.330047][ T4166] device veth1_vlan entered promiscuous mode [ 66.401789][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.411486][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.474195][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.483104][ T4244] loop4: detected capacity change from 0 to 512 [ 66.504307][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.532107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.554656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.571986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.575117][ T4244] ======================================================= [ 66.575117][ T4244] WARNING: The mand mount option has been deprecated and [ 66.575117][ T4244] and is ignored by this kernel. Remove the mand [ 66.575117][ T4244] option from the mount to silence this warning. [ 66.575117][ T4244] ======================================================= [ 66.608487][ T4248] loop3: detected capacity change from 0 to 2048 [ 66.638795][ T4166] device veth0_macvtap entered promiscuous mode [ 66.690227][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.703095][ T4166] device veth1_macvtap entered promiscuous mode [ 66.730826][ T4248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.735851][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.753935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.762167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.784746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.828428][ T4244] EXT4-fs (loop4): Test dummy encryption mode enabled [ 66.847104][ T4244] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.5: invalid block [ 66.850581][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.862821][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.878664][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.883847][ T4244] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.5: couldn't read orphan inode 11 (err -117) [ 66.889017][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.910801][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.921001][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.931583][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.938900][ T4244] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 66.943217][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.982954][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.995185][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.996308][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.030196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.074936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.087166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.099844][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.120115][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.145745][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.161444][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.175157][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.191123][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.212871][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.298798][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.307648][ T4244] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 67.315112][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.840623][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.032577][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075533][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.113237][ T4267] loop3: detected capacity change from 0 to 256 [ 68.131416][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.083324][ C0] sched: RT throttling activated [ 69.091993][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.103444][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 69.111413][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 69.117660][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 69.123790][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 69.124608][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.204605][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 69.243847][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.251849][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.265651][ T4267] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 69.292980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 69.371982][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.143658][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.177712][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.211689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.262152][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.294286][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.332893][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.373851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.382770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.391711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 70.400776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.409763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.418749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.427812][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.436807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.445805][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.053604][ T4290] loop0: detected capacity change from 0 to 128 [ 71.274272][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280896][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.318960][ T4292] loop1: detected capacity change from 0 to 1024 [ 71.807268][ T4300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16'. [ 71.869229][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.907723][ T4290] x_tables: ip_tables: ah match: only valid for protocol 51 [ 71.984049][ T4300] No such timeout policy "syz0" [ 73.321256][ T4310] loop1: detected capacity change from 0 to 512 [ 73.410959][ T4310] EXT4-fs (loop1): Ignoring removed oldalloc option [ 73.434740][ T4312] loop0: detected capacity change from 0 to 128 [ 73.486803][ T4310] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000009,oldalloc,norecovery,init_itable=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 73.533768][ T4312] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.563794][ T4310] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.603761][ T4318] device wg2 entered promiscuous mode [ 74.204255][ T4331] loop4: detected capacity change from 0 to 1024 [ 74.308112][ T4331] EXT4-fs (loop4): Ignoring removed oldalloc option [ 74.364463][ T4331] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 74.822642][ T26] audit: type=1326 audit(1732177846.959:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 74.894394][ T26] audit: type=1326 audit(1732177847.019:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.161820][ T26] audit: type=1326 audit(1732177847.019:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.294286][ T26] audit: type=1326 audit(1732177847.019:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.396994][ T4353] loop0: detected capacity change from 0 to 1024 [ 75.448214][ T26] audit: type=1326 audit(1732177847.019:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.620555][ T26] audit: type=1326 audit(1732177847.019:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.703770][ T4354] ipt_CLUSTERIP: Please specify destination IP [ 75.713027][ T26] audit: type=1326 audit(1732177847.019:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.750378][ T4353] EXT4-fs (loop0): Test dummy encryption mode enabled [ 75.774028][ T4353] EXT4-fs (loop0): Ignoring removed orlov option [ 75.789048][ T26] audit: type=1326 audit(1732177847.019:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.817298][ T26] audit: type=1326 audit(1732177847.019:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.840193][ T26] audit: type=1326 audit(1732177847.029:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e6f20819 code=0x7ffc0000 [ 75.881038][ T4353] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 76.160429][ T4362] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 77.012388][ T4369] netlink: 'syz.0.33': attribute type 3 has an invalid length. [ 78.052343][ T4375] process 'syz.3.34' launched './file0' with NULL argv: empty string added [ 78.545997][ T4378] loop2: detected capacity change from 0 to 2048 [ 78.941740][ T4392] loop3: detected capacity change from 0 to 2048 [ 79.061635][ T4392] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.339466][ T4378] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.483737][ T4378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.624314][ T4378] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 79.719607][ T4378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.719607][ T4378] [ 79.808980][ T4378] EXT4-fs (loop2): Total free blocks count 0 [ 79.823510][ T4378] EXT4-fs (loop2): Free/Dirty block details [ 79.834413][ T4378] EXT4-fs (loop2): free_blocks=2415919104 [ 79.863508][ T4378] EXT4-fs (loop2): dirty_blocks=48 [ 79.868747][ T4378] EXT4-fs (loop2): Block reservation details [ 79.869318][ T4207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.883600][ T4378] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 80.193537][ T4404] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 80.489985][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=2048 fake=0 [ 81.019533][ T4207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.031841][ T4207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.130878][ T4411] loop3: detected capacity change from 0 to 1024 [ 81.141370][ T4412] netlink: 'syz.4.46': attribute type 3 has an invalid length. [ 81.247008][ T4411] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.268937][ T4411] EXT4-fs (loop3): Ignoring removed orlov option [ 81.346764][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 81.501078][ T1334] cfg80211: failed to load regulatory.db [ 81.512013][ T4207] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.567703][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.633033][ T4417] loop2: detected capacity change from 0 to 1024 [ 81.642426][ T4207] usb 1-1: SerialNumber: syz [ 81.775213][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,dioread_lock,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 81.828206][ T4207] usb 1-1: can't set config #1, error -71 [ 82.107262][ T4207] usb 1-1: USB disconnect, device number 2 [ 82.171675][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 82.171691][ T26] audit: type=1326 audit(1732177854.309:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.200491][ T26] audit: type=1326 audit(1732177854.319:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.231069][ T26] audit: type=1326 audit(1732177854.319:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.260755][ T26] audit: type=1326 audit(1732177854.319:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.481058][ T26] audit: type=1326 audit(1732177854.319:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.588608][ T26] audit: type=1326 audit(1732177854.319:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.613774][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.705207][ T26] audit: type=1326 audit(1732177854.319:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.789145][ T4439] ipt_CLUSTERIP: Please specify destination IP [ 82.808316][ T26] audit: type=1326 audit(1732177854.319:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.879597][ T26] audit: type=1326 audit(1732177854.319:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 82.942597][ T26] audit: type=1326 audit(1732177854.319:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ab460819 code=0x7ffc0000 [ 83.451100][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 83.973926][ T23] usb 3-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 84.000329][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.026716][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 84.044502][ T4446] loop4: detected capacity change from 0 to 1024 [ 84.054302][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.066785][ T23] usb 3-1: config 0 descriptor?? [ 84.087175][ T4446] EXT4-fs (loop4): Ignoring removed oldalloc option [ 84.190871][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 84.433798][ T23] usb 3-1: string descriptor 0 read error: -71 [ 84.440444][ T4207] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.467705][ T23] usb 3-1: USB disconnect, device number 2 [ 84.537893][ T4453] loop4: detected capacity change from 0 to 1024 [ 84.613992][ T4453] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.632266][ T4453] EXT4-fs (loop4): Ignoring removed orlov option [ 84.706344][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 84.865154][ T4455] netlink: 'syz.2.59': attribute type 3 has an invalid length. [ 85.363476][ T4207] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.403695][ T4207] usb 2-1: not running at top speed; connect to a high speed hub [ 85.441176][ T4466] netlink: 'syz.0.60': attribute type 3 has an invalid length. [ 85.523814][ T4207] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 1032, setting to 64 [ 85.557899][ T4207] usb 2-1: config 1 interface 0 has no altsetting 0 [ 85.773825][ T4207] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.799085][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.837834][ T4207] usb 2-1: Product: syz [ 85.847968][ T4207] usb 2-1: Manufacturer: syz [ 85.862972][ T4207] usb 2-1: SerialNumber: syz [ 86.074996][ T4444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.464265][ T4207] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 86.669401][ T4207] usb 2-1: USB disconnect, device number 2 [ 87.234989][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 87.235005][ T26] audit: type=1326 audit(1732177859.379:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.404714][ T26] audit: type=1326 audit(1732177859.379:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.503540][ T26] audit: type=1326 audit(1732177859.379:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.567143][ T26] audit: type=1326 audit(1732177859.379:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.638207][ T26] audit: type=1326 audit(1732177859.379:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.802941][ T26] audit: type=1326 audit(1732177859.379:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 87.807320][ T4499] ipt_CLUSTERIP: Please specify destination IP [ 87.990889][ T26] audit: type=1326 audit(1732177859.379:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 88.022570][ T4498] netlink: 'syz.4.71': attribute type 3 has an invalid length. [ 88.123387][ T26] audit: type=1326 audit(1732177859.379:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 88.200254][ T26] audit: type=1326 audit(1732177859.379:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 88.379321][ T4505] netlink: 'syz.4.73': attribute type 3 has an invalid length. [ 88.433444][ T26] audit: type=1326 audit(1732177859.379:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7d9f819 code=0x7ffc0000 [ 90.459952][ T4525] loop2: detected capacity change from 0 to 16 [ 90.539039][ T4525] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.738364][ T4525] raw_sendmsg: syz.2.78 forgot to set AF_INET. Fix it! [ 90.961502][ T4532] loop0: detected capacity change from 0 to 1024 [ 90.976045][ T4535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.047171][ T4532] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.063614][ T4532] EXT4-fs (loop0): Ignoring removed orlov option [ 91.221312][ T4537] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 91.249106][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 92.165041][ T4543] netlink: 'syz.3.84': attribute type 3 has an invalid length. [ 92.511968][ T4562] x_tables: ip_tables: ah match: only valid for protocol 51 [ 92.664677][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 92.664691][ T26] audit: type=1326 audit(1732177864.809:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 92.787994][ T26] audit: type=1326 audit(1732177864.829:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 92.881782][ T26] audit: type=1326 audit(1732177864.839:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.093977][ T4566] ipt_CLUSTERIP: Please specify destination IP [ 93.118370][ T26] audit: type=1326 audit(1732177864.839:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.167927][ T4575] netlink: 'syz.1.95': attribute type 3 has an invalid length. [ 93.218916][ T26] audit: type=1326 audit(1732177864.839:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.280620][ T26] audit: type=1326 audit(1732177864.839:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.591041][ T26] audit: type=1326 audit(1732177864.839:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.716152][ T26] audit: type=1326 audit(1732177864.839:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.833238][ T26] audit: type=1326 audit(1732177864.839:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 93.856108][ T26] audit: type=1326 audit(1732177864.839:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29db5a0819 code=0x7ffc0000 [ 94.260726][ T4589] loop4: detected capacity change from 0 to 1024 [ 94.331960][ T4591] loop2: detected capacity change from 0 to 1024 [ 94.342422][ T4589] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.361337][ T4589] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.373476][ T4589] EXT4-fs (loop4): Ignoring removed orlov option [ 94.479500][ T4589] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 94.517019][ T4591] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.549337][ T4591] EXT4-fs (loop2): Ignoring removed orlov option [ 94.565027][ T4593] netlink: 'syz.3.100': attribute type 3 has an invalid length. [ 94.679498][ T4591] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 94.851882][ T4598] netlink: 550 bytes leftover after parsing attributes in process `syz.3.101'. [ 95.546890][ T4589] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 96.179061][ T4621] loop3: detected capacity change from 0 to 512 [ 96.225551][ T4621] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 96.271955][ T4621] EXT4-fs (loop3): invalid journal inode [ 96.278034][ T4621] EXT4-fs (loop3): can't get journal size [ 96.302592][ T4623] loop0: detected capacity change from 0 to 512 [ 96.348770][ T4621] EXT4-fs (loop3): 1 truncate cleaned up [ 96.492526][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 96.517369][ T4623] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 96.555928][ T4623] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 96.807091][ T4623] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 96.857848][ T4630] ipt_CLUSTERIP: Please specify destination IP [ 96.864201][ T4631] EXT4-fs (loop3): shut down requested (2) [ 96.880283][ T4623] EXT4-fs error (device loop0): __ext4_new_inode:1351: inode #19: comm syz.0.106: mark_inode_dirty error [ 96.969847][ T4623] EXT4-fs error (device loop0) in __ext4_new_inode:1353: Corrupt filesystem [ 96.979155][ T4623] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 96.989064][ T4623] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #19: comm syz.0.106: mark_inode_dirty error [ 97.011595][ T4623] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 97.115305][ T4164] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 6: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=4096 fake=1 [ 97.138610][ T4164] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 98.477980][ T4164] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 98.806103][ T4647] netlink: 'syz.3.111': attribute type 3 has an invalid length. [ 100.307823][ T4665] netlink: 'syz.3.116': attribute type 27 has an invalid length. [ 101.084279][ T4671] loop4: detected capacity change from 0 to 1024 [ 101.227286][ T4671] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.244620][ T4671] EXT4-fs (loop4): Ignoring removed orlov option [ 101.310734][ T4671] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 101.768273][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.776850][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.017141][ T26] kauditd_printk_skb: 139 callbacks suppressed [ 102.017157][ T26] audit: type=1326 audit(1732177874.159:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.287581][ T26] audit: type=1326 audit(1732177874.219:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.332789][ T26] audit: type=1326 audit(1732177874.219:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.355633][ T4681] ipt_CLUSTERIP: Please specify destination IP [ 102.375622][ T26] audit: type=1326 audit(1732177874.219:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.431540][ T26] audit: type=1326 audit(1732177874.219:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.456293][ T26] audit: type=1326 audit(1732177874.219:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.480061][ T26] audit: type=1326 audit(1732177874.219:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.519810][ T26] audit: type=1326 audit(1732177874.219:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.563427][ T26] audit: type=1326 audit(1732177874.219:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 102.592993][ T26] audit: type=1326 audit(1732177874.219:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350129819 code=0x7ffc0000 [ 104.058141][ T4697] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 104.999587][ T4665] device wg2 left promiscuous mode [ 105.099672][ T4709] loop2: detected capacity change from 0 to 512 [ 105.158500][ T4711] loop1: detected capacity change from 0 to 512 [ 105.187226][ T4709] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.225059][ T4709] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.239401][ T4709] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.256171][ T4709] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 105.263040][ T4709] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.129: couldn't read orphan inode 26 (err -116) [ 105.277399][ T4709] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.291014][ T4711] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.297004][ T4709] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 105.300206][ T4711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002] [ 105.364153][ T4711] System zones: 1-12 [ 105.369149][ T4711] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.387133][ T4711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.131: bg 0: block 328: padding at end of block bitmap is not set [ 105.408946][ T4709] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.412642][ T4711] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 105.434338][ T4711] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.131: invalid indirect mapped block 65280 (level 0) [ 105.464259][ T4711] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.131: attempt to clear invalid blocks 33619980 len 1 [ 105.479621][ T4711] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.131: invalid indirect mapped block 1819239214 (level 0) [ 105.513371][ T4711] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.131: invalid indirect mapped block 1819239214 (level 1) [ 105.553127][ T4711] EXT4-fs (loop1): 1 orphan inode deleted [ 105.568768][ T4711] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noquota,journal_ioprio=0x0000000000000000,test_dummy_encryption,mb_optimize_scan=0x0000000000000000,init_itable=0x0000000000000000,,errors=continue. Quota mode: none. [ 105.757202][ T4719] loop2: detected capacity change from 0 to 512 [ 105.772132][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.846796][ T4719] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 105.881147][ T4719] EXT4-fs (loop2): invalid journal inode [ 105.893480][ T4719] EXT4-fs (loop2): can't get journal size [ 105.903139][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.952731][ T4719] EXT4-fs (loop2): 1 truncate cleaned up [ 105.960034][ T4719] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 106.688518][ T4729] loop4: detected capacity change from 0 to 512 [ 106.723013][ T4665] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.732228][ T4665] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.741199][ T4665] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.750129][ T4665] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.796229][ T4729] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,sysvgroups,noblock_validity,user_xattr,errors=remount-ro,barrier=0x0000000000000a0f,. Quota mode: writeback. [ 106.823596][ T4729] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.148768][ T4275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.282785][ T4737] netlink: 'syz.1.137': attribute type 3 has an invalid length. [ 107.375450][ T4275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.418407][ T4742] loop1: detected capacity change from 0 to 256 [ 107.582090][ T4275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.614603][ T4742] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 108.552589][ T4275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.573939][ T4742] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 108.863557][ T4211] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.913722][ T4211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.940127][ T4211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.971996][ T4211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.989973][ T4746] chnl_net:caif_netlink_parms(): no params data found [ 110.042411][ T4211] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.060245][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.090978][ T4211] usb 5-1: config 0 descriptor?? [ 110.225560][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.247352][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.265389][ T4746] device bridge_slave_0 entered promiscuous mode [ 110.301624][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.314512][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.325665][ T4746] device bridge_slave_1 entered promiscuous mode [ 110.472236][ T4746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.532025][ T4746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.541720][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 110.685277][ T4778] netlink: 'syz.2.147': attribute type 27 has an invalid length. [ 110.905990][ T4211] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 111.305643][ T4211] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 111.601208][ T1334] usb 5-1: USB disconnect, device number 2 [ 112.590531][ T4794] loop3: detected capacity change from 0 to 512 [ 113.722808][ T4794] EXT4-fs (loop3): Ignoring removed oldalloc option [ 113.960978][ T4794] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000009,oldalloc,norecovery,init_itable=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 113.987384][ T4794] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.887633][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.895244][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.913119][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 115.447731][ T4816] loop1: detected capacity change from 0 to 256 [ 116.457821][ T4816] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.120083][ T4823] netlink: 'syz.3.161': attribute type 3 has an invalid length. [ 117.235840][ T4207] Bluetooth: hci0: command 0x040f tx timeout [ 119.253986][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 119.332247][ T4835] loop4: detected capacity change from 0 to 512 [ 119.722430][ T4835] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.159: corrupted xattr block 95 [ 120.061920][ T4835] EXT4-fs (loop4): Remounting filesystem read-only [ 120.103221][ T4835] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 120.118439][ T4835] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.159: bg 0: block 7: invalid block bitmap [ 120.249094][ T4835] EXT4-fs (loop4): Remounting filesystem read-only [ 120.299057][ T4835] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 120.483806][ T4835] EXT4-fs (loop4): Remounting filesystem read-only [ 120.503056][ T4835] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.159: corrupted xattr block 95 [ 120.635036][ T4835] EXT4-fs (loop4): Remounting filesystem read-only [ 120.641690][ T4835] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 120.669702][ T4835] EXT4-fs (loop4): 1 orphan inode deleted [ 120.677030][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: none. [ 121.809681][ T4857] loop3: detected capacity change from 0 to 2048 [ 121.930152][ T4857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.317756][ T4778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.500977][ T4778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.917101][ T4863] netlink: 80 bytes leftover after parsing attributes in process `syz.4.171'. [ 123.459321][ T4870] debugfs: File 'dropped' in directory 'loop6' already present! [ 123.492378][ T4870] debugfs: File 'msg' in directory 'loop6' already present! [ 123.522693][ T4870] debugfs: File 'trace0' in directory 'loop6' already present! [ 123.991779][ T4875] netlink: 'syz.3.173': attribute type 3 has an invalid length. [ 124.290532][ T4778] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.300544][ T4778] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.309498][ T4778] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.318521][ T4778] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.708823][ T4746] team0: Port device team_slave_0 added [ 124.744523][ T4746] team0: Port device team_slave_1 added [ 125.029449][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.067376][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.812644][ T4746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.856261][ T4887] loop1: detected capacity change from 0 to 512 [ 126.043068][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.056459][ T4887] EXT4-fs (loop1): Ignoring removed oldalloc option [ 126.056505][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.230895][ T4746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.890503][ T4893] loop2: detected capacity change from 0 to 512 [ 126.901671][ T4746] device hsr_slave_0 entered promiscuous mode [ 126.915384][ T4746] device hsr_slave_1 entered promiscuous mode [ 126.925808][ T4746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.934293][ T4746] Cannot create hsr debugfs directory [ 126.961038][ T4893] EXT4-fs (loop2): Ignoring removed oldalloc option [ 126.999627][ T4887] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000009,oldalloc,norecovery,init_itable=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 127.018282][ T4903] debugfs: File 'trace0' in directory 'loop6' already present! [ 127.028239][ T4275] device hsr_slave_0 left promiscuous mode [ 127.039731][ T4275] device hsr_slave_1 left promiscuous mode [ 127.049366][ T4901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.181'. [ 127.058984][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.065086][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000009,oldalloc,norecovery,init_itable=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 127.071614][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.094153][ T4887] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.097955][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.104985][ T4893] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.119915][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.139178][ T4275] device bridge_slave_1 left promiscuous mode [ 127.148461][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.190118][ T4275] device bridge_slave_0 left promiscuous mode [ 127.201935][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.302466][ T4275] device veth1_macvtap left promiscuous mode [ 127.330137][ T4275] device veth0_macvtap left promiscuous mode [ 127.340457][ T4275] device veth1_vlan left promiscuous mode [ 127.351568][ T4275] device veth0_vlan left promiscuous mode [ 128.736083][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 128.764160][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 128.815260][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.844550][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.991199][ T4275] bond0 (unregistering): Released all slaves [ 129.260898][ T4914] netlink: 'syz.4.184': attribute type 27 has an invalid length. [ 129.794530][ T4932] netlink: 'syz.1.189': attribute type 3 has an invalid length. [ 130.284793][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.292308][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.923494][ T4948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.193'. [ 132.234507][ T4953] debugfs: File 'trace0' in directory 'loop6' already present! [ 132.714200][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.721046][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798714][ T4958] loop1: detected capacity change from 0 to 512 [ 132.867437][ T4958] EXT4-fs (loop1): Ignoring removed oldalloc option [ 132.908411][ T4958] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,journal_dev=0x0000000000000009,oldalloc,norecovery,init_itable=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 132.942677][ T4958] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.744686][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.885920][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.937439][ T4966] loop1: detected capacity change from 0 to 1024 [ 134.643564][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.793814][ T4914] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.802708][ T4914] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.811725][ T4914] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.820821][ T4914] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.083170][ T4180] Bluetooth: hci3: Unknown advertising packet type: 0x3270 [ 135.083701][ T4180] ================================================================== [ 135.091214][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.099304][ T4180] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 135.099365][ T4180] Read of size 1 at addr ffff8880551dbc0a by task kworker/u5:7/4180 [ 135.099383][ T4180] [ 135.099390][ T4180] CPU: 1 PID: 4180 Comm: kworker/u5:7 Not tainted 5.15.173-syzkaller #0 [ 135.099410][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.099424][ T4180] Workqueue: hci3 hci_rx_work [ 135.099457][ T4180] Call Trace: [ 135.099467][ T4180] [ 135.157655][ T4180] dump_stack_lvl+0x1e3/0x2d0 [ 135.162531][ T4180] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 135.168171][ T4180] ? _printk+0xd1/0x120 [ 135.172342][ T4180] ? __wake_up_klogd+0xcc/0x100 [ 135.177196][ T4180] ? panic+0x860/0x860 [ 135.181265][ T4180] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 135.186731][ T4180] print_address_description+0x63/0x3b0 [ 135.192282][ T4180] ? hci_le_meta_evt+0x11d6/0x3f50 [ 135.197395][ T4180] kasan_report+0x16b/0x1c0 [ 135.201896][ T4180] ? hci_le_meta_evt+0x11d6/0x3f50 [ 135.207010][ T4180] hci_le_meta_evt+0x11d6/0x3f50 [ 135.211950][ T4180] ? __lock_acquire+0x1ff0/0x1ff0 [ 135.216984][ T4180] ? hci_remote_host_features_evt+0x280/0x280 [ 135.223050][ T4180] ? __mutex_unlock_slowpath+0x218/0x750 [ 135.228680][ T4180] ? hci_event_packet+0x3b4/0x1550 [ 135.233797][ T4180] ? mutex_unlock+0x10/0x10 [ 135.238301][ T4180] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 135.244285][ T4180] ? print_irqtrace_events+0x210/0x210 [ 135.249745][ T4180] hci_event_packet+0xc41/0x1550 [ 135.254689][ T4180] ? rcu_lock_release+0x20/0x20 [ 135.259552][ T4180] ? hci_send_to_monitor+0x99/0x4d0 [ 135.264751][ T4180] hci_rx_work+0x232/0x990 [ 135.269181][ T4180] process_one_work+0x8a1/0x10c0 [ 135.274134][ T4180] ? worker_detach_from_pool+0x260/0x260 [ 135.279769][ T4180] ? _raw_spin_lock_irqsave+0x120/0x120 [ 135.285315][ T4180] ? kthread_data+0x4e/0xc0 [ 135.289816][ T4180] ? wq_worker_running+0x97/0x170 [ 135.294858][ T4180] worker_thread+0xaca/0x1280 [ 135.299534][ T4180] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 135.305481][ T4180] kthread+0x3f6/0x4f0 [ 135.309554][ T4180] ? rcu_lock_release+0x20/0x20 [ 135.314401][ T4180] ? kthread_blkcg+0xd0/0xd0 [ 135.318986][ T4180] ret_from_fork+0x1f/0x30 [ 135.323410][ T4180] [ 135.326422][ T4180] [ 135.328739][ T4180] Allocated by task 4971: [ 135.333049][ T4180] ____kasan_kmalloc+0xba/0xf0 [ 135.337803][ T4180] __kmalloc_node_track_caller+0x195/0x390 [ 135.343605][ T4180] __alloc_skb+0x12c/0x590 [ 135.348016][ T4180] vhci_write+0xbc/0x430 [ 135.352260][ T4180] vfs_write+0xacd/0xe50 [ 135.356499][ T4180] ksys_write+0x1a2/0x2c0 [ 135.360828][ T4180] do_syscall_64+0x3b/0xb0 [ 135.365239][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.371131][ T4180] [ 135.373448][ T4180] The buggy address belongs to the object at ffff8880551db800 [ 135.373448][ T4180] which belongs to the cache kmalloc-1k of size 1024 [ 135.387501][ T4180] The buggy address is located 10 bytes to the right of [ 135.387501][ T4180] 1024-byte region [ffff8880551db800, ffff8880551dbc00) [ 135.401290][ T4180] The buggy address belongs to the page: [ 135.406948][ T4180] page:ffffea0001547600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x551d8 [ 135.417096][ T4180] head:ffffea0001547600 order:3 compound_mapcount:0 compound_pincount:0 [ 135.425410][ T4180] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.433399][ T4180] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017041dc0 [ 135.441976][ T4180] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 135.450545][ T4180] page dumped because: kasan: bad access detected [ 135.456975][ T4180] page_owner tracks the page as allocated [ 135.462677][ T4180] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4275, ts 93523791199, free_ts 91231876279 [ 135.481074][ T4180] get_page_from_freelist+0x3b78/0x3d40 [ 135.486621][ T4180] __alloc_pages+0x272/0x700 [ 135.491202][ T4180] new_slab+0xbb/0x4b0 [ 135.495273][ T4180] ___slab_alloc+0x6f6/0xe10 [ 135.499859][ T4180] __kmalloc+0x1c9/0x300 [ 135.504099][ T4180] ieee802_11_parse_elems_crc+0xb3/0x1130 [ 135.509815][ T4180] ieee80211_bss_info_update+0x86d/0xc80 [ 135.515444][ T4180] ieee80211_ibss_rx_queued_mgmt+0x175e/0x2af0 [ 135.521600][ T4180] ieee80211_iface_work+0x78f/0xcc0 [ 135.526820][ T4180] process_one_work+0x8a1/0x10c0 [ 135.531754][ T4180] worker_thread+0xaca/0x1280 [ 135.536425][ T4180] kthread+0x3f6/0x4f0 [ 135.540491][ T4180] ret_from_fork+0x1f/0x30 [ 135.544902][ T4180] page last free stack trace: [ 135.549563][ T4180] __free_pages_ok+0x9ef/0xaa0 [ 135.554320][ T4180] free_nonslab_page+0xe4/0x150 [ 135.559166][ T4180] kfree+0x1cf/0x270 [ 135.563056][ T4180] iter_file_splice_write+0xd1f/0xfa0 [ 135.568430][ T4180] do_splice+0xfe6/0x1790 [ 135.572767][ T4180] __se_sys_splice+0x340/0x420 [ 135.577545][ T4180] do_syscall_64+0x3b/0xb0 [ 135.581965][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.587856][ T4180] [ 135.590172][ T4180] Memory state around the buggy address: [ 135.595790][ T4180] ffff8880551dbb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.603867][ T4180] ffff8880551dbb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.611938][ T4180] >ffff8880551dbc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.619999][ T4180] ^ [ 135.624328][ T4180] ffff8880551dbc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.632479][ T4180] ffff8880551dbd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.640539][ T4180] ================================================================== [ 135.648593][ T4180] Disabling lock debugging due to kernel taint [ 135.657225][ T4180] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.664440][ T4180] CPU: 1 PID: 4180 Comm: kworker/u5:7 Tainted: G B 5.15.173-syzkaller #0 [ 135.674303][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.684383][ T4180] Workqueue: hci3 hci_rx_work [ 135.689078][ T4180] Call Trace: [ 135.692357][ T4180] [ 135.695290][ T4180] dump_stack_lvl+0x1e3/0x2d0 [ 135.699984][ T4180] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 135.705633][ T4180] ? panic+0x860/0x860 [ 135.709716][ T4180] ? rcu_is_watching+0x11/0xa0 [ 135.714500][ T4180] ? preempt_schedule_common+0xa6/0xd0 [ 135.720024][ T4180] panic+0x318/0x860 [ 135.723924][ T4180] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.730089][ T4180] ? check_panic_on_warn+0x1d/0xa0 [ 135.735195][ T4180] ? fb_is_primary_device+0xd0/0xd0 [ 135.740396][ T4180] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 135.746608][ T4180] ? _raw_spin_unlock+0x40/0x40 [ 135.751474][ T4180] check_panic_on_warn+0x7e/0xa0 [ 135.756432][ T4180] ? hci_le_meta_evt+0x11d6/0x3f50 [ 135.761566][ T4180] end_report+0x6d/0xf0 [ 135.765723][ T4180] kasan_report+0x18e/0x1c0 [ 135.770242][ T4180] ? hci_le_meta_evt+0x11d6/0x3f50 [ 135.775354][ T4180] hci_le_meta_evt+0x11d6/0x3f50 [ 135.780292][ T4180] ? __lock_acquire+0x1ff0/0x1ff0 [ 135.785316][ T4180] ? hci_remote_host_features_evt+0x280/0x280 [ 135.791382][ T4180] ? __mutex_unlock_slowpath+0x218/0x750 [ 135.797008][ T4180] ? hci_event_packet+0x3b4/0x1550 [ 135.802141][ T4180] ? mutex_unlock+0x10/0x10 [ 135.806652][ T4180] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 135.812628][ T4180] ? print_irqtrace_events+0x210/0x210 [ 135.818080][ T4180] hci_event_packet+0xc41/0x1550 [ 135.823030][ T4180] ? rcu_lock_release+0x20/0x20 [ 135.827879][ T4180] ? hci_send_to_monitor+0x99/0x4d0 [ 135.833077][ T4180] hci_rx_work+0x232/0x990 [ 135.837520][ T4180] process_one_work+0x8a1/0x10c0 [ 135.842459][ T4180] ? worker_detach_from_pool+0x260/0x260 [ 135.848112][ T4180] ? _raw_spin_lock_irqsave+0x120/0x120 [ 135.853651][ T4180] ? kthread_data+0x4e/0xc0 [ 135.858149][ T4180] ? wq_worker_running+0x97/0x170 [ 135.863172][ T4180] worker_thread+0xaca/0x1280 [ 135.867870][ T4180] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 135.873774][ T4180] kthread+0x3f6/0x4f0 [ 135.877856][ T4180] ? rcu_lock_release+0x20/0x20 [ 135.882706][ T4180] ? kthread_blkcg+0xd0/0xd0 [ 135.887302][ T4180] ret_from_fork+0x1f/0x30 [ 135.891730][ T4180] [ 135.895019][ T4180] Kernel Offset: disabled [ 135.899343][ T4180] Rebooting in 86400 seconds..