last executing test programs: 49.735553681s ago: executing program 4 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) 48.427179769s ago: executing program 4 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x104, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.120947696s ago: executing program 4 (id=22): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) 47.963476059s ago: executing program 4 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 47.778099223s ago: executing program 4 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xea, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x5, 0x0, 0x7c, '\x00', 0x6}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.422823721s ago: executing program 4 (id=29): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) 47.285860424s ago: executing program 32 (id=29): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) 42.776215049s ago: executing program 3 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x20000000) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa014, 0x0, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2a990a5, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000200)='./file0/file0\x00', 0x90) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 42.087845244s ago: executing program 3 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00280e00ec00"}) 41.244574622s ago: executing program 3 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 41.094117316s ago: executing program 3 (id=73): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365743d6370313235302c756e695f786c6174653d302c00614a37a782ab142609f7372e4c195ea380343e73f0fbc134e5420d149198"], 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 40.659446594s ago: executing program 3 (id=77): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x95, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 40.041238538s ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[{0x10, 0x108, 0x6}], 0x10}}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 39.921986741s ago: executing program 33 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[{0x10, 0x108, 0x6}], 0x10}}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 38.320092835s ago: executing program 0 (id=92): sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x14000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept4(r0, 0x0, 0x0, 0x800) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 37.423600474s ago: executing program 0 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.953641013s ago: executing program 0 (id=99): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 35.437780046s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@minixdf}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 34.820052699s ago: executing program 0 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 30.817241684s ago: executing program 0 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "70704cf0fa3862a5", "4d48e34a491b999d82b68275b5f10fc0", '\x00', "2dc295324edb3f38"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) shutdown(r0, 0x0) 30.707473846s ago: executing program 34 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "70704cf0fa3862a5", "4d48e34a491b999d82b68275b5f10fc0", '\x00', "2dc295324edb3f38"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) shutdown(r0, 0x0) 9.915209219s ago: executing program 5 (id=251): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 9.805043151s ago: executing program 5 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400, 0x2) 9.658849914s ago: executing program 5 (id=253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x4}, @window={0x3, 0xa, 0x7}, @window={0x3, 0x2, 0x3}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0xbe}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 8.622394936s ago: executing program 5 (id=259): r0 = socket$inet6_udplite(0xa, 0x2, 0x11) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) tee(r3, r2, 0x9, 0x8) 7.705369426s ago: executing program 5 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.371887153s ago: executing program 7 (id=268): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x80, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 7.192793327s ago: executing program 7 (id=270): syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/192, 0xc0) 4.654324651s ago: executing program 2 (id=277): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x11, 0x3, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206197bafa7283da60565717c311fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0abd8"], 0xdd12}], 0x1}, 0x40) 4.589073433s ago: executing program 6 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 3.953242456s ago: executing program 1 (id=280): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 3.237392711s ago: executing program 1 (id=281): timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x4, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r2, r3+10000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) ioprio_set$uid(0x3, 0x0, 0x4000) tkill(r5, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 3.236935241s ago: executing program 7 (id=282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x84) 3.235945031s ago: executing program 5 (id=283): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.234676021s ago: executing program 6 (id=284): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000180)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.208077022s ago: executing program 2 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1fd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x980}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.158814213s ago: executing program 6 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="8c", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.84386192s ago: executing program 2 (id=287): socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 2.793183351s ago: executing program 6 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 2.79274994s ago: executing program 7 (id=289): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000600)='./file1\x00') 2.713445582s ago: executing program 1 (id=290): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) userfaultfd(0x80001) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1.4105952s ago: executing program 1 (id=291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 911.373831ms ago: executing program 7 (id=292): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 764.921434ms ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 731.968404ms ago: executing program 2 (id=294): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x99, 0x7, 0x9, '\x00', 0xd}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 679.434896ms ago: executing program 6 (id=295): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 361.742982ms ago: executing program 2 (id=296): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1100, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10fc}], 0x0, 0x0, 0x0}) 264.427414ms ago: executing program 2 (id=297): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f000086fff4)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) close_range(r5, 0xffffffffffffffff, 0x3e00000000000000) 264.019145ms ago: executing program 1 (id=298): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x6c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xffffff7d) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 89.740128ms ago: executing program 6 (id=299): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 55.511977][ T4174] cgroup: Unknown subsys name 'net' [ 55.639803][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.905272][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.194098][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.319844][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.329595][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.351953][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.400125][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.407317][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.416165][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.429131][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.436252][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.444176][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.452152][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 58.501668][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.531573][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.561979][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.569244][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.577139][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.607536][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.614764][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.622457][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.629690][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.639501][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.647606][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.657237][ T4187] team0: Port device team_slave_0 added [ 58.663354][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.670565][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.678749][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.703638][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.711313][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.719109][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.729002][ T4187] team0: Port device team_slave_1 added [ 58.746335][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.757716][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.771089][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.778371][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.786187][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.823087][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.843438][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.850881][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.858811][ T4200] device bridge_slave_0 entered promiscuous mode [ 58.869268][ T4188] team0: Port device team_slave_0 added [ 58.877108][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.887914][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.898013][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.905052][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.931274][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.942805][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.950550][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.958374][ T4200] device bridge_slave_1 entered promiscuous mode [ 58.966633][ T4188] team0: Port device team_slave_1 added [ 58.990448][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.000057][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.007329][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.033634][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.055855][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.071815][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.094334][ T4194] team0: Port device team_slave_0 added [ 59.115382][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.122347][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.148534][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.161472][ T4194] team0: Port device team_slave_1 added [ 59.181166][ T4186] team0: Port device team_slave_0 added [ 59.192911][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.199981][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.226271][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.248687][ T4200] team0: Port device team_slave_0 added [ 59.258115][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.265556][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.273417][ T4186] team0: Port device team_slave_1 added [ 59.297964][ T4200] team0: Port device team_slave_1 added [ 59.304272][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.311736][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.337891][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.362960][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.370248][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.396535][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.414976][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.421922][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.447875][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.459321][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.467004][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.493027][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.510709][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.518173][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.525218][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.533140][ T4188] Cannot create hsr debugfs directory [ 59.554404][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.561467][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.587932][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.630072][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.637087][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.662991][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.684242][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.692308][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.699318][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.707411][ T4194] Cannot create hsr debugfs directory [ 59.739190][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.746044][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.752618][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.760537][ T4186] Cannot create hsr debugfs directory [ 59.833858][ T4200] device hsr_slave_0 entered promiscuous mode [ 59.840964][ T4200] device hsr_slave_1 entered promiscuous mode [ 59.848363][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.856360][ T4200] Cannot create hsr debugfs directory [ 59.935520][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 60.015361][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 60.024872][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 60.036163][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 60.047691][ T4192] Bluetooth: hci0: command 0x0409 tx timeout [ 60.063734][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.077086][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.089385][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.101201][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.158003][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.179178][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.200904][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.213014][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.262778][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.272089][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.292411][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.308608][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.317131][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.343695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.359893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.372815][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.396880][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.410835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.419858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.429433][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.436736][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.456380][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.470370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.479082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.488799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.497766][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.504990][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.513746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.535231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.547469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.556301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.564999][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.573616][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.595886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.603882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.613705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.627625][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.636582][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.666068][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.680551][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.690690][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.703562][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.715190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.723605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.743514][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.752570][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.773221][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.803145][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.821774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.832304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.874307][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.886489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.896150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.904468][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.911566][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.919849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.929568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.938428][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.945635][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.953956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.963215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.977160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.986580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.996496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.007800][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.024186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.052286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.061652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.071073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.079792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.088122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.097445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.116586][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.131114][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.139770][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.149697][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.167892][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.177057][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.187041][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.194082][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.203663][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.212914][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.221858][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.228939][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.238140][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.246470][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.256213][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.267408][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.277099][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.285961][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.294334][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.312256][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.326828][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.336371][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.344199][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.352041][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.367537][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.404502][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.419251][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.440379][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.454158][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.469966][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.479345][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.489173][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.498586][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.507324][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.516547][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.525041][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.533657][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.543695][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.552209][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.559445][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.572822][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.581492][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.589304][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.599189][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.617159][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.627889][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.635858][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.643566][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.652524][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.662123][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.685344][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.703204][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.722714][ T4187] device veth0_vlan entered promiscuous mode [ 61.745726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.758588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.768698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.778274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.788044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.797095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.807087][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.814306][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.822332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.830924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.841763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.849937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.858929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.868352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.877674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.886398][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.893454][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.903970][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.912846][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.927662][ T4187] device veth1_vlan entered promiscuous mode [ 61.943492][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.966323][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.974402][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.984876][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.993713][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.014304][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.022545][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 62.044278][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.058280][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.069371][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.083987][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.093833][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.111978][ T4187] device veth0_macvtap entered promiscuous mode [ 62.118634][ T4192] Bluetooth: hci0: command 0x041b tx timeout [ 62.125072][ T4192] Bluetooth: hci4: command 0x041b tx timeout [ 62.133167][ T4192] Bluetooth: hci2: command 0x041b tx timeout [ 62.139950][ T4192] Bluetooth: hci3: command 0x041b tx timeout [ 62.139998][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.161286][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.172061][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.186875][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.198502][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.207720][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.216955][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.226345][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.235754][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.246075][ T4187] device veth1_macvtap entered promiscuous mode [ 62.263116][ T4200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.274054][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.307825][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.320575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.329265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.344646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.353644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.369404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.379197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.387510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.407767][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.419716][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.444510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.453374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.470508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.480927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.491037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.506128][ T4188] device veth0_vlan entered promiscuous mode [ 62.521551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.530475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.541810][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.567496][ T4188] device veth1_vlan entered promiscuous mode [ 62.583629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.594396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.609348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.619559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.638999][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.648048][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.658333][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.667373][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.707810][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.717835][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.729324][ T4194] device veth0_vlan entered promiscuous mode [ 62.752496][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.760759][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.768828][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.778752][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.787509][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.797212][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.812814][ T4194] device veth1_vlan entered promiscuous mode [ 62.821379][ T4188] device veth0_macvtap entered promiscuous mode [ 62.837434][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.846503][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.855235][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.862848][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.882283][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.907568][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.919606][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.928259][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.938503][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.947126][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.957892][ T4188] device veth1_macvtap entered promiscuous mode [ 62.970953][ T4186] device veth0_vlan entered promiscuous mode [ 62.999034][ T4186] device veth1_vlan entered promiscuous mode [ 63.036184][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.036507][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.051527][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.060986][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.066540][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.077399][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.087015][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.103445][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.115244][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.127201][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.140940][ T4194] device veth0_macvtap entered promiscuous mode [ 63.161054][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.170001][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.178423][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.188414][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.198044][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.207115][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.224346][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.236628][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.249589][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.261418][ T4194] device veth1_macvtap entered promiscuous mode [ 63.276135][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.286059][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.294874][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.304304][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.313674][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.325419][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.334132][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.343090][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.352360][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.371202][ T4186] device veth0_macvtap entered promiscuous mode [ 63.392399][ T4186] device veth1_macvtap entered promiscuous mode [ 63.403181][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.420538][ T4200] device veth0_vlan entered promiscuous mode [ 63.426892][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.430107][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.444862][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.457298][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.468184][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.479134][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.488454][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.497292][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.505566][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.513338][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.521924][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.531615][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.541149][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.550123][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.558458][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.581807][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.593490][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.603541][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.614424][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.626027][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.636752][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.648344][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.658519][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.669422][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.680494][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.691401][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.702662][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.721062][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.739093][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.750807][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.763630][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.781706][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.794057][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.804317][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.815063][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.825771][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.837099][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.848210][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.858643][ T4200] device veth1_vlan entered promiscuous mode [ 63.873335][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.884251][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.893660][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.902836][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.924270][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.933381][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.953405][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.976808][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985852][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.995139][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.070975][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.096760][ T24] Bluetooth: hci1: command 0x040f tx timeout [ 64.120029][ T4200] device veth0_macvtap entered promiscuous mode [ 64.148076][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.159833][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.161440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.183412][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.185723][ T4192] Bluetooth: hci3: command 0x040f tx timeout [ 64.202917][ T4192] Bluetooth: hci2: command 0x040f tx timeout [ 64.209253][ T4192] Bluetooth: hci4: command 0x040f tx timeout [ 64.209847][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.215646][ T4192] Bluetooth: hci0: command 0x040f tx timeout [ 64.246567][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.297182][ T4200] device veth1_macvtap entered promiscuous mode [ 64.363428][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.383009][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.394224][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.403886][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.422060][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.432985][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.454973][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.466492][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.476859][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.487603][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.509111][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.525329][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.533430][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.548098][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.560869][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.584092][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.594738][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.610118][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.621110][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.636416][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.650372][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.667169][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.682505][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.696383][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.713872][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.723612][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.735067][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.748041][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.763928][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.773741][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.783177][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.798224][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.830278][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.864882][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.881795][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.917411][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.929147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.946028][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.967726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.990250][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.007870][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.025683][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.071051][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.090820][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.131076][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.154180][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.181389][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.213097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.261182][ T4280] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.565753][ T4294] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 65.620318][ T4297] loop2: detected capacity change from 0 to 128 [ 65.645127][ T4297] ======================================================= [ 65.645127][ T4297] WARNING: The mand mount option has been deprecated and [ 65.645127][ T4297] and is ignored by this kernel. Remove the mand [ 65.645127][ T4297] option from the mount to silence this warning. [ 65.645127][ T4297] ======================================================= [ 65.714795][ T4297] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 65.737519][ T4297] hpfs: filesystem error: improperly stopped [ 65.743557][ T4297] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 65.757995][ T4297] hpfs: You really don't want any checks? You are crazy... [ 65.765319][ T4297] hpfs: Code page index out of array [ 65.770750][ T4297] hpfs: code page support is disabled [ 65.779703][ T4297] hpfs: hpfs_map_4sectors(): unaligned read [ 65.792037][ T4297] hpfs: hpfs_map_4sectors(): unaligned read [ 65.800695][ T4297] hpfs: filesystem error: unable to find root dir [ 65.914790][ T4192] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.018737][ T4299] loop2: detected capacity change from 0 to 4096 [ 66.175552][ T24] Bluetooth: hci1: command 0x0419 tx timeout [ 66.181777][ T4192] usb 1-1: Using ep0 maxpacket: 8 [ 66.266058][ T24] Bluetooth: hci0: command 0x0419 tx timeout [ 66.279729][ T24] Bluetooth: hci4: command 0x0419 tx timeout [ 66.312129][ T24] Bluetooth: hci2: command 0x0419 tx timeout [ 66.350640][ T4301] loop2: detected capacity change from 0 to 256 [ 66.358631][ T24] Bluetooth: hci3: command 0x0419 tx timeout [ 66.502822][ T4192] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 66.522499][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.572502][ T4192] usb 1-1: Product: syz [ 66.608005][ T4192] usb 1-1: Manufacturer: syz [ 66.646703][ T4192] usb 1-1: SerialNumber: syz [ 66.705623][ T4192] usb 1-1: config 0 descriptor?? [ 66.768186][ T4192] gspca_main: se401-2.14.0 probing 047d:5003 [ 66.854090][ T4319] loop1: detected capacity change from 0 to 2048 [ 66.876697][ T4321] loop3: detected capacity change from 0 to 512 [ 66.921076][ T4319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.971886][ T4321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 67.031839][ T4321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 67.056196][ T4321] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.073040][ T4321] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.20: attempt to clear invalid blocks 1024 len 1 [ 67.150749][ T4321] EXT4-fs (loop3): Remounting filesystem read-only [ 67.169675][ T4321] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.20: bg 0: block 361: padding at end of block bitmap is not set [ 67.204998][ T4192] gspca_se401: Wrong descriptor type [ 67.240811][ T4321] EXT4-fs (loop3): Remounting filesystem read-only [ 67.274707][ T4321] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 67.292577][ T4337] loop1: detected capacity change from 0 to 64 [ 67.296404][ T4321] EXT4-fs (loop3): Remounting filesystem read-only [ 67.330304][ T4321] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.20: invalid indirect mapped block 1811939328 (level 0) [ 67.396142][ T4321] EXT4-fs (loop3): Remounting filesystem read-only [ 67.402843][ T4321] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.20: invalid indirect mapped block 2185560079 (level 1) [ 67.441690][ T4192] usb 1-1: USB disconnect, device number 2 [ 67.453322][ T4321] EXT4-fs (loop3): Remounting filesystem read-only [ 67.468956][ T4321] EXT4-fs (loop3): 1 truncate cleaned up [ 67.480974][ T4321] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 67.583268][ T4337] attempt to access beyond end of device [ 67.583268][ T4337] loop1: rw=0, want=68, limit=64 [ 67.597147][ T4337] Buffer I/O error on dev loop1, logical block 67, async page read [ 67.605357][ T4337] attempt to access beyond end of device [ 67.605357][ T4337] loop1: rw=0, want=69, limit=64 [ 67.616452][ T4337] Buffer I/O error on dev loop1, logical block 68, async page read [ 67.635002][ T4337] attempt to access beyond end of device [ 67.635002][ T4337] loop1: rw=0, want=70, limit=64 [ 67.655412][ T4337] Buffer I/O error on dev loop1, logical block 69, async page read [ 67.667803][ T4337] attempt to access beyond end of device [ 67.667803][ T4337] loop1: rw=0, want=71, limit=64 [ 67.699142][ T4337] Buffer I/O error on dev loop1, logical block 70, async page read [ 67.738030][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.738897][ T4337] attempt to access beyond end of device [ 67.738897][ T4337] loop1: rw=0, want=72, limit=64 [ 67.770857][ T4337] Buffer I/O error on dev loop1, logical block 71, async page read [ 67.781161][ T4337] attempt to access beyond end of device [ 67.781161][ T4337] loop1: rw=0, want=73, limit=64 [ 67.839629][ T4337] Buffer I/O error on dev loop1, logical block 72, async page read [ 67.878336][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.889166][ T4337] attempt to access beyond end of device [ 67.889166][ T4337] loop1: rw=0, want=74, limit=64 [ 67.903834][ T4337] Buffer I/O error on dev loop1, logical block 73, async page read [ 67.956462][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.050517][ T4337] attempt to access beyond end of device [ 68.050517][ T4337] loop1: rw=0, want=68, limit=64 [ 68.080407][ T4337] Buffer I/O error on dev loop1, logical block 67, async page read [ 68.086585][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.109307][ T4337] attempt to access beyond end of device [ 68.109307][ T4337] loop1: rw=0, want=69, limit=64 [ 68.148825][ T4337] Buffer I/O error on dev loop1, logical block 68, async page read [ 68.232097][ T4337] attempt to access beyond end of device [ 68.232097][ T4337] loop1: rw=0, want=70, limit=64 [ 68.373987][ T4337] Buffer I/O error on dev loop1, logical block 69, async page read [ 68.521945][ T4366] ODEBUG: Out of memory. ODEBUG disabled [ 68.547636][ T4357] chnl_net:caif_netlink_parms(): no params data found [ 68.848767][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.866870][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.875362][ T4357] device bridge_slave_0 entered promiscuous mode [ 68.886913][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.894067][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.902225][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.903045][ T4357] device bridge_slave_1 entered promiscuous mode [ 68.969672][ T4357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.072376][ T4357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.141250][ T4400] kvm: pic: non byte write [ 69.174742][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 69.227203][ T4357] team0: Port device team_slave_0 added [ 69.236263][ T4357] team0: Port device team_slave_1 added [ 69.315161][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.339010][ T4357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.340484][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.361542][ T4357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.423511][ T4357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.427955][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.455387][ T4357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.462405][ T4357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.516980][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.552185][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.571938][ T4357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.590486][ T7] usb 3-1: config 0 descriptor?? [ 69.734502][ T4357] device hsr_slave_0 entered promiscuous mode [ 69.777797][ T4357] device hsr_slave_1 entered promiscuous mode [ 69.780880][ T4421] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 69.819983][ T4357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.827649][ T4357] Cannot create hsr debugfs directory [ 69.879988][ T4376] loop0: detected capacity change from 0 to 32768 [ 70.001903][ T4376] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.37 (4376) [ 70.080371][ T4380] udc-core: couldn't find an available UDC or it's busy [ 70.094450][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.147926][ T4376] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 70.174959][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.204163][ T4376] BTRFS info (device loop0): using free space tree [ 70.229621][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 70.243088][ T4376] BTRFS info (device loop0): has skinny extents [ 70.339275][ T1156] device hsr_slave_0 left promiscuous mode [ 70.343587][ T7] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 70.391579][ T1156] device hsr_slave_1 left promiscuous mode [ 70.414379][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.442931][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.515068][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.554423][ T7] usb 3-1: USB disconnect, device number 2 [ 70.579874][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.648309][ T1156] device bridge_slave_1 left promiscuous mode [ 70.673640][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.743139][ T1156] device bridge_slave_0 left promiscuous mode [ 70.750600][ T4376] BTRFS info (device loop0): enabling ssd optimizations [ 70.765939][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.841972][ T1156] device veth1_macvtap left promiscuous mode [ 70.848750][ T1156] device veth0_macvtap left promiscuous mode [ 70.855229][ T1156] device veth1_vlan left promiscuous mode [ 70.862513][ T1156] device veth0_vlan left promiscuous mode [ 71.069232][ T4460] loop3: detected capacity change from 0 to 32768 [ 71.169197][ T4460] JBD2: Ignoring recovery information on journal [ 71.224377][ T4460] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.292077][ T4460] (syz.3.53,4460,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 71.346326][ T4460] (syz.3.53,4460,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 71.361802][ T4460] (syz.3.53,4460,1):ocfs2_mknod:298 ERROR: status = -2 [ 71.395223][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401863][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.411244][ T4460] (syz.3.53,4460,1):ocfs2_mknod:502 ERROR: status = -2 [ 71.422280][ T4460] (syz.3.53,4460,1):ocfs2_mkdir:659 ERROR: status = -2 [ 71.481848][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 71.510308][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 71.569097][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 71.620669][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.637147][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.646728][ T4476] fuse: root generation should be zero [ 71.863713][ T1156] bond0 (unregistering): Released all slaves [ 71.969952][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 72.043059][ T4357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.106123][ T4357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.141089][ T4357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.202907][ T4357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.264519][ T4504] loop1: detected capacity change from 0 to 1024 [ 72.265315][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 72.351779][ T4504] EXT4-fs (loop1): Ignoring removed bh option [ 72.397357][ T4507] loop3: detected capacity change from 0 to 256 [ 72.438146][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 72.465211][ T4507] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.496277][ T4507] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 72.522189][ T4366] Set syz1 is full, maxelem 65536 reached [ 72.564999][ T4507] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 72.594751][ T4357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.733036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.779912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.785868][ T4504] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.825860][ T4357] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.851628][ T4512] fido_id[4512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 72.976218][ T4516] device syzkaller0 entered promiscuous mode [ 73.017394][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (4180) [ 73.032541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.081631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.127696][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.134841][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.219944][ T4538] Zero length message leads to an empty skb [ 73.228959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.272943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.426007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.542208][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.549602][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.681081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.920757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.950143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.976279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.019874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.033434][ T4564] loop3: detected capacity change from 0 to 128 [ 74.075615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.084220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.105412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.127167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.155436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.158200][ T4564] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 74.167544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.334776][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 74.557321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.587404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.639272][ T4357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.868797][ T4590] netlink: 64 bytes leftover after parsing attributes in process `syz.1.79'. [ 74.922345][ T4593] device syzkaller1 entered promiscuous mode [ 74.996661][ T4590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.360366][ T26] audit: type=1326 audit(1783564615.929:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.83" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca6fef1e59 code=0x0 [ 75.392825][ T4607] raw_sendmsg: syz.1.84 forgot to set AF_INET. Fix it! [ 75.410110][ T4613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.439158][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.454449][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.481076][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.524180][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.571134][ T4357] device veth0_vlan entered promiscuous mode [ 75.589717][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.600234][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.632595][ T4357] device veth1_vlan entered promiscuous mode [ 75.788795][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.802482][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.832960][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.867280][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.896498][ T4357] device veth0_macvtap entered promiscuous mode [ 75.940545][ T4357] device veth1_macvtap entered promiscuous mode [ 76.050327][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.067117][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.077691][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.088543][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.099490][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.110377][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.122108][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.133387][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.145653][ T4357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.160569][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.191067][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.236333][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.284175][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.315451][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.330285][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.342019][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.364592][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.375141][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.386018][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.396352][ T4357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.407183][ T4357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.417345][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.426748][ T4357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.438641][ T4620] chnl_net:caif_netlink_parms(): no params data found [ 76.467372][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.501820][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.543730][ T4357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586422][ T4357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624631][ T4357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633364][ T4357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.882783][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.899757][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.919481][ T4620] device bridge_slave_0 entered promiscuous mode [ 76.955765][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.974981][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.994404][ T4620] device bridge_slave_1 entered promiscuous mode [ 77.012455][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.037794][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.089344][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.104345][ T4620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.114479][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.129656][ T4620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.142849][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.165795][ T1156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.179655][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.222948][ T1156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.249808][ T4620] team0: Port device team_slave_0 added [ 77.271691][ T4620] team0: Port device team_slave_1 added [ 77.277106][ T4659] loop5: detected capacity change from 0 to 128 [ 77.318238][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.320253][ T4659] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 77.333163][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.338925][ T4659] ; already mounted read-only [ 77.353241][ T4620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.369393][ T4659] hpfs: filesystem error: improperly stopped [ 77.386822][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.401994][ T4659] [ 77.404352][ T4659] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.406427][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.420990][ T4659] hpfs: You really don't want any checks? You are crazy... [ 77.444656][ T4620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.460347][ T4659] hpfs: Code page index out of array [ 77.467263][ T4659] hpfs: code page support is disabled [ 77.472965][ T4659] hpfs: hpfs_map_4sectors(): unaligned read [ 77.481292][ T4659] hpfs: hpfs_map_4sectors(): unaligned read [ 77.488846][ T4659] hpfs: filesystem error: unable to find root dir [ 77.513304][ T1156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.565575][ T26] audit: type=1800 audit(1783564618.129:3): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="/" dev="fuse" ino=1 res=0 errno=0 [ 77.710412][ T24] Bluetooth: hci4: command 0x0409 tx timeout [ 77.731130][ T1156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.750590][ T4620] device hsr_slave_0 entered promiscuous mode [ 77.797943][ T4620] device hsr_slave_1 entered promiscuous mode [ 77.821883][ T4620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.844600][ T4620] Cannot create hsr debugfs directory [ 77.868613][ T4675] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 77.892022][ T4684] loop5: detected capacity change from 0 to 4096 [ 77.974297][ T4684] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 78.387835][ T4620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.727416][ T4684] syz.5.95 (4684) used greatest stack depth: 20880 bytes left [ 79.073020][ T4717] loop1: detected capacity change from 0 to 256 [ 79.119704][ T4717] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.181757][ T4717] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 79.253833][ T4717] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.615852][ T4620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.654812][ T4520] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.673405][ T4620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.699185][ T4620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.745542][ T4726] loop0: detected capacity change from 0 to 1024 [ 79.774856][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 79.820024][ T4726] EXT4-fs (loop0): Ignoring removed bh option [ 79.887404][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,minixdf,. Quota mode: none. [ 79.919652][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.959776][ T4620] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.988114][ T4726] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.105: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 80.011529][ T4726] EXT4-fs (loop0): Remounting filesystem read-only [ 80.023414][ T4734] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.105: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 80.044771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.050221][ T4734] EXT4-fs (loop0): Remounting filesystem read-only [ 80.053344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.067658][ T4520] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 80.099053][ T4520] usb 2-1: config 0 has an invalid descriptor of length 62, skipping remainder of the config [ 80.109257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.110146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.144313][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.151475][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.166443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.174754][ T4520] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.181474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.197027][ T4726] syz.0.105 (4726) used greatest stack depth: 20864 bytes left [ 80.202489][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.211694][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.224856][ T4520] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 80.235325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.258075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.280299][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.303241][ T4520] usb 2-1: config 0 descriptor?? [ 80.321739][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.348461][ T4520] usb-storage 2-1:0.0: USB Mass Storage device detected [ 80.360252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.375283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.397766][ T4520] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 80.407486][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.417071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.452323][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.481317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.512230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.543796][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.560682][ T4620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.565001][ T4187] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.591908][ T4620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.615369][ T4520] usb 2-1: USB disconnect, device number 2 [ 80.624449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.640485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.651607][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.665031][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.695241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.703367][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.748514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.771310][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.771972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.787638][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 80.805364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.852783][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.863667][ T4187] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.930489][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 80.956780][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.001862][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.081701][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 81.098738][ T4187] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.122030][ T4740] loop5: detected capacity change from 0 to 40427 [ 81.163007][ T4740] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 81.171694][ T4745] loop2: detected capacity change from 0 to 32768 [ 81.179668][ T4740] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 81.195019][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 81.253746][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.267326][ T4740] F2FS-fs (loop5): invalid crc value [ 81.273840][ T4745] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.107 (4745) [ 81.321340][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.350708][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.352179][ T4740] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 81.376134][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.425723][ T4745] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 81.446463][ T4620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.451558][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.465023][ T4745] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.475428][ T4762] loop1: detected capacity change from 0 to 4096 [ 81.509122][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.564681][ T4745] BTRFS info (device loop2): use zstd compression, level 3 [ 81.568870][ T4762] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 81.595474][ T4745] BTRFS info (device loop2): use no compression [ 81.601777][ T4745] BTRFS info (device loop2): using free space tree [ 81.606273][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.614222][ T4745] BTRFS info (device loop2): has skinny extents [ 81.660089][ T4762] EXT4-fs (loop1): shut down requested (0) [ 81.717899][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.754127][ T1156] device hsr_slave_0 left promiscuous mode [ 81.770608][ T4740] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 81.797054][ T4740] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 81.806611][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.866107][ T4187] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.880421][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 81.924740][ T1156] device hsr_slave_1 left promiscuous mode [ 82.002555][ T4763] handle_bad_sector: 4 callbacks suppressed [ 82.002572][ T4763] attempt to access beyond end of device [ 82.002572][ T4763] loop5: rw=2049, want=45104, limit=40427 [ 82.023438][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.044991][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.053412][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.061609][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.077818][ T1156] device bridge_slave_1 left promiscuous mode [ 82.084274][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.094427][ T4745] BTRFS info (device loop2): enabling ssd optimizations [ 82.101771][ T26] audit: type=1804 audit(1783564622.669:4): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.108" name="/newroot/4/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 82.133271][ T1156] device bridge_slave_0 left promiscuous mode [ 82.148936][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.212855][ T1156] device veth1_macvtap left promiscuous mode [ 82.258673][ T1156] device veth0_macvtap left promiscuous mode [ 82.281769][ T1156] device veth1_vlan left promiscuous mode [ 82.309454][ T1156] device veth0_vlan left promiscuous mode [ 83.228150][ T4808] loop5: detected capacity change from 0 to 32768 [ 83.293900][ T4808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.112 (4808) [ 83.370580][ T4808] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 83.389624][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 83.439483][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 83.475129][ T4808] BTRFS info (device loop5): force clearing of disk cache [ 83.482715][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.498216][ T4808] BTRFS info (device loop5): use zlib compression, level 3 [ 83.509241][ T4808] BTRFS info (device loop5): enabling ssd optimizations [ 83.516515][ T4808] BTRFS info (device loop5): using spread ssd allocation scheme [ 83.534510][ T4808] BTRFS info (device loop5): using free space tree [ 83.551271][ T4808] BTRFS info (device loop5): has skinny extents [ 83.560279][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.744338][ T4808] BTRFS info (device loop5): clearing free space tree [ 83.771766][ T4808] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.795747][ T1156] bond0 (unregistering): Released all slaves [ 83.804678][ T4808] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.935834][ T4827] Bluetooth: hci4: command 0x0419 tx timeout [ 83.937032][ T4808] BTRFS info (device loop5): creating free space tree [ 83.998992][ T4808] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.059851][ T4808] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.135430][ T4808] BTRFS info (device loop5): checking UUID tree [ 84.310062][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.320264][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.427245][ T4620] device veth0_vlan entered promiscuous mode [ 84.481304][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.510850][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.572451][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.600962][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.631938][ T4620] device veth1_vlan entered promiscuous mode [ 84.755052][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.774186][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.815528][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.851658][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.925141][ T4620] device veth0_macvtap entered promiscuous mode [ 84.945639][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.974863][ T4533] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.002654][ T4620] device veth1_macvtap entered promiscuous mode [ 85.081968][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.124033][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.149142][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.177628][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.207287][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.208533][ T4808] BTRFS info (device loop5): balance: start -d -m [ 85.229354][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.263243][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.298099][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.302768][ T4808] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 85.340269][ T4533] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.350750][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.358392][ T4533] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.376884][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.387491][ T4533] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.410713][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.430953][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.455043][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.474591][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.492688][ T4808] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 85.504801][ T4533] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.513871][ T4533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.534681][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.545355][ T4533] usb 3-1: SerialNumber: syz [ 85.569018][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.602884][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.606045][ T4533] cdc_ether 3-1:1.0: skipping garbage [ 85.649278][ T4533] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 85.657401][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.668839][ T4533] usb 3-1: bad CDC descriptors [ 85.717996][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.743692][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.790944][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.825311][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.870725][ T4620] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.906147][ T4620] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924822][ T4808] BTRFS info (device loop5): found 12 extents, stage: move data extents [ 85.925956][ T4620] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.958098][ T4620] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981884][ T4533] usb 3-1: USB disconnect, device number 3 [ 86.091377][ T4808] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 86.161800][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.179483][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.235654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.276076][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.285614][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.298106][ T4808] BTRFS info (device loop5): balance: ended with status: 0 [ 86.313235][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.421963][ T4896] chnl_net:caif_netlink_parms(): no params data found [ 86.540702][ T4924] kvm: pic: level sensitive irq not supported [ 86.540952][ T4924] kvm: pic: level sensitive irq not supported [ 86.575341][ T4924] kvm: pic: single mode not supported [ 86.581795][ T4924] kvm: pic: single mode not supported [ 86.674723][ T4924] kvm: pic: level sensitive irq not supported [ 86.738950][ T1332] cfg80211: failed to load regulatory.db [ 86.758090][ T4924] kvm: pic: level sensitive irq not supported [ 86.758400][ T4924] kvm: pic: level sensitive irq not supported [ 86.837561][ T4927] block device autoloading is deprecated and will be removed. [ 86.974259][ T4924] kvm: pic: single mode not supported [ 87.559433][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 87.569373][ T4924] kvm: pic: level sensitive irq not supported [ 87.571032][ T4924] kvm: pic: single mode not supported [ 87.607075][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.772310][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.841207][ T4896] device bridge_slave_0 entered promiscuous mode [ 87.961845][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 88.107053][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.114184][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.132827][ T4896] device bridge_slave_1 entered promiscuous mode [ 88.133818][ T4958] loop6: detected capacity change from 0 to 128 [ 88.204491][ T4954] tipc: Started in network mode [ 88.224493][ T4954] tipc: Node identity faeb6c64625d, cluster identity 4711 [ 88.234725][ T4954] tipc: Enabled bearer , priority 0 [ 88.273254][ T4896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.285860][ T4958] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 88.301472][ T4958] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.400338][ T4959] device syzkaller0 entered promiscuous mode [ 88.485484][ T4896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.513712][ T4979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 88.577966][ T4967] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 88.593470][ T4953] tipc: Resetting bearer [ 88.602272][ T4967] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.640442][ T4953] tipc: Disabling bearer [ 88.708115][ T4896] team0: Port device team_slave_0 added [ 88.717145][ T4896] team0: Port device team_slave_1 added [ 88.739941][ T4958] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 88.778127][ T4971] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 88.798607][ T4896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.825163][ T4896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.857138][ T4896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.870699][ T4896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.891874][ T4896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.926490][ T4896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.990742][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.168358][ T4896] device hsr_slave_0 entered promiscuous mode [ 89.178889][ T4896] device hsr_slave_1 entered promiscuous mode [ 89.186179][ T4896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.195680][ T4896] Cannot create hsr debugfs directory [ 89.215678][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.356611][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.374900][ T5009] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.465515][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.614851][ T4533] Bluetooth: hci0: command 0x041b tx timeout [ 89.776825][ T4896] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 89.790393][ T4896] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 89.826866][ T4896] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 89.846364][ T4896] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.032583][ T4896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.055492][ T5039] loop2: detected capacity change from 0 to 256 [ 90.068530][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.082695][ T5039] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.104108][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.104262][ T5037] syz.6.155 uses obsolete (PF_INET,SOCK_PACKET) [ 90.121094][ T4896] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.172036][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.194413][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.216555][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.223682][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.233512][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.247490][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.271793][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.296899][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.304022][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.397076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.419147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.433758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.455932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.465954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.476954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.486513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.498195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.506720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.518029][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.526821][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.572553][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.777705][ T5059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.901079][ T1156] device hsr_slave_0 left promiscuous mode [ 90.996198][ T1156] device hsr_slave_1 left promiscuous mode [ 91.026689][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.050928][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.121424][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.161587][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.292790][ T1156] device bridge_slave_1 left promiscuous mode [ 91.299634][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.309105][ T1156] device bridge_slave_0 left promiscuous mode [ 91.320742][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.340618][ T1156] device veth1_macvtap left promiscuous mode [ 91.352442][ T5074] loop6: detected capacity change from 0 to 1024 [ 91.354706][ T1156] device veth0_macvtap left promiscuous mode [ 91.373169][ T1156] device veth1_vlan left promiscuous mode [ 91.379363][ T1156] device veth0_vlan left promiscuous mode [ 91.609094][ T5074] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 91.632574][ T5074] hfsplus: xattr searching failed [ 91.663686][ T5074] hfsplus: can't free extent [ 91.693732][ T5053] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 91.695416][ T4520] Bluetooth: hci0: command 0x040f tx timeout [ 91.728263][ T5053] hfsplus: xattr searching failed [ 91.899153][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 91.927676][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 91.963709][ T5084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.994898][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.013968][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.099176][ T1156] bond0 (unregistering): Released all slaves [ 92.169655][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.188986][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.213255][ T5084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.249945][ T4896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.272014][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.164'. [ 92.352892][ T5096] loop5: detected capacity change from 0 to 1024 [ 92.410220][ T5099] bond1: (slave ip6gretap1): no link monitoring support [ 92.429092][ T5099] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 92.452768][ T5099] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 92.466856][ T5096] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.697261][ T5116] loop1: detected capacity change from 0 to 1024 [ 92.763868][ T5116] EXT4-fs (loop1): Ignoring removed bh option [ 92.840831][ T5116] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,dioread_lock,barrier=0x0000000000000004,nolazytime,usrjquota=,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 92.858137][ T5126] loop2: detected capacity change from 0 to 128 [ 92.878768][ T5121] < [ 92.887172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.900878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.955139][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.999903][ T5126] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.103367][ T5136] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 93.113238][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.113864][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.166480][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.193623][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.235077][ T4896] device veth0_vlan entered promiscuous mode [ 93.245388][ T5133] netlink: 76 bytes leftover after parsing attributes in process `syz.6.170'. [ 93.253768][ T5126] syz.2.168 (pid 5126) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 93.288026][ T4896] device veth1_vlan entered promiscuous mode [ 93.299889][ T5136] EXT4-fs (loop1): Remounting filesystem read-only [ 93.310465][ T4519] udevd[4519]: incorrect ext4 checksum on /dev/loop2 [ 93.315145][ T5126] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.168: Invalid inode table block 9382788408579232086 in block_group 0 [ 93.332931][ T5136] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.167: mark_inode_dirty error [ 93.359986][ T5136] EXT4-fs (loop1): Remounting filesystem read-only [ 93.366752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.391549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.421180][ T5126] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 93.434308][ T4896] device veth0_macvtap entered promiscuous mode [ 93.483335][ T4896] device veth1_macvtap entered promiscuous mode [ 93.563279][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.635894][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.681415][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.713466][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.733676][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.764310][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.775399][ T1332] Bluetooth: hci0: command 0x0419 tx timeout [ 93.799586][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.830930][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.893337][ T4896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.901072][ T4937] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 9382788408579232086 in block_group 0 [ 93.922673][ T5146] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 93.947743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.971794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.008925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.042091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.080839][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.116619][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.153695][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.189639][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.214140][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.237311][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.247508][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.258896][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.302393][ T4896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.333221][ T5165] netlink: 'syz.6.175': attribute type 4 has an invalid length. [ 94.386740][ T5170] netlink: 'syz.6.175': attribute type 4 has an invalid length. [ 94.434286][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.435060][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 94.458380][ T5186] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 94.458380][ T5186] The task syz.2.179 (5186) triggered the difference, watch for misbehavior. [ 94.477922][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.500954][ T4896] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.520310][ T4896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.535871][ T4896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548869][ T4896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.832251][ T4937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.856875][ T4937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.900511][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.974342][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.000514][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.044213][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.374876][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.375253][ T5226] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 95.399882][ T5225] netlink: 'syz.5.189': attribute type 1 has an invalid length. [ 95.454789][ T4533] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.468044][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.538283][ T5225] device veth3 entered promiscuous mode [ 95.749462][ T5242] loop2: detected capacity change from 0 to 512 [ 95.839078][ T5242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.888843][ T5242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.100869][ T5242] EXT4-fs (loop2): 1 truncate cleaned up [ 96.154722][ T5242] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 96.438439][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.484412][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.680563][ T5270] netlink: 76 bytes leftover after parsing attributes in process `syz.6.198'. [ 96.720282][ T5277] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 96.743737][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 96.945072][ T4230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.049350][ T5291] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.122827][ T5299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 97.250689][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 97.411469][ T5279] loop1: detected capacity change from 0 to 32768 [ 97.488408][ T5279] XFS (loop1): Mounting V5 Filesystem [ 97.552085][ T5279] XFS (loop1): Ending clean mount [ 99.205253][ T4194] XFS (loop1): Unmounting Filesystem [ 99.736005][ T5343] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.754435][ T5343] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 99.824634][ T5354] kvm: pic: single mode not supported [ 99.825137][ T5354] kvm: pic: single mode not supported [ 99.846553][ T5354] kvm: pic: level sensitive irq not supported [ 100.194834][ T4192] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 100.254721][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.684858][ T4192] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 100.749113][ T4192] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 101.105883][ T4192] usb 6-1: string descriptor 0 read error: -22 [ 101.112540][ T4192] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 101.144896][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.250248][ T4192] usb 6-1: low speed audio streaming not supported [ 101.295418][ T4192] usb 6-1: low speed audio streaming not supported [ 101.393837][ T4192] usb 6-1: selecting invalid altsetting 1 [ 101.442775][ T4192] usb_set_interface error [ 101.459060][ T4192] snd-usb-us122l: probe of 6-1:1.1 failed with error -22 [ 101.786052][ T5413] loop1: detected capacity change from 0 to 164 [ 102.105015][ T5413] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.800193][ T5401] loop7: detected capacity change from 0 to 40427 [ 102.874214][ T5401] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 102.901650][ T5401] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 102.954153][ T5435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 103.071668][ T5401] F2FS-fs (loop7): Found nat_bits in checkpoint [ 103.115076][ T5430] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 103.171804][ T5430] kvm: pic: non byte write [ 103.215663][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 103.249234][ T5401] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 103.253561][ T4230] usb 6-1: USB disconnect, device number 2 [ 103.261830][ T5401] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 103.487222][ T5464] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 103.589574][ T5467] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 103.774515][ T5401] attempt to access beyond end of device [ 103.774515][ T5401] loop7: rw=2049, want=45104, limit=40427 [ 104.088657][ T5487] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 104.133783][ T5487] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.837974][ T5518] Invalid argument reading file caps for ./file0 [ 106.364833][ T4192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.634602][ T4192] usb 2-1: Using ep0 maxpacket: 16 [ 106.785412][ T4192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.805467][ T4192] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.004738][ T4192] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.023447][ T4192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.054285][ T4192] usb 2-1: Product: syz [ 107.061051][ T4192] usb 2-1: Manufacturer: syz [ 107.071529][ T4192] usb 2-1: SerialNumber: syz [ 107.444827][ T4192] usb 2-1: 0:2 : does not exist [ 107.490171][ T4192] usb 2-1: USB disconnect, device number 3 [ 107.530442][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.648893][ T5640] loop2: detected capacity change from 0 to 128 [ 107.744647][ T26] audit: type=1804 audit(1783564648.309:5): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.267" name="/newroot/64/file0/bus" dev="loop2" ino=1048601 res=1 errno=0 [ 107.841919][ T26] audit: type=1804 audit(1783564648.349:6): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.267" name="/newroot/64/file0/bus" dev="loop2" ino=1048601 res=1 errno=0 [ 107.863720][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 108.008467][ T26] audit: type=1804 audit(1783564648.349:7): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.267" name="/newroot/64/file0/bus" dev="loop2" ino=1048601 res=1 errno=0 [ 108.045200][ T5654] vivid-004: ================= START STATUS ================= [ 108.534546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 108.564546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 108.574546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 108.584554][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.604566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.624548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.634547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.644548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.654548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 108.674547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.760733][ T5654] vivid-004: Radio HW Seek Mode: Bounded [ 109.865227][ T5654] vivid-004: Radio Programmable HW Seek: false [ 109.945780][ T5654] vivid-004: RDS Rx I/O Mode: Block I/O [ 109.951425][ T5654] vivid-004: Generate RBDS Instead of RDS: false [ 110.072493][ T5671] loop6: detected capacity change from 0 to 256 [ 110.124336][ T5654] vivid-004: RDS Reception: true [ 110.234768][ T5654] vivid-004: RDS Program Type: 0 inactive [ 110.276382][ T5654] vivid-004: RDS PS Name: inactive [ 110.362366][ T5654] vivid-004: RDS Radio Text: inactive [ 110.476442][ T5654] vivid-004: RDS Traffic Announcement: false inactive [ 110.483283][ T5654] vivid-004: RDS Traffic Program: false inactive [ 111.056726][ T5654] vivid-004: RDS Music: false inactive [ 111.159047][ T5654] vivid-004: ================== END STATUS ================== [ 111.634627][ T26] audit: type=1326 audit(1783564652.199:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.1.281" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff955089e59 code=0x7fc00000 [ 111.790822][ T26] audit: type=1326 audit(1783564652.199:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.1.281" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff955089e59 code=0x7fc00000 [ 111.814803][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.905490][ T5709] device syzkaller0 entered promiscuous mode [ 111.928480][ T5709] tipc: Started in network mode [ 111.939552][ T5709] tipc: Node identity 66bb83d981c5, cluster identity 4711 [ 111.954424][ T5709] tipc: Enabled bearer , priority 0 [ 112.014204][ T5711] device syzkaller0 entered promiscuous mode [ 112.058294][ T5708] tipc: Resetting bearer [ 112.102126][ T5708] tipc: Disabling bearer [ 112.296177][ T5721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 112.388432][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.495810][ T5727] loop7: detected capacity change from 0 to 512 [ 112.506339][ T5721] device bridge_slave_1 left promiscuous mode [ 112.512852][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.841028][ T5727] EXT4-fs (loop7): invalid journal inode [ 113.014314][ T5727] EXT4-fs (loop7): can't get journal size [ 113.608388][ T5727] EXT4-fs (loop7): 1 truncate cleaned up [ 113.668414][ T5727] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 114.294551][ C1] sched: RT throttling activated [ 114.498352][ T5744] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.557868][ T5747] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.583898][ T5743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.595265][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.295'. [ 114.604178][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.295'. [ 114.643397][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.718256][ T5743] bond1: (slave bond0): making interface the new active one [ 114.819095][ T26] audit: type=1326 audit(1783564655.389:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.2.297" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca6fef1e59 code=0x0 [ 114.828475][ T5743] bond1: (slave bond0): Enslaving as an active interface with an up link [ 114.919647][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 114.936826][ T5759] netlink: 24 bytes leftover after parsing attributes in process `syz.7.292'. [ 114.982941][ T5743] syz.6.295 (5743) used greatest stack depth: 19984 bytes left [ 115.091179][ T5766] [ 115.093543][ T5766] ====================================================== [ 115.100558][ T5766] WARNING: possible circular locking dependency detected [ 115.107585][ T5766] syzkaller #0 Not tainted [ 115.111992][ T5766] ------------------------------------------------------ [ 115.119001][ T5766] syz.6.299/5766 is trying to acquire lock: [ 115.124891][ T5766] ffff888051c71458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 115.136310][ T5766] [ 115.136310][ T5766] but task is already holding lock: [ 115.143675][ T5766] ffff888051c70120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 115.152661][ T5766] [ 115.152661][ T5766] which lock already depends on the new lock. [ 115.152661][ T5766] [ 115.163065][ T5766] [ 115.163065][ T5766] the existing dependency chain (in reverse order) is: [ 115.172079][ T5766] [ 115.172079][ T5766] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 115.179878][ T5766] lock_sock_nested+0x44/0x100 [ 115.185183][ T5766] smc_listen_out+0x105/0x3b0 [ 115.190390][ T5766] smc_listen_work+0x52a/0xd10 [ 115.195769][ T5766] process_one_work+0x867/0xff0 [ 115.201241][ T5766] worker_thread+0xad7/0x12a0 [ 115.206543][ T5766] kthread+0x42e/0x520 [ 115.211226][ T5766] ret_from_fork+0x1f/0x30 [ 115.216173][ T5766] [ 115.216173][ T5766] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 115.226351][ T5766] __lock_acquire+0x2c66/0x7b50 [ 115.231736][ T5766] lock_acquire+0x19e/0x400 [ 115.236773][ T5766] __flush_work+0x116/0x210 [ 115.241807][ T5766] __cancel_work_timer+0x3f4/0x560 [ 115.247446][ T5766] smc_clcsock_release+0x5c/0xe0 [ 115.252922][ T5766] __smc_release+0x644/0x7b0 [ 115.258047][ T5766] smc_close_non_accepted+0xd1/0x1f0 [ 115.263947][ T5766] smc_close_active+0xae2/0xea0 [ 115.269418][ T5766] __smc_release+0x9c/0x7b0 [ 115.274454][ T5766] smc_release+0x2c1/0x520 [ 115.279493][ T5766] sock_close+0xbf/0x210 [ 115.284269][ T5766] __fput+0x212/0x8c0 [ 115.288790][ T5766] task_work_run+0x125/0x1a0 [ 115.294104][ T5766] exit_to_user_mode_loop+0x10f/0x130 [ 115.300023][ T5766] exit_to_user_mode_prepare+0xee/0x180 [ 115.306115][ T5766] syscall_exit_to_user_mode+0x16/0x40 [ 115.312124][ T5766] do_syscall_64+0x58/0xa0 [ 115.317081][ T5766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.323527][ T5766] [ 115.323527][ T5766] other info that might help us debug this: [ 115.323527][ T5766] [ 115.333853][ T5766] Possible unsafe locking scenario: [ 115.333853][ T5766] [ 115.341411][ T5766] CPU0 CPU1 [ 115.346780][ T5766] ---- ---- [ 115.352158][ T5766] lock(sk_lock-AF_SMC/1); [ 115.356682][ T5766] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.366234][ T5766] lock(sk_lock-AF_SMC/1); [ 115.373382][ T5766] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.380862][ T5766] [ 115.380862][ T5766] *** DEADLOCK *** [ 115.380862][ T5766] [ 115.389021][ T5766] 2 locks held by syz.6.299/5766: [ 115.394059][ T5766] #0: ffff888061abf410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 115.404386][ T5766] #1: ffff888051c70120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 115.413815][ T5766] [ 115.413815][ T5766] stack backtrace: [ 115.419732][ T5766] CPU: 1 PID: 5766 Comm: syz.6.299 Not tainted syzkaller #0 [ 115.427021][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.437108][ T5766] Call Trace: [ 115.440409][ T5766] [ 115.443340][ T5766] dump_stack_lvl+0x188/0x250 [ 115.448030][ T5766] ? load_image+0x410/0x410 [ 115.452576][ T5766] ? show_regs_print_info+0x20/0x20 [ 115.457788][ T5766] ? print_circular_bug+0x12b/0x1a0 [ 115.462996][ T5766] check_noncircular+0x296/0x330 [ 115.467957][ T5766] ? look_up_lock_class+0x71/0x110 [ 115.473083][ T5766] ? add_chain_block+0x9b0/0x9b0 [ 115.478026][ T5766] ? lockdep_lock+0xf1/0x1f0 [ 115.482641][ T5766] ? mark_lock+0x94/0x320 [ 115.486995][ T5766] ? _find_first_zero_bit+0xd1/0xf0 [ 115.492211][ T5766] __lock_acquire+0x2c66/0x7b50 [ 115.497106][ T5766] ? hlock_conflict+0x59/0x1f0 [ 115.501903][ T5766] ? __bfs+0x27a/0x560 [ 115.505978][ T5766] ? verify_lock_unused+0x140/0x140 [ 115.511205][ T5766] ? mark_lock+0x94/0x320 [ 115.515546][ T5766] ? __lock_acquire+0x13dc/0x7b50 [ 115.520587][ T5766] ? lockdep_unlock+0x143/0x2e0 [ 115.525446][ T5766] lock_acquire+0x19e/0x400 [ 115.529956][ T5766] ? __flush_work+0xfa/0x210 [ 115.534566][ T5766] ? read_lock_is_recursive+0x10/0x10 [ 115.539950][ T5766] __flush_work+0x116/0x210 [ 115.544468][ T5766] ? __flush_work+0xfa/0x210 [ 115.549063][ T5766] ? flush_work+0x20/0x20 [ 115.553410][ T5766] ? try_to_grab_pending+0xfb/0x820 [ 115.558850][ T5766] ? mark_lock+0x94/0x320 [ 115.563198][ T5766] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.569195][ T5766] ? lock_chain_count+0x20/0x20 [ 115.574076][ T5766] ? mark_lock+0x94/0x320 [ 115.578473][ T5766] ? __cancel_work_timer+0x36a/0x560 [ 115.583774][ T5766] __cancel_work_timer+0x3f4/0x560 [ 115.588904][ T5766] ? cancel_work_sync+0x20/0x20 [ 115.593767][ T5766] ? __local_bh_enable_ip+0x136/0x1c0 [ 115.599157][ T5766] ? lockdep_hardirqs_on+0x94/0x140 [ 115.604465][ T5766] ? __local_bh_enable_ip+0x136/0x1c0 [ 115.609847][ T5766] ? _local_bh_enable+0xa0/0xa0 [ 115.614714][ T5766] smc_clcsock_release+0x5c/0xe0 [ 115.619666][ T5766] __smc_release+0x644/0x7b0 [ 115.624266][ T5766] smc_close_non_accepted+0xd1/0x1f0 [ 115.629578][ T5766] smc_close_active+0xae2/0xea0 [ 115.634442][ T5766] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 115.640089][ T5766] __smc_release+0x9c/0x7b0 [ 115.644613][ T5766] smc_release+0x2c1/0x520 [ 115.649059][ T5766] sock_close+0xbf/0x210 [ 115.653321][ T5766] ? sock_mmap+0x90/0x90 [ 115.657580][ T5766] __fput+0x212/0x8c0 [ 115.661576][ T5766] task_work_run+0x125/0x1a0 [ 115.666181][ T5766] exit_to_user_mode_loop+0x10f/0x130 [ 115.671574][ T5766] exit_to_user_mode_prepare+0xee/0x180 [ 115.677221][ T5766] syscall_exit_to_user_mode+0x16/0x40 [ 115.682959][ T5766] do_syscall_64+0x58/0xa0 [ 115.687402][ T5766] ? clear_bhb_loop+0x30/0x80 [ 115.692100][ T5766] ? clear_bhb_loop+0x30/0x80 [ 115.696789][ T5766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.702698][ T5766] RIP: 0033:0x7f0932a78e59 [ 115.707114][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.726918][ T5766] RSP: 002b:00007f0930cd1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.735769][ T5766] RAX: 0000000000000000 RBX: 00007f0932d00fa0 RCX: 00007f0932a78e59 [ 115.743792][ T5766] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 115.751750][ T5766] RBP: 00007f0932b0ee6f R08: 0000000000000000 R09: 0000000000000000 [ 115.759708][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.767669][ T5766] R13: 00007f0932d01038 R14: 00007f0932d00fa0 R15: 00007fffa0a40be8 [ 115.775649][ T5766] [ 115.778725][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.574713][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!