last executing test programs: 1m32.552766776s ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}]}, 0xa8) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1m32.468830295s ago: executing program 3 (id=61): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 1m32.340202355s ago: executing program 3 (id=63): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@test_dummy_encryption}, {@init_itable_val}, {@nolazytime}, {@sysvgroups}, {@prjquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x48}, {0x2d}, {0x6}]}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x8, &(0x7f00000003c0)=[{0x101, 0x6, 0x1}, {0x7, 0x6, 0x8, 0x6}, {0x7, 0x8, 0xb, 0x2400}, {0x5, 0x8, 0x0, 0x7ff}, {0x3, 0x2, 0x5, 0x10001}, {0x3, 0xfc, 0x4, 0xd}, {0x1, 0x4, 0x7, 0x5}, {0x3, 0xf5, 0x3, 0x9b2e}]}) r6 = socket(0xa, 0x2, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x6000, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x11800, &(0x7f0000000300)={[{@nodioread_nolock}, {@orlov}]}, 0x1, 0x4a6, &(0x7f0000001040)="$eJzs3M9vFFUcAPDv7LYFpNCKiIKgFTQSf7S0oHLwoEYTD5qY6AGPtS2ILNTQmghptBiDR0Pi3Xg08S/w5sWoB2PiVROPhoRoY0LxVDM7M+2y3S20tN3S/XyS7b63M7PvfefN230zr7MBtK2+9E8S0R0Rv0dET5a9eYW+7Gl2ZmrkxszUSBJzc2/9nVTXuz4zNVKsWmy3Pc8cLkWUPkvixWRxuRMXLp4ZrlTGzuf5gcmzHwxMXLj4zOmzw6fGTo2dGzp+/NjRweefG3p2VeJM47q+7+Px/Xtfe+fKGyMnrrz707dptfYcyJbXxnFLNxoE1EBfutf+mauqX/b4Mup+N9hRk046WlgRlqUcEWlzdVb7f0+UY6HxeuLVT1taOWBNpd9NW5ovnp4DNrEkWl0DoDWKL/r0/Ld4rNPQY0O49lJEV56enZkamZ2PvyNK+euda1h+X0ScmP7vq/QRy70OAQCwAtWxzdONxn+l2FN9zuY6duZzKL0RcW9E7IqI+yJid0TcH1Fd94GIeDDbeK7nNsvvq8svHv+Urjas8ypJx38v1Iz9Zmviz596y3luRzX+zuTk6crYkXyfHI7OLWl+cIkyvn/lty+aLasd/6WPtPxiLJhX4GpH3QW60eHJ4dXaCdcuRezraBR/Mj8TkB4BeyNi3/LeemeROP3kN/ubrXTr+JewCvNMc19HPJG1/3TUxV9Ilp6fHNgalbEjA8VRsdjPv15+s1n5dxT/Krh28KEssdD+dWv0/Jtk87WdUamMnZ9YfhmX//i86TnNSo//ruTt6pz1L+9lr300PDl5fjCiK3m9mi/O6aqvDy1sW+SL9dPj//Chxv1/V75NGn+6l9KD+EBEPBwRj+R1fzQiDkbEoSXi//Hlx95fIv4kkmhd+1+KGG34+Td//PcmtfP1K0iUz/zwXbMZ8+btXzR62v7HYrr6WZupfv7dwu1W8M73IAAAAGx8pYjojqTUn6X7uqMc/f3Z//DvjntKlfGJyadOjn94bjS7R6A3OkvFla6emuuhg8l0/o5Zfii/VlwsP5pfN/6yvK2a7x8Zr4y2OHZod9tv7v/RHaVS2v9Tf5VbXTtgzblfC9pXff8vtagewPq7ne9/5wKwOd3c/7emf7a1qi7A+nL+D+2rUf//pC5v/A+b0+L+/2eDn6wDNiPjf2hf+j+0L/0f2tKd3Ne/8kRxs8DK32drszv8i+uUzTbviohWhLzmieIXL9ayrG01uy5KLQ95IyS2rOkOn0+kPWZ9A1z4DRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC72f8BAAD//6O/37E=") r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x4, 0x9, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x60}}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 1m29.994074008s ago: executing program 3 (id=69): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r2, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)=@can_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = eventfd(0x0) read$eventfd(r8, &(0x7f0000000000), 0x8) write$eventfd(r8, &(0x7f0000000080)=0x1004000000, 0x8) 1m25.881713706s ago: executing program 3 (id=76): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m22.201790106s ago: executing program 3 (id=85): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080003"], 0x48}}, 0x0) 1m6.724622421s ago: executing program 32 (id=85): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080003"], 0x48}}, 0x0) 15.958433126s ago: executing program 1 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14.180678751s ago: executing program 1 (id=230): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x50) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sigaltstack(&(0x7f0000000080)={0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x124}}, 0x0) 13.7736108s ago: executing program 5 (id=235): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) dup(0xffffffffffffffff) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000080)={0x1}, 0x8, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)=@sack_info={r7}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000680), 0xfe, 0x25f, &(0x7f00000007c0)="$eJzs3T+IHFUcB/DvzO4YL1kkaiOIf0BE9OCInWATG4WAhCAiqBARsVESISbY5cTCxkJrlVSCBLEzWkqaYKMINkZNcTaCHhYeFoqs7M6dnHfrrXd7u3O5+XxgbmZu5s3vDfu+b7eZ3QCtdTjJ0SSdJPNJqiTF+hPurpfDq7sX5q6cTPr9J34thufV+7W1doeSLCZ5KMnlsshL3eTcpWeWfr/62H1vna3u/eDS03MzvclVy0vXHl95//ibnxx78NxX3/x8vMjR9P51X7uvGPG/bpHcMo1ie0TRbboH/B8nXvv4u0Hub01yzzD/VcrUL97bZ264XOWB9/6r7Tu/fH37LPsK7L5+vxq8By72d6LaUStgjyiT9FKUC0nq7bJcWKg/w3/fOVi+fPrMq/Mvnj576oWmZypgt/TybR797MCnhzbk/6dOnX9g/+ol1548cfGHwfZKp+neADNxR70a5H/+ufP3Z5v5/3Ba/QJmZqf5B65/8g/tJf/QXvIP7SX/0F7yD/tYtfVh+Yf2kn9oL/mH9lqffwCgXfoHmn4CGWhK0/MPAAAAAAAAAAAAAAAAAACw2YW5KyfXllnV/OLdZPmRJN1R9TvD3yNObhz+PfhbMTjtH0XdbCLP3jXhBSb00bSfvv7rjS0P3/TjlOuP8eWdzdY/fypZfD3JkW538/grBuNvoiF285jj1fOTXH37ig37Dz812/ob/Xmx2frHriafD+afI6PmnzK3Ddej55/e+K9YHuuVPya8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPzdwAAAP//z0NueQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x0, 0x0) fanotify_mark(r9, 0x1, 0x8000000, r8, &(0x7f0000000100)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 11.714693864s ago: executing program 2 (id=237): epoll_create(0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc901, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x400077, 0x6b4380) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, 0x0) syz_open_dev$loop(&(0x7f0000001580), 0x8, 0x8080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fb00) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) 10.65983626s ago: executing program 5 (id=238): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) 10.60470339s ago: executing program 2 (id=239): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 10.57498545s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.415018737s ago: executing program 0 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001a40)={r0, 0x2000000, 0x2e, 0x0, &(0x7f0000000900)="ffdf1fc42f5a733b805cdb3e60464ae80ec756434150a4c87949fad403ad91776ff2cc4f87c1e117d88e554c27d6", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.334694967s ago: executing program 2 (id=243): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@default, @default, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) 9.224764036s ago: executing program 0 (id=244): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = inotify_add_watch(r1, 0x0, 0x400) inotify_rm_watch(0xffffffffffffffff, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x16}]}) 9.120996776s ago: executing program 2 (id=246): r0 = syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file2/file0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioperm(0x0, 0x5, 0x4000000000000020) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0xa, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) close_range(r1, r5, 0x0) truncate(&(0x7f0000000040)='./file2\x00', 0x81c01) 7.969277133s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x20000000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r9, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090585"], 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2}, 0x18) 6.796739429s ago: executing program 4 (id=251): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000c80)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@usrquota}, {@grpjquota}, {@i_version}, {@errors_continue}, {@journal_async_commit}, {@resgid}, {@resuid, 0x32}, {@data_ordered}, {@nobarrier}]}, 0x1a, 0x4f0, &(0x7f0000000f40)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x10, 0xfffff000}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.651056099s ago: executing program 1 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.363205108s ago: executing program 5 (id=253): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 5.621884826s ago: executing program 1 (id=254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x325}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6feffffffffffffffe786", 0xce}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb", 0x14}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.411498046s ago: executing program 4 (id=255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a011e00000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001"], 0x104}}, 0x0) 5.274694655s ago: executing program 5 (id=256): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@lastblock={'lastblock', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) close_range(r0, r5, 0x2) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x6000) mmap(&(0x7f000021b000/0x1000)=nil, 0x1000, 0xe12cc708046ba42f, 0x11, r2, 0x1afc7000) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000804, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 5.188634135s ago: executing program 1 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 2.953847028s ago: executing program 1 (id=258): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x88c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x7, 0x4439, &(0x7f00000047c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.787512318s ago: executing program 2 (id=259): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0xcb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.480615657s ago: executing program 5 (id=260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_cread\x00', 0xffffffffffffffff, 0x0, 0xcf9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000009ed60aaf557aac16d4932190dd9625259b48281400e1d2067ae8c690962c208915d5a802e4e12c5f8e37ec251031fd5b624f3e5c985454f110017fe4ef95c48d1739943d47a5da555b", @ANYRES32, @ANYBLOB="0100008000", @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000280), &(0x7f0000000080)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2.480295117s ago: executing program 4 (id=261): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/wireless\x00') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2.150582306s ago: executing program 0 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.119807136s ago: executing program 4 (id=263): prlimit64(0x0, 0x7, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000180)={0x0, "a6088530b39055cc6e07247c01b963b91d34c83fa708c8328d2ee3ff968d81ab162212237b8661455f897b3ff63e4b2cf535a1b5297050875aab71d15333d469", 0x17}, 0x48, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) 1.088692733s ago: executing program 5 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 975.692153ms ago: executing program 0 (id=265): io_setup(0x9, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) 806.038492ms ago: executing program 4 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}]}, 0xa8) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 506.209082ms ago: executing program 4 (id=267): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 0s ago: executing program 0 (id=268): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00004b3000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 58.402953][ T4156] cgroup: Unknown subsys name 'net' [ 58.600784][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.092206][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.466335][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.635594][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 61.692559][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.700490][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.709349][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.739040][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746503][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.754890][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.784378][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 61.827450][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.841236][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.856083][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 61.873423][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 61.903914][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.910997][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.919840][ T4170] device bridge_slave_0 entered promiscuous mode [ 61.931326][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.941705][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.949668][ T4170] device bridge_slave_1 entered promiscuous mode [ 61.972848][ T4168] team0: Port device team_slave_0 added [ 62.006904][ T4168] team0: Port device team_slave_1 added [ 62.063360][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.096061][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.103139][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.111719][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.122016][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.131965][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.139151][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.165550][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.189572][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.197021][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.205715][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.220629][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.227777][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.253766][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.264944][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.272010][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.280497][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.316967][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.324913][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.332677][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.357616][ T4170] team0: Port device team_slave_0 added [ 62.383158][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.390532][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.398653][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.408222][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.418680][ T4170] team0: Port device team_slave_1 added [ 62.440187][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.447371][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.456061][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.465241][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.485886][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.492647][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.501648][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.544233][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.568869][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.576025][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.602405][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.626914][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.645902][ T4169] team0: Port device team_slave_0 added [ 62.654333][ T4167] team0: Port device team_slave_0 added [ 62.660831][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.667985][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.694550][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.713824][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.725222][ T4167] team0: Port device team_slave_1 added [ 62.732698][ T4169] team0: Port device team_slave_1 added [ 62.802698][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.809803][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.836096][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.849032][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.856162][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.882069][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.913187][ T4166] team0: Port device team_slave_0 added [ 62.920658][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.927883][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.953974][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.977419][ T4170] device hsr_slave_0 entered promiscuous mode [ 62.984787][ T4170] device hsr_slave_1 entered promiscuous mode [ 62.991410][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.999819][ T4170] Cannot create hsr debugfs directory [ 63.007191][ T4166] team0: Port device team_slave_1 added [ 63.021839][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.029017][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.055232][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.117336][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.124397][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.150370][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.190637][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.198048][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.224162][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.236544][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 63.244450][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 63.244935][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 63.250904][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 63.256980][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 63.283012][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.289823][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.296691][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.304602][ T4169] Cannot create hsr debugfs directory [ 63.334117][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.342491][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.349445][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.357595][ T4167] Cannot create hsr debugfs directory [ 63.438617][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.446857][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.453458][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.461052][ T4166] Cannot create hsr debugfs directory [ 63.651885][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.682328][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.700610][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.711044][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.750228][ T4170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.759633][ T4170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.780127][ T4170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.800441][ T4170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.849116][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.873013][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.883227][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.896751][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.969395][ T4166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.978471][ T4166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.998136][ T4166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.010500][ T4166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.028297][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.053578][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.067369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.078391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.105892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.115484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.126023][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.133265][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.142391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.151568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.160488][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.167575][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.177052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.186650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.225812][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.240536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.251599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.261274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.272809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.291341][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.319957][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.330411][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.339855][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.350022][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.359935][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.368819][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.378265][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.389309][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.400845][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.414301][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.429808][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.447325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.456752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.480369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.490742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.502151][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.509269][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.521523][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.548988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.557195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.567723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.577203][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.584422][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.595992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.605485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.630603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.638839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.657473][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.668163][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.682078][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.706967][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.716368][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.726446][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.735363][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.743708][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.776874][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.788679][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.803336][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.810840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.821255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.829072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.838384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.847864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.856604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.865409][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.872474][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.880314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.902338][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.926196][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.946597][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.960764][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.967903][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.002750][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.014583][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.039881][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.067067][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.075298][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.087460][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.096839][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.108214][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.117510][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.126244][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.135298][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.143516][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.152393][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.161660][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.170302][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.195420][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.206803][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.215600][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.224831][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.233358][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.240466][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.249170][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.258559][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.267040][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.276286][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.285324][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.292393][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.300528][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.309145][ T4168] device veth0_vlan entered promiscuous mode [ 65.315799][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 65.321969][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 65.331101][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.337837][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 65.351009][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 65.357333][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 65.360318][ T4168] device veth1_vlan entered promiscuous mode [ 65.370987][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.381976][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.390524][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.399607][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.408711][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.417113][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.424839][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.433051][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.442116][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.456823][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.480221][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.490674][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.505753][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.515471][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.522552][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.541277][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.562394][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.577512][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.591338][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.607663][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.617425][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.626050][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.633109][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.641389][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.650259][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.660743][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.675891][ T4168] device veth0_macvtap entered promiscuous mode [ 65.703327][ T4168] device veth1_macvtap entered promiscuous mode [ 65.710976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.719683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.729058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.740200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.748946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.757719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.766191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.775388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.784185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.793334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.803078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.810728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.842289][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.854913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.863699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.873744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.882451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.891479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.900384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.910214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.921059][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.934166][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.943028][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.970507][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.983113][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.006978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.022228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.032584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.042723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.076565][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.088736][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.115428][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.125420][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.145597][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.156626][ T4170] device veth0_vlan entered promiscuous mode [ 66.168734][ T4169] device veth0_vlan entered promiscuous mode [ 66.184916][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.193424][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.211424][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.222922][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.236951][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.246291][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.255230][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.269375][ T4170] device veth1_vlan entered promiscuous mode [ 66.280616][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.294389][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.303126][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.312239][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.330443][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.338880][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.347864][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.358113][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.366952][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.381668][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.394657][ T4169] device veth1_vlan entered promiscuous mode [ 66.484962][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.494427][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.502803][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.512539][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.522593][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.531073][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.541978][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.551251][ T1476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.586386][ T4170] device veth0_macvtap entered promiscuous mode [ 66.614009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.622449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.636559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.667455][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.668057][ T4169] device veth0_macvtap entered promiscuous mode [ 66.687952][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.693341][ T4170] device veth1_macvtap entered promiscuous mode [ 66.717252][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.728099][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.744143][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.790095][ T4169] device veth1_macvtap entered promiscuous mode [ 66.799473][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.808283][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.818120][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.832894][ T4167] device veth0_vlan entered promiscuous mode [ 66.852487][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.865123][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.870746][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.883817][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.893674][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.908752][ T4167] device veth1_vlan entered promiscuous mode [ 66.927213][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.939699][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953516][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.962967][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.972556][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.981815][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.995247][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.003440][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.014937][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.030877][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.042578][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.053010][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.063697][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.077211][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.108444][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.126943][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.153239][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.166719][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.176730][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.187112][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.196556][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.206027][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.217409][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.227831][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.238643][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.254602][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.266984][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.277703][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.288507][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.300601][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.442195][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.454717][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.459615][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 67.467467][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.480415][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 67.486677][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 67.488488][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.492752][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 67.507576][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 67.525889][ T4167] device veth0_macvtap entered promiscuous mode [ 67.548439][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.579886][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.594488][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.605387][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.620960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.653671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.692982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.730435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.764288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.821737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.836033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.855608][ T4166] device veth0_vlan entered promiscuous mode [ 67.866692][ T4167] device veth1_macvtap entered promiscuous mode [ 68.072405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.103893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.113906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.133201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.149175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.169172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.179174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.193883][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.213879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.227418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 68.333541][ T4166] device veth1_vlan entered promiscuous mode [ 68.391053][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.411863][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.427921][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.441150][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.459207][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.469835][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.488235][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.502343][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.513352][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.532625][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.543500][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.560782][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.571667][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.590024][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.616726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.627680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.640867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.650999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.683320][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702208][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.712197][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.726982][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.773270][ T4166] device veth0_macvtap entered promiscuous mode [ 68.803513][ T1476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.812294][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.824136][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.844061][ T1476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.856931][ T4166] device veth1_macvtap entered promiscuous mode [ 68.877791][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.895872][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.910200][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.971620][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.983287][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.990881][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.996879][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.017366][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.027887][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.038183][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.049776][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.061534][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.072351][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.085959][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.103505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.115445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.127928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.141069][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.150942][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.159095][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.168665][ T4250] device bridge_slave_0 left promiscuous mode [ 69.176434][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.191089][ T4250] device bridge_slave_1 left promiscuous mode [ 69.198171][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.210310][ T4250] bond0: (slave bond_slave_0): Releasing backup interface [ 69.225472][ T4250] bond0: (slave bond_slave_1): Releasing backup interface [ 69.252936][ T4250] team0: Port device team_slave_0 removed [ 69.271322][ T4250] team0: Port device team_slave_1 removed [ 69.279109][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.287068][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.296666][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.304391][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.323014][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.330606][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.342121][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.350468][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.359299][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.359320][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.359331][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.359345][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.361076][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.419558][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.429511][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.438773][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.448746][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.480817][ T4251] device vlan0 entered promiscuous mode [ 69.509285][ T4251] team0: Port device vlan0 added [ 69.523710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.529123][ T4251] syz.1.6 (4251) used greatest stack depth: 18840 bytes left [ 69.533214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.547931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.555669][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 69.567918][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 69.581299][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 69.594094][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 69.602401][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 69.615702][ T1476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.623672][ T1476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.656863][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.683326][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.836382][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.845682][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.021061][ T4256] loop1: detected capacity change from 0 to 128 [ 70.173432][ T4256] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 70.187691][ T4256] sysv_free_block: trying to free block not in datazone [ 70.277071][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 70.538194][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.573997][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.643025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.717713][ T4259] ksmbd: Unknown IPC event: 6, ignore. [ 70.834500][ T4259] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.319055][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325689][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.432310][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.615941][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.009088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.154510][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.169005][ T4271] loop0: detected capacity change from 0 to 64 [ 72.181971][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.208366][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.962212][ T4283] Trying to free block not in datazone [ 72.968305][ T4283] Trying to free block not in datazone [ 72.973896][ T4283] Trying to free block not in datazone [ 72.979459][ T4283] Trying to free block not in datazone [ 72.985117][ T4283] minix_free_block (loop0:6): bit already cleared [ 72.991873][ T4283] Trying to free block not in datazone [ 72.997508][ T4283] Trying to free block not in datazone [ 73.407989][ T4280] loop1: detected capacity change from 0 to 128 [ 73.432169][ T4276] loop2: detected capacity change from 0 to 4096 [ 73.602902][ T4280] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.613662][ T4280] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.292490][ T4276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.143760][ T4287] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 75.634751][ T1109] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.114735][ T1109] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 76.230422][ T1109] usb 4-1: config 0 has no interface number 0 [ 77.205125][ T1109] usb 4-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 77.234049][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.275064][ T1109] usb 4-1: Product: syz [ 77.319758][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 77.336666][ T1109] usb 4-1: Manufacturer: syz [ 77.341396][ T1109] usb 4-1: SerialNumber: syz [ 77.583307][ T1109] usb 4-1: config 0 descriptor?? [ 77.750431][ T1109] usb 4-1: can't set config #0, error -71 [ 77.855841][ T1109] usb 4-1: USB disconnect, device number 2 [ 77.967729][ T4328] loop4: detected capacity change from 0 to 1024 [ 78.071685][ T4328] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 78.157154][ T4328] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 78.350043][ T4310] loop1: detected capacity change from 0 to 32768 [ 79.078525][ T4338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.953324][ T4310] ======================================================= [ 79.953324][ T4310] WARNING: The mand mount option has been deprecated and [ 79.953324][ T4310] and is ignored by this kernel. Remove the mand [ 79.953324][ T4310] option from the mount to silence this warning. [ 79.953324][ T4310] ======================================================= [ 80.253857][ C1] sched: RT throttling activated [ 80.459442][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.735544][ T4310] (syz.1.17,4310,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 80.779561][ T4310] (syz.1.17,4310,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 81.626042][ T7] cfg80211: failed to load regulatory.db [ 89.345380][ T4385] loop2: detected capacity change from 0 to 256 [ 89.376608][ T4388] loop3: detected capacity change from 0 to 8 [ 90.121022][ T4385] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.172980][ T4390] ODEBUG: Out of memory. ODEBUG disabled [ 90.567806][ T4390] syz.4.34 (4390): drop_caches: 2 [ 90.573183][ T4210] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.757319][ T4396] loop1: detected capacity change from 0 to 2048 [ 91.277391][ T4210] usb 1-1: Using ep0 maxpacket: 8 [ 91.314673][ T26] audit: type=1800 audit(1738735593.047:2): pid=4388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 91.447346][ T4210] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 91.469253][ T4210] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.514674][ T4210] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.553906][ T26] audit: type=1800 audit(1738735593.047:3): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 91.583748][ T4210] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.632606][ T4396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.665145][ T4210] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.202043][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 92.264088][ T4210] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.289562][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.288321][ T4401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.379748][ T4407] hub 2-0:1.0: USB hub found [ 93.388453][ T4407] hub 2-0:1.0: 1 port detected [ 93.725909][ T4210] usb 1-1: can't set config #16, error -71 [ 93.761927][ T4210] usb 1-1: USB disconnect, device number 2 [ 93.795739][ T4411] loop0: detected capacity change from 0 to 512 [ 94.037993][ T4252] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.126244][ T4252] usb 3-1: Using ep0 maxpacket: 16 [ 95.201467][ T4252] usb 3-1: device descriptor read/all, error -71 [ 95.519286][ T4411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.330294][ T4432] process 'syz.3.46' launched './file0' with NULL argv: empty string added [ 96.469406][ T4411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.942457][ T4445] loop1: detected capacity change from 0 to 128 [ 97.190366][ T4445] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 97.206150][ T4445] sysv_free_block: trying to free block not in datazone [ 97.234491][ T4445] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 97.615287][ T4411] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.44: inline data xattr refers to an external xattr inode [ 97.722217][ T4411] EXT4-fs (loop0): Remounting filesystem read-only [ 97.771737][ T4411] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.44: couldn't read orphan inode 12 (err -117) [ 98.004114][ T4411] EXT4-fs (loop0): Remounting filesystem read-only [ 98.010675][ T4411] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 99.104130][ T4266] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.316654][ T4468] loop0: detected capacity change from 0 to 164 [ 99.333954][ T4266] usb 5-1: device descriptor read/64, error -71 [ 99.603784][ T4482] loop3: detected capacity change from 0 to 512 [ 99.624190][ T4266] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.659101][ T4481] loop1: detected capacity change from 0 to 1024 [ 99.667936][ T4482] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.683694][ T4482] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.729708][ T4482] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.63: inline data xattr refers to an external xattr inode [ 99.755102][ T4482] EXT4-fs (loop3): Remounting filesystem read-only [ 99.761704][ T4482] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.63: couldn't read orphan inode 12 (err -117) [ 99.813576][ T4482] EXT4-fs (loop3): Remounting filesystem read-only [ 99.822329][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,nodiscard,debug_want_extra_isize=0x0000000000000008,lazytime,nodelalloc,noblock_validity,dax=never,init_itable,norecovery,noblock_validity,noblock_validity,,errors=continue. Quota mode: none. [ 99.854135][ T4266] usb 5-1: device descriptor read/64, error -71 [ 99.908886][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 99.984154][ T4266] usb usb5-port1: attempt power cycle [ 100.013016][ T4497] loop2: detected capacity change from 0 to 64 [ 101.215508][ T4502] Trying to free block not in datazone [ 101.221017][ T4502] Trying to free block not in datazone [ 101.226546][ T4502] Trying to free block not in datazone [ 101.232013][ T4502] Trying to free block not in datazone [ 101.237524][ T4502] minix_free_block (loop2:6): bit already cleared [ 101.243992][ T4502] Trying to free block not in datazone [ 101.249472][ T4502] Trying to free block not in datazone [ 101.494407][ T4266] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.594653][ T4266] usb 5-1: device descriptor read/8, error -71 [ 101.814217][ T4503] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 101.979120][ T4512] loop4: detected capacity change from 0 to 512 [ 102.046288][ T4512] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value [ 102.108617][ T26] audit: type=1326 audit(1738735603.847:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 103.253094][ T26] audit: type=1326 audit(1738735603.847:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 103.277972][ T26] audit: type=1326 audit(1738735603.877:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 103.301708][ T26] audit: type=1326 audit(1738735603.877:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 103.425750][ T26] audit: type=1326 audit(1738735603.877:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 103.564851][ T4540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 104.234766][ T4252] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.494064][ T4252] usb 1-1: Using ep0 maxpacket: 32 [ 104.614882][ T4252] usb 1-1: config 0 has no interfaces? [ 104.774485][ T4252] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 104.808882][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.921433][ T4252] usb 1-1: Product: syz [ 104.961005][ T4252] usb 1-1: Manufacturer: syz [ 105.006434][ T4252] usb 1-1: SerialNumber: syz [ 105.110315][ T4252] usb 1-1: config 0 descriptor?? [ 106.812027][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 106.819802][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 106.830613][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 106.837381][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 106.906443][ T4266] usb 1-1: USB disconnect, device number 3 [ 106.938991][ T4557] ceph: No mds server is up or the cluster is laggy [ 108.794610][ T4581] 9pnet: Insufficient options for proto=fd [ 109.096493][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 109.102509][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 109.454583][ T26] audit: type=1326 audit(1738735611.197:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc8e17de9 code=0x7ffc0000 [ 109.673010][ T4596] Zero length message leads to an empty skb [ 109.703108][ T4594] loop2: detected capacity change from 0 to 512 [ 110.234045][ T4596] sctp: failed to load transform for md5: -2 [ 110.262091][ T26] audit: type=1326 audit(1738735611.227:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc8e17de9 code=0x7ffc0000 [ 110.267969][ T4594] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 110.297820][ T26] audit: type=1326 audit(1738735611.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ffbc8e17de9 code=0x7ffc0000 [ 110.451727][ T26] audit: type=1326 audit(1738735611.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc8e17de9 code=0x7ffc0000 [ 110.646338][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 113.060326][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 113.072787][ T4637] device wlan0 entered promiscuous mode [ 113.264443][ T4637] device wlan0 left promiscuous mode [ 113.424788][ T4640] loop2: detected capacity change from 0 to 256 [ 113.529432][ T4640] exfat: Deprecated parameter 'utf8' [ 113.535057][ T4640] exfat: Deprecated parameter 'namecase' [ 113.540832][ T4640] exfat: Deprecated parameter 'utf8' [ 113.703178][ T4640] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 114.394407][ T4648] loop2: detected capacity change from 0 to 512 [ 114.481919][ T4648] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 114.504079][ T4266] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.814203][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 114.946367][ T4266] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 115.006818][ T4266] usb 2-1: config 1 has no interface number 0 [ 115.190620][ T4266] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.231735][ T4266] usb 2-1: config 1 interface 236 has no altsetting 0 [ 115.583999][ T4266] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 115.593079][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.641013][ T4266] usb 2-1: Product: syz [ 115.739742][ T4266] usb 2-1: Manufacturer: syz [ 115.810390][ T4266] usb 2-1: SerialNumber: syz [ 116.162242][ T4642] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.336835][ T4266] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 116.504293][ T4353] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.572448][ T4661] sd 0:0:1:0: PR command failed: 2 [ 116.592265][ T4661] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 116.619337][ T4266] usb 2-1: USB disconnect, device number 2 [ 116.637045][ T4661] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.380659][ T4668] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 117.394029][ T4668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.815494][ T4674] Cannot find add_set index 0 as target [ 119.235536][ T4674] loop1: detected capacity change from 0 to 16 [ 119.514959][ T4183] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 119.658004][ T4676] loop0: detected capacity change from 0 to 128 [ 120.391439][ T4674] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 120.394057][ T4676] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 120.410809][ T4676] sysv_free_block: trying to free block not in datazone [ 120.421043][ T4676] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 120.926041][ T4683] loop2: detected capacity change from 0 to 256 [ 122.254603][ T4683] exfat: Deprecated parameter 'utf8' [ 122.260058][ T4683] exfat: Deprecated parameter 'namecase' [ 122.265764][ T4683] exfat: Deprecated parameter 'utf8' [ 122.300556][ T4683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 122.988940][ T4694] loop2: detected capacity change from 0 to 512 [ 123.294956][ T4694] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 125.507654][ T4720] loop0: detected capacity change from 0 to 256 [ 125.714419][ T4720] FAT-fs (loop0): Directory bread(block 64) failed [ 125.763194][ T4720] FAT-fs (loop0): Directory bread(block 65) failed [ 125.800464][ T4720] FAT-fs (loop0): Directory bread(block 66) failed [ 125.854177][ T4720] FAT-fs (loop0): Directory bread(block 67) failed [ 125.860842][ T4720] FAT-fs (loop0): Directory bread(block 68) failed [ 125.964156][ T4720] FAT-fs (loop0): Directory bread(block 69) failed [ 126.197349][ T4720] FAT-fs (loop0): Directory bread(block 70) failed [ 126.217728][ T4720] FAT-fs (loop0): Directory bread(block 71) failed [ 126.379840][ T4720] FAT-fs (loop0): Directory bread(block 72) failed [ 126.419229][ T4720] FAT-fs (loop0): Directory bread(block 73) failed [ 126.447261][ T4725] loop4: detected capacity change from 0 to 32768 [ 126.545194][ T4725] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 126.581264][ T4725] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.884365][ T4741] loop0: detected capacity change from 0 to 256 [ 128.524087][ T4215] Bluetooth: hci5: command 0x0409 tx timeout [ 128.544627][ T4741] exfat: Deprecated parameter 'utf8' [ 128.549983][ T4741] exfat: Deprecated parameter 'namecase' [ 128.555765][ T4741] exfat: Deprecated parameter 'utf8' [ 128.737613][ T4741] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 129.151476][ T4748] syz.0.123 uses obsolete (PF_INET,SOCK_PACKET) [ 129.244039][ T4726] chnl_net:caif_netlink_parms(): no params data found [ 130.460462][ T4761] loop2: detected capacity change from 0 to 512 [ 130.558300][ T4761] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 130.591567][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.602583][ T4505] Bluetooth: hci5: command 0x041b tx timeout [ 130.749301][ T4768] loop1: detected capacity change from 0 to 256 [ 130.818078][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.825912][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.842442][ T4726] device bridge_slave_0 entered promiscuous mode [ 130.965481][ T4772] kvm: emulating exchange as write [ 131.043229][ T4768] FAT-fs (loop1): Directory bread(block 64) failed [ 131.063163][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.129294][ T4768] FAT-fs (loop1): Directory bread(block 65) failed [ 131.176783][ T4768] FAT-fs (loop1): Directory bread(block 66) failed [ 131.220562][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.235219][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.258454][ T4768] FAT-fs (loop1): Directory bread(block 67) failed [ 131.320633][ T4726] device bridge_slave_1 entered promiscuous mode [ 131.322231][ T4768] FAT-fs (loop1): Directory bread(block 68) failed [ 131.358222][ T4768] FAT-fs (loop1): Directory bread(block 69) failed [ 131.388414][ T4768] FAT-fs (loop1): Directory bread(block 70) failed [ 131.409647][ T4768] FAT-fs (loop1): Directory bread(block 71) failed [ 131.418017][ T4768] FAT-fs (loop1): Directory bread(block 72) failed [ 131.464826][ T4768] FAT-fs (loop1): Directory bread(block 73) failed [ 131.505127][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.734547][ T4778] netlink: 260 bytes leftover after parsing attributes in process `syz.0.131'. [ 131.911115][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.958119][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.986681][ T4166] ocfs2: Unmounting device (7,4) on (node local) [ 132.129625][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.693653][ T4505] Bluetooth: hci5: command 0x040f tx timeout [ 132.768105][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774522][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995199][ T4788] loop0: detected capacity change from 0 to 512 [ 133.027323][ T4726] team0: Port device team_slave_0 added [ 133.042501][ T4788] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.085321][ T4726] team0: Port device team_slave_1 added [ 133.227639][ T4788] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.240080][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.273959][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.421952][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.497661][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.548627][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.604528][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.617156][ T4788] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.135: inline data xattr refers to an external xattr inode [ 133.649277][ T4788] EXT4-fs (loop0): Remounting filesystem read-only [ 134.077449][ T4788] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.135: couldn't read orphan inode 12 (err -117) [ 134.324374][ T4788] EXT4-fs (loop0): Remounting filesystem read-only [ 134.357928][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 134.488904][ T4726] device hsr_slave_0 entered promiscuous mode [ 134.552677][ T4726] device hsr_slave_1 entered promiscuous mode [ 134.578804][ T4726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.607058][ T4726] Cannot create hsr debugfs directory [ 134.933577][ T4505] Bluetooth: hci5: command 0x0419 tx timeout [ 135.255626][ T4816] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 136.574059][ T4726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.652445][ T4840] loop2: detected capacity change from 0 to 256 [ 136.727875][ T4726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.755543][ T4726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.933166][ T4726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.024018][ T4840] FAT-fs (loop2): Directory bread(block 64) failed [ 137.051053][ T4840] FAT-fs (loop2): Directory bread(block 65) failed [ 137.110037][ T4840] FAT-fs (loop2): Directory bread(block 66) failed [ 137.147373][ T4840] FAT-fs (loop2): Directory bread(block 67) failed [ 137.235066][ T4840] FAT-fs (loop2): Directory bread(block 68) failed [ 137.241638][ T4840] FAT-fs (loop2): Directory bread(block 69) failed [ 137.271420][ T4840] FAT-fs (loop2): Directory bread(block 70) failed [ 137.278131][ T4840] FAT-fs (loop2): Directory bread(block 71) failed [ 137.296023][ T4840] FAT-fs (loop2): Directory bread(block 72) failed [ 137.314056][ T4840] FAT-fs (loop2): Directory bread(block 73) failed [ 138.209958][ T4850] netlink: 260 bytes leftover after parsing attributes in process `syz.4.144'. [ 138.962408][ T26] audit: type=1326 audit(1738735640.697:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x0 [ 139.282372][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.558015][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.587339][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.797132][ T154] device hsr_slave_0 left promiscuous mode [ 141.808018][ T154] device hsr_slave_1 left promiscuous mode [ 141.834509][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.869670][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.886143][ T4888] syz.4.153[4888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.886301][ T4888] syz.4.153[4888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.901832][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.920873][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.928857][ T154] device bridge_slave_1 left promiscuous mode [ 141.937599][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.024806][ T4212] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.731965][ T154] device bridge_slave_0 left promiscuous mode [ 142.738994][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.842004][ T154] device veth1_macvtap left promiscuous mode [ 142.867265][ T4893] loop2: detected capacity change from 0 to 256 [ 142.884569][ T154] device veth0_macvtap left promiscuous mode [ 142.890673][ T154] device veth1_vlan left promiscuous mode [ 142.929146][ T154] device veth0_vlan left promiscuous mode [ 143.164088][ T4212] usb 2-1: Using ep0 maxpacket: 8 [ 143.586588][ T4893] FAT-fs (loop2): Directory bread(block 64) failed [ 143.608820][ T4893] FAT-fs (loop2): Directory bread(block 65) failed [ 143.630471][ T4893] FAT-fs (loop2): Directory bread(block 66) failed [ 143.648104][ T4893] FAT-fs (loop2): Directory bread(block 67) failed [ 143.656985][ T4893] FAT-fs (loop2): Directory bread(block 68) failed [ 143.663545][ T4893] FAT-fs (loop2): Directory bread(block 69) failed [ 143.680742][ T4893] FAT-fs (loop2): Directory bread(block 70) failed [ 143.701089][ T4893] FAT-fs (loop2): Directory bread(block 71) failed [ 143.721436][ T4893] FAT-fs (loop2): Directory bread(block 72) failed [ 143.739468][ T4893] FAT-fs (loop2): Directory bread(block 73) failed [ 143.782470][ T154] team0 (unregistering): Port device team_slave_1 removed [ 143.821761][ T4212] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 143.831476][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.889792][ T154] team0 (unregistering): Port device team_slave_0 removed [ 143.921859][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.950472][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.017073][ T4212] usb 2-1: Product: syz [ 144.021387][ T4212] usb 2-1: Manufacturer: syz [ 144.026056][ T4212] usb 2-1: SerialNumber: syz [ 144.036824][ T4212] usb 2-1: config 0 descriptor?? [ 144.282590][ T154] bond0 (unregistering): Released all slaves [ 144.470972][ T4212] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 144.726322][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.941751][ T4902] loop2: detected capacity change from 0 to 2048 [ 145.021788][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.041833][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.069389][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.076537][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.086951][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.124008][ T4212] gspca_sunplus: reg_w_riv err -71 [ 145.129221][ T4212] sunplus: probe of 2-1:0.0 failed with error -71 [ 145.348643][ T4212] usb 2-1: USB disconnect, device number 3 [ 145.445735][ T4902] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 145.592830][ T4902] System zones: 0-7 [ 145.860378][ T4902] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 145.961153][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.972044][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.033332][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.040513][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.174291][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.183214][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.363489][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.410363][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.433630][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.454603][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.481899][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.531233][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.541230][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.573561][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.594770][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.651172][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.997877][ T4942] loop4: detected capacity change from 0 to 64 [ 148.104841][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.137051][ T4943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.719752][ T4948] Trying to free block not in datazone [ 148.719791][ T4948] Trying to free block not in datazone [ 148.719800][ T4948] Trying to free block not in datazone [ 148.719809][ T4948] Trying to free block not in datazone [ 148.719818][ T4948] minix_free_block (loop4:6): bit already cleared [ 148.719870][ T4948] Trying to free block not in datazone [ 148.719894][ T4948] Trying to free block not in datazone [ 148.819519][ T4943] syz.2.162 (4943) used greatest stack depth: 18712 bytes left [ 149.940904][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.984447][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.004085][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.099704][ T4959] loop2: detected capacity change from 0 to 1024 [ 150.134217][ T26] audit: type=1326 audit(1738735651.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.1.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f437d8e7de9 code=0x0 [ 150.220351][ T4966] syz.4.166[4966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.220513][ T4966] syz.4.166[4966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.474436][ T4959] hfsplus: failed to load root directory [ 151.500530][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.517307][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.743636][ T4726] device veth0_vlan entered promiscuous mode [ 152.222619][ T4989] loop2: detected capacity change from 0 to 16 [ 152.231987][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.272348][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.325965][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.366995][ T4989] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.378038][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.378653][ T4989] attempt to access beyond end of device [ 152.378653][ T4989] loop2: rw=0, want=24, limit=16 [ 152.431717][ T4726] device veth1_vlan entered promiscuous mode [ 152.519130][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.564301][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.641934][ T4726] device veth0_macvtap entered promiscuous mode [ 152.681593][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.720140][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.775675][ T4726] device veth1_macvtap entered promiscuous mode [ 152.791331][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.832794][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.035581][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.114047][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.184093][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.246563][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.327041][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.342820][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.362952][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.376549][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.387203][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.415211][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.841659][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.907067][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.952767][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.017781][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.069436][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.125911][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.220540][ T4726] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.328516][ T4726] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.348956][ T5015] loop1: detected capacity change from 0 to 256 [ 154.386460][ T4726] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.391303][ T5019] loop2: detected capacity change from 0 to 64 [ 154.442453][ T4726] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.493417][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.511190][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.660081][ T5015] FAT-fs (loop1): Directory bread(block 64) failed [ 154.697473][ T5015] FAT-fs (loop1): Directory bread(block 65) failed [ 154.727967][ T5015] FAT-fs (loop1): Directory bread(block 66) failed [ 154.784077][ T5015] FAT-fs (loop1): Directory bread(block 67) failed [ 154.827216][ T5015] FAT-fs (loop1): Directory bread(block 68) failed [ 155.043962][ T5015] FAT-fs (loop1): Directory bread(block 69) failed [ 155.071020][ T5015] FAT-fs (loop1): Directory bread(block 70) failed [ 155.077677][ T5015] FAT-fs (loop1): Directory bread(block 71) failed [ 155.103989][ T5015] FAT-fs (loop1): Directory bread(block 72) failed [ 155.131332][ T5015] FAT-fs (loop1): Directory bread(block 73) failed [ 155.504541][ T4213] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 155.523931][ T4213] Bluetooth: hci4: Injecting HCI hardware error event [ 155.532690][ T4182] Bluetooth: hci4: hardware error 0x00 [ 155.948818][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.104867][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.196771][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.207716][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.226139][ T5039] syz.2.178[5039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.226289][ T5039] syz.2.178[5039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.273980][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.419841][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.265319][ T4686] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 159.139930][ T5077] loop0: detected capacity change from 0 to 64 [ 159.557172][ T5084] Trying to free block not in datazone [ 159.562833][ T5084] Trying to free block not in datazone [ 159.568464][ T5084] Trying to free block not in datazone [ 159.574031][ T5084] Trying to free block not in datazone [ 159.579595][ T5084] minix_free_block (loop0:6): bit already cleared [ 159.586146][ T5084] Trying to free block not in datazone [ 159.591789][ T5084] Trying to free block not in datazone [ 159.814553][ T4686] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 159.908781][ T4686] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 160.110837][ T4686] usb 2-1: Product: syz [ 160.158574][ T4686] usb 2-1: Manufacturer: syz [ 160.193859][ T4686] usb 2-1: SerialNumber: syz [ 160.296377][ T4686] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 160.352804][ T26] audit: type=1326 audit(1738735662.087:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.2.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbc8e17de9 code=0x0 [ 160.414136][ T4686] vp7045: USB control message 'out' went wrong. [ 160.438961][ T4686] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 160.492590][ T4686] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 160.536245][ T4686] usb 2-1: USB disconnect, device number 4 [ 160.574639][ T5096] syz.1.190[5096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.574787][ T5096] syz.1.190[5096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.872541][ T5145] loop0: detected capacity change from 0 to 2048 [ 165.724644][ T5145] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 165.732905][ T5145] System zones: 0-7 [ 166.060180][ T5145] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 169.526710][ T1109] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.714189][ T5034] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 170.144793][ T5034] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 170.180614][ T5034] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 170.409195][ T5034] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 170.438817][ T5034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.469191][ T5034] usb 1-1: Product: syz [ 170.473400][ T5034] usb 1-1: Manufacturer: syz [ 170.508885][ T5034] usb 1-1: SerialNumber: syz [ 170.521516][ T5034] usb 1-1: config 0 descriptor?? [ 170.546588][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.564209][ T5191] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.582259][ T5191] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.712994][ T5214] syz.2.214[5214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.713143][ T5214] syz.2.214[5214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.803874][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 170.849936][ T5191] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.893223][ T5191] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 171.114127][ T13] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 171.133633][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.158675][ T5221] loop1: detected capacity change from 0 to 2048 [ 171.171118][ T13] usb 5-1: Product: syz [ 171.175388][ T13] usb 5-1: Manufacturer: syz [ 171.180083][ T13] usb 5-1: SerialNumber: syz [ 171.210863][ T13] usb 5-1: config 0 descriptor?? [ 171.265476][ T13] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 171.291497][ T13] usb 5-1: Detected FT232H [ 171.303505][ T5221] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 171.317673][ T5221] System zones: 0-7 [ 171.331407][ T5221] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 171.479835][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 171.746798][ T13] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 171.806953][ T13] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 172.174600][ T5034] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 172.656858][ T13] usb 5-1: USB disconnect, device number 6 [ 172.716605][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.754625][ T5034] dm9601 1-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 8e:75:bc:b6:ad:45 [ 172.760394][ T13] ftdi_sio 5-1:0.0: device disconnected [ 172.823681][ T5034] usb 1-1: USB disconnect, device number 4 [ 172.860347][ T5034] dm9601 1-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 173.504312][ T5249] loop4: detected capacity change from 0 to 512 [ 174.380126][ T5249] EXT4-fs (loop4): Mount option "journal_async_commit" incompatible with ext3 [ 174.754800][ T4686] Bluetooth: hci5: command 0x0405 tx timeout [ 175.788960][ T5272] loop2: detected capacity change from 0 to 2048 [ 175.993964][ T5272] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 176.034916][ T5272] System zones: 0-7 [ 176.241992][ T5272] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 177.053044][ T5294] loop2: detected capacity change from 0 to 128 [ 177.623481][ T5294] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 177.631065][ T5294] sysv_free_block: trying to free block not in datazone [ 177.641683][ T5294] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.749113][ T5302] syz.1.230[5302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.749275][ T5302] syz.1.230[5302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.609848][ T5326] loop5: detected capacity change from 0 to 128 [ 180.224913][ T5326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.235827][ T5326] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.267560][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.288572][ T5326] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.235: No space for directory leaf checksum. Please run e2fsck -D. [ 180.304711][ T5326] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.235: checksumming directory block 0 [ 180.331278][ T5326] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.235: No space for directory leaf checksum. Please run e2fsck -D. [ 180.347464][ T5326] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.235: checksumming directory block 0 [ 181.421570][ T5339] loop2: detected capacity change from 0 to 2048 [ 181.991832][ T5339] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 182.108757][ T5339] System zones: 0-7 [ 182.395534][ T5339] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 182.835907][ T5371] loop2: detected capacity change from 0 to 64 [ 183.240272][ T5375] Trying to free block not in datazone [ 183.245992][ T5375] Trying to free block not in datazone [ 183.251562][ T5375] Trying to free block not in datazone [ 183.257172][ T5375] Trying to free block not in datazone [ 183.262701][ T5375] minix_free_block (loop2:6): bit already cleared [ 183.269954][ T5375] Trying to free block not in datazone [ 183.275822][ T5375] Trying to free block not in datazone [ 183.336214][ T5376] overlayfs: missing 'lowerdir' [ 184.664094][ T4210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.994128][ T4210] usb 3-1: Using ep0 maxpacket: 16 [ 185.134102][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 185.220985][ T5387] loop4: detected capacity change from 0 to 512 [ 185.324893][ T4210] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.363919][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.392594][ T4210] usb 3-1: Product: syz [ 185.402774][ T4210] usb 3-1: Manufacturer: syz [ 185.407486][ T4210] usb 3-1: SerialNumber: syz [ 185.458076][ T5387] EXT4-fs (loop4): Mount option "journal_async_commit" incompatible with ext3 [ 185.478961][ T4210] usb 3-1: config 0 descriptor?? [ 185.701859][ T5396] loop5: detected capacity change from 0 to 2048 [ 185.866992][ T5396] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 185.896131][ T5396] System zones: 0-7 [ 186.482848][ T4686] Bluetooth: hci0: command 0x0406 tx timeout [ 186.490038][ T4686] Bluetooth: hci3: command 0x0406 tx timeout [ 186.497631][ T5396] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 186.501665][ T4686] Bluetooth: hci1: command 0x0406 tx timeout [ 186.554932][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.255'. [ 186.652422][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.255'. [ 186.763730][ T5418] loop5: detected capacity change from 0 to 2048 [ 186.900762][ T5418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.850558][ T5427] hub 2-0:1.0: USB hub found [ 188.856442][ T5427] hub 2-0:1.0: 1 port detected [ 188.907768][ T4686] usb 3-1: USB disconnect, device number 5 [ 189.544888][ T5438] tipc: Started in network mode [ 189.550172][ T5438] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 189.596815][ T5438] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 189.655338][ T5438] tipc: Enabled bearer , priority 10 [ 190.322813][ T26] audit: type=1326 audit(1738735692.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 190.738091][ T26] audit: type=1326 audit(1738735692.127:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 190.753089][ T13] tipc: Node number set to 1 [ 191.060383][ T26] audit: type=1326 audit(1738735692.257:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 191.212417][ T26] audit: type=1326 audit(1738735692.257:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669dcb2de9 code=0x7ffc0000 [ 191.615476][ T5439] loop1: detected capacity change from 0 to 32768 [ 191.630551][ T5474] loop4: detected capacity change from 0 to 2048 [ 191.780922][ T5474] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 191.792209][ T5439] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.823980][ T5474] System zones: 0-7 [ 191.846166][ T5474] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,debug,,errors=continue. Quota mode: none. [ 191.950831][ T5436] ================================================================== [ 191.959395][ T5436] BUG: KASAN: use-after-free in ocfs2_search_dirblock+0x267/0x7f0 [ 191.967252][ T5436] Read of size 1 at addr ffff88805cf918cb by task syz.1.258/5436 [ 191.975111][ T5436] [ 191.977447][ T5436] CPU: 1 PID: 5436 Comm: syz.1.258 Not tainted 5.15.178-syzkaller #0 [ 191.985525][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.995594][ T5436] Call Trace: [ 191.998907][ T5436] [ 192.001857][ T5436] dump_stack_lvl+0x1e3/0x2d0 [ 192.006565][ T5436] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 192.012219][ T5436] ? _printk+0xd1/0x120 [ 192.016401][ T5436] ? __wake_up_klogd+0xcc/0x100 [ 192.021273][ T5436] ? panic+0x860/0x860 [ 192.025362][ T5436] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 192.030851][ T5436] print_address_description+0x63/0x3b0 [ 192.036417][ T5436] ? ocfs2_search_dirblock+0x267/0x7f0 [ 192.041900][ T5436] kasan_report+0x16b/0x1c0 [ 192.046416][ T5436] ? ocfs2_search_dirblock+0x267/0x7f0 [ 192.051895][ T5436] ocfs2_search_dirblock+0x267/0x7f0 [ 192.057193][ T5436] ? stack_trace_snprint+0xe0/0xe0 [ 192.062315][ T5436] ? ocfs2_read_inode_block+0x148/0x1d0 [ 192.067867][ T5436] ? ocfs2_read_dir_block_direct+0x540/0x540 [ 192.073866][ T5436] ? __lock_acquire+0x1295/0x1ff0 [ 192.078997][ T5436] ocfs2_find_entry+0x114b/0x26d0 [ 192.084038][ T5436] ? mark_lock+0x98/0x340 [ 192.088376][ T5436] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 192.094465][ T5436] ? read_lock_is_recursive+0x10/0x10 [ 192.099921][ T5436] ? ocfs2_inode_lock_full_nested+0x177/0x1bf0 [ 192.106248][ T5436] ? __lock_acquire+0x1ff0/0x1ff0 [ 192.111268][ T5436] ? do_raw_spin_lock+0x14a/0x370 [ 192.116307][ T5436] ? do_raw_spin_unlock+0x137/0x8b0 [ 192.121611][ T5436] ? __lock_acquire+0x1295/0x1ff0 [ 192.126641][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 192.131493][ T5436] ? ocfs2_inode_lock_full_nested+0xb2e/0x1bf0 [ 192.137654][ T5436] ? ocfs2_downconvert_lock+0x500/0x500 [ 192.143200][ T5436] ocfs2_find_files_on_disk+0xea/0x310 [ 192.148665][ T5436] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 192.154299][ T5436] ? ocfs2_find_files_on_disk+0x310/0x310 [ 192.160026][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 192.164884][ T5436] ocfs2_lookup+0x27b/0x9f0 [ 192.169388][ T5436] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 192.175625][ T5436] ? HAS_UNMAPPED_ID+0x1ef/0x240 [ 192.180563][ T5436] ? inode_permission+0xf7/0x450 [ 192.185496][ T5436] ? ocfs2_getattr+0x380/0x380 [ 192.190267][ T5436] ? bpf_lsm_inode_create+0x5/0x10 [ 192.195377][ T5436] ? security_inode_create+0xb4/0x100 [ 192.200750][ T5436] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 192.206987][ T5436] path_openat+0x111d/0x2f20 [ 192.211609][ T5436] ? do_filp_open+0x460/0x460 [ 192.216384][ T5436] do_filp_open+0x21c/0x460 [ 192.220887][ T5436] ? vfs_tmpfile+0x2e0/0x2e0 [ 192.225486][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 192.230338][ T5436] ? alloc_fd+0x598/0x630 [ 192.234673][ T5436] do_sys_openat2+0x13b/0x4f0 [ 192.239352][ T5436] ? do_sys_open+0x220/0x220 [ 192.243952][ T5436] __x64_sys_openat+0x243/0x290 [ 192.248802][ T5436] ? __ia32_sys_open+0x270/0x270 [ 192.253740][ T5436] ? syscall_enter_from_user_mode+0x2e/0x240 [ 192.259721][ T5436] ? lockdep_hardirqs_on+0x94/0x130 [ 192.265008][ T5436] ? syscall_enter_from_user_mode+0x2e/0x240 [ 192.271005][ T5436] do_syscall_64+0x3b/0xb0 [ 192.275436][ T5436] ? clear_bhb_loop+0x15/0x70 [ 192.280123][ T5436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.286014][ T5436] RIP: 0033:0x7f437d8e7de9 [ 192.290436][ T5436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.310043][ T5436] RSP: 002b:00007f437b751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.318460][ T5436] RAX: ffffffffffffffda RBX: 00007f437db00fa0 RCX: 00007f437d8e7de9 [ 192.326427][ T5436] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 192.334393][ T5436] RBP: 00007f437d9692a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.342361][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.350331][ T5436] R13: 0000000000000000 R14: 00007f437db00fa0 R15: 00007ffceadbed28 [ 192.358409][ T5436] [ 192.361428][ T5436] [ 192.363747][ T5436] The buggy address belongs to the page: [ 192.369367][ T5436] page:ffffea000173e440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x5cf91 [ 192.379694][ T5436] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 192.386812][ T5436] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 192.395392][ T5436] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 192.403964][ T5436] page dumped because: kasan: bad access detected [ 192.410371][ T5436] page_owner tracks the page as freed [ 192.415726][ T5436] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5418, ts 186985339820, free_ts 189330965357 [ 192.430475][ T5436] get_page_from_freelist+0x3b78/0x3d40 [ 192.436066][ T5436] __alloc_pages+0x272/0x700 [ 192.440653][ T5436] alloc_pages_vma+0x39a/0x800 [ 192.445436][ T5436] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 192.451067][ T5436] shmem_getpage_gfp+0x17b1/0x3190 [ 192.456177][ T5436] shmem_fault+0x1d7/0x700 [ 192.460607][ T5436] __do_fault+0x139/0x340 [ 192.464964][ T5436] handle_mm_fault+0x376f/0x5960 [ 192.469939][ T5436] __get_user_pages+0x4ed/0x11d0 [ 192.474870][ T5436] populate_vma_page_range+0x215/0x2a0 [ 192.480328][ T5436] __mm_populate+0x2a5/0x4a0 [ 192.484912][ T5436] vm_mmap_pgoff+0x22b/0x2d0 [ 192.489497][ T5436] ksys_mmap_pgoff+0x13e/0x780 [ 192.494254][ T5436] do_syscall_64+0x3b/0xb0 [ 192.498666][ T5436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.504558][ T5436] page last free stack trace: [ 192.509220][ T5436] free_unref_page_prepare+0xc34/0xcf0 [ 192.514674][ T5436] free_unref_page_list+0x1f7/0x8e0 [ 192.519868][ T5436] release_pages+0x1bb9/0x1f40 [ 192.524628][ T5436] __pagevec_release+0x80/0xf0 [ 192.529393][ T5436] shmem_undo_range+0x67a/0x1b50 [ 192.534330][ T5436] shmem_evict_inode+0x21b/0xa00 [ 192.539260][ T5436] evict+0x529/0x930 [ 192.543150][ T5436] __dentry_kill+0x436/0x650 [ 192.547734][ T5436] dentry_kill+0xbb/0x290 [ 192.552072][ T5436] dput+0xd8/0x1a0 [ 192.555787][ T5436] __fput+0x636/0x8e0 [ 192.559768][ T5436] task_work_run+0x129/0x1a0 [ 192.564358][ T5436] do_exit+0x6a3/0x2480 [ 192.568640][ T5436] do_group_exit+0x144/0x310 [ 192.573254][ T5436] get_signal+0xc66/0x14e0 [ 192.577793][ T5436] arch_do_signal_or_restart+0xc3/0x1890 [ 192.583525][ T5436] [ 192.585845][ T5436] Memory state around the buggy address: [ 192.591467][ T5436] ffff88805cf91780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 192.599766][ T5436] ffff88805cf91800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 192.607825][ T5436] >ffff88805cf91880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 192.615877][ T5436] ^ [ 192.622284][ T5436] ffff88805cf91900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 192.630340][ T5436] ffff88805cf91980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 192.638546][ T5436] ================================================================== [ 192.646634][ T5436] Disabling lock debugging due to kernel taint [ 192.838926][ T5436] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.846165][ T5436] CPU: 1 PID: 5436 Comm: syz.1.258 Tainted: G B 5.15.178-syzkaller #0 [ 192.855639][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 192.865708][ T5436] Call Trace: [ 192.869000][ T5436] [ 192.871936][ T5436] dump_stack_lvl+0x1e3/0x2d0 [ 192.876634][ T5436] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 192.882283][ T5436] ? panic+0x860/0x860 [ 192.886384][ T5436] ? rcu_is_watching+0x11/0xa0 [ 192.891173][ T5436] ? preempt_schedule_common+0xa6/0xd0 [ 192.896668][ T5436] panic+0x318/0x860 [ 192.900592][ T5436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.906775][ T5436] ? check_panic_on_warn+0x1d/0xa0 [ 192.911920][ T5436] ? fb_is_primary_device+0xd0/0xd0 [ 192.917144][ T5436] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 192.923149][ T5436] ? _raw_spin_unlock+0x40/0x40 [ 192.928018][ T5436] check_panic_on_warn+0x7e/0xa0 [ 192.932987][ T5436] ? ocfs2_search_dirblock+0x267/0x7f0 [ 192.938471][ T5436] end_report+0x6d/0xf0 [ 192.942637][ T5436] kasan_report+0x18e/0x1c0 [ 192.947158][ T5436] ? ocfs2_search_dirblock+0x267/0x7f0 [ 192.952638][ T5436] ocfs2_search_dirblock+0x267/0x7f0 [ 192.957940][ T5436] ? stack_trace_snprint+0xe0/0xe0 [ 192.963081][ T5436] ? ocfs2_read_inode_block+0x148/0x1d0 [ 192.968643][ T5436] ? ocfs2_read_dir_block_direct+0x540/0x540 [ 192.974647][ T5436] ? __lock_acquire+0x1295/0x1ff0 [ 192.979699][ T5436] ocfs2_find_entry+0x114b/0x26d0 [ 192.984841][ T5436] ? mark_lock+0x98/0x340 [ 192.989323][ T5436] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 192.995427][ T5436] ? read_lock_is_recursive+0x10/0x10 [ 193.000824][ T5436] ? ocfs2_inode_lock_full_nested+0x177/0x1bf0 [ 193.007009][ T5436] ? __lock_acquire+0x1ff0/0x1ff0 [ 193.012068][ T5436] ? do_raw_spin_lock+0x14a/0x370 [ 193.017128][ T5436] ? do_raw_spin_unlock+0x137/0x8b0 [ 193.022350][ T5436] ? __lock_acquire+0x1295/0x1ff0 [ 193.027399][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 193.032276][ T5436] ? ocfs2_inode_lock_full_nested+0xb2e/0x1bf0 [ 193.038550][ T5436] ? ocfs2_downconvert_lock+0x500/0x500 [ 193.044123][ T5436] ocfs2_find_files_on_disk+0xea/0x310 [ 193.049619][ T5436] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 193.055282][ T5436] ? ocfs2_find_files_on_disk+0x310/0x310 [ 193.061047][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 193.065933][ T5436] ocfs2_lookup+0x27b/0x9f0 [ 193.070466][ T5436] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 193.076736][ T5436] ? HAS_UNMAPPED_ID+0x1ef/0x240 [ 193.081705][ T5436] ? inode_permission+0xf7/0x450 [ 193.086757][ T5436] ? ocfs2_getattr+0x380/0x380 [ 193.091550][ T5436] ? bpf_lsm_inode_create+0x5/0x10 [ 193.096684][ T5436] ? security_inode_create+0xb4/0x100 [ 193.102091][ T5436] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 193.108445][ T5436] path_openat+0x111d/0x2f20 [ 193.113076][ T5436] ? do_filp_open+0x460/0x460 [ 193.117789][ T5436] do_filp_open+0x21c/0x460 [ 193.122319][ T5436] ? vfs_tmpfile+0x2e0/0x2e0 [ 193.126947][ T5436] ? _raw_spin_unlock+0x24/0x40 [ 193.131826][ T5436] ? alloc_fd+0x598/0x630 [ 193.136235][ T5436] do_sys_openat2+0x13b/0x4f0 [ 193.140945][ T5436] ? do_sys_open+0x220/0x220 [ 193.145572][ T5436] __x64_sys_openat+0x243/0x290 [ 193.150448][ T5436] ? __ia32_sys_open+0x270/0x270 [ 193.155449][ T5436] ? syscall_enter_from_user_mode+0x2e/0x240 [ 193.161549][ T5436] ? lockdep_hardirqs_on+0x94/0x130 [ 193.166775][ T5436] ? syscall_enter_from_user_mode+0x2e/0x240 [ 193.172787][ T5436] do_syscall_64+0x3b/0xb0 [ 193.177231][ T5436] ? clear_bhb_loop+0x15/0x70 [ 193.181931][ T5436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.187860][ T5436] RIP: 0033:0x7f437d8e7de9 [ 193.192297][ T5436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.211920][ T5436] RSP: 002b:00007f437b751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.220360][ T5436] RAX: ffffffffffffffda RBX: 00007f437db00fa0 RCX: 00007f437d8e7de9 [ 193.228389][ T5436] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 193.236484][ T5436] RBP: 00007f437d9692a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.244480][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.252471][ T5436] R13: 0000000000000000 R14: 00007f437db00fa0 R15: 00007ffceadbed28 [ 193.260472][ T5436] [ 193.263739][ T5436] Kernel Offset: disabled [ 193.268100][ T5436] Rebooting in 86400 seconds..