last executing test programs: 19.283867446s ago: executing program 4 (id=760): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='$\x00\x00\x00!\x00%', 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 18.341171521s ago: executing program 4 (id=764): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x89901) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17.186026799s ago: executing program 1 (id=768): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) close(r3) 17.184486059s ago: executing program 4 (id=769): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 13.760009473s ago: executing program 1 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) 13.722773993s ago: executing program 3 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000000f40)="$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") 11.666309586s ago: executing program 1 (id=786): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv4_newaddr={0x30, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x20, 0x8, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_RT_PRIORITY={0x17}, @IFA_FLAGS={0x8}]}, 0x30}}, 0x80) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 11.635669406s ago: executing program 3 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.643572602s ago: executing program 2 (id=781): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) gettid() recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r2}, 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 10.639628922s ago: executing program 3 (id=791): socket(0x25, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) close(r5) 10.302571197s ago: executing program 1 (id=782): landlock_create_ruleset(&(0x7f0000000440), 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf555}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_vmscan_lru_shrink_inactive\x00', r4, 0x0, 0x8000}, 0x18) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 9.51009662s ago: executing program 0 (id=783): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 6.617020395s ago: executing program 2 (id=784): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtaction={0x328, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x314}]}, 0x328}, 0x1, 0x0, 0x0, 0x814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) close_range(0xffffffffffffffff, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 6.610534225s ago: executing program 3 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.590494526s ago: executing program 0 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a7b000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf02}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 6.486577367s ago: executing program 4 (id=788): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0xf00, 0x1000) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './bus\x00'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0xf50f, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfff) readv(r3, &(0x7f0000000c40)=[{0x0}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 5.03960551s ago: executing program 1 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES8=0x0], 0x1, 0x19e, &(0x7f0000000240)="$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") 5.03582605s ago: executing program 0 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 4.761170645s ago: executing program 0 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x1, 0x0, {0x2, 0x14}, [@RTA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 4.748213815s ago: executing program 2 (id=793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2.715683406s ago: executing program 2 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.714565777s ago: executing program 1 (id=804): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2.700154377s ago: executing program 3 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2.697876587s ago: executing program 4 (id=795): openat$ppp(0xffffffffffffff9c, 0x0, 0x800000, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x42801) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) clock_settime(0x0, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x20008040) 2.51068761s ago: executing program 0 (id=796): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) gettid() recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r2}, 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 1.047792543s ago: executing program 2 (id=797): socket(0x25, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) close(r5) 1.047676403s ago: executing program 3 (id=798): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x3, 0x49a, &(0x7f00000004c0)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 80.812818ms ago: executing program 2 (id=799): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 79.899938ms ago: executing program 0 (id=811): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv4_newaddr={0x30, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x20, 0x8, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_RT_PRIORITY={0x17}, @IFA_FLAGS={0x8}]}, 0x30}}, 0x80) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 4 (id=800): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x800016, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 41.765916][ T4014] cgroup: Unknown subsys name 'net' [ 42.056751][ T4014] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.390268][ T4014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.659880][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 43.707391][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 43.811491][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.813604][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.816539][ T4025] device bridge_slave_0 entered promiscuous mode [ 43.833418][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.835458][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.838059][ T4029] device bridge_slave_0 entered promiscuous mode [ 43.841991][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.844036][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.846548][ T4025] device bridge_slave_1 entered promiscuous mode [ 43.858482][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.863043][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.866754][ T4029] device bridge_slave_1 entered promiscuous mode [ 43.937830][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.944549][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.952737][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.967971][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.999038][ T4025] team0: Port device team_slave_0 added [ 44.004572][ T4029] team0: Port device team_slave_0 added [ 44.016194][ T4029] team0: Port device team_slave_1 added [ 44.025230][ T4025] team0: Port device team_slave_1 added [ 44.050601][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 44.059885][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.062189][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.069271][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.075846][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.077796][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.085390][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.101286][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.103314][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.113023][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.116525][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 44.136666][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.138598][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.146894][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.262394][ T4029] device hsr_slave_0 entered promiscuous mode [ 44.310377][ T4029] device hsr_slave_1 entered promiscuous mode [ 44.352270][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 44.432172][ T4025] device hsr_slave_0 entered promiscuous mode [ 44.470361][ T4025] device hsr_slave_1 entered promiscuous mode [ 44.540255][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.542505][ T4025] Cannot create hsr debugfs directory [ 44.544267][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.546239][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.548932][ T4033] device bridge_slave_0 entered promiscuous mode [ 44.585993][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.588025][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.590910][ T4033] device bridge_slave_1 entered promiscuous mode [ 44.605908][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.607899][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.610676][ T4032] device bridge_slave_0 entered promiscuous mode [ 44.639628][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.642042][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.644629][ T4032] device bridge_slave_1 entered promiscuous mode [ 44.676289][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.703474][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.707906][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.711982][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.718245][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.720274][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.722970][ T4034] device bridge_slave_0 entered promiscuous mode [ 44.726378][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.728292][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.731716][ T4034] device bridge_slave_1 entered promiscuous mode [ 44.777734][ T4032] team0: Port device team_slave_0 added [ 44.781835][ T4033] team0: Port device team_slave_0 added [ 44.787220][ T4033] team0: Port device team_slave_1 added [ 44.797396][ T4032] team0: Port device team_slave_1 added [ 44.818996][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.823739][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.871986][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.873971][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.881662][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.885507][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.887443][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.895698][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.901210][ T4034] team0: Port device team_slave_0 added [ 44.909387][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.911394][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.918535][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.924730][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.926616][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.934157][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.948897][ T4034] team0: Port device team_slave_1 added [ 45.032203][ T4033] device hsr_slave_0 entered promiscuous mode [ 45.070525][ T4033] device hsr_slave_1 entered promiscuous mode [ 45.110284][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.112629][ T4033] Cannot create hsr debugfs directory [ 45.120738][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.122657][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.129615][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.172056][ T4032] device hsr_slave_0 entered promiscuous mode [ 45.210471][ T4032] device hsr_slave_1 entered promiscuous mode [ 45.250222][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.252446][ T4032] Cannot create hsr debugfs directory [ 45.254669][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.256899][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.264436][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.352003][ T4034] device hsr_slave_0 entered promiscuous mode [ 45.390435][ T4034] device hsr_slave_1 entered promiscuous mode [ 45.430189][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.432350][ T4034] Cannot create hsr debugfs directory [ 45.456108][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.480756][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 45.502145][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.558298][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.560374][ T4036] Bluetooth: hci1: command 0x0409 tx timeout [ 45.612135][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.640543][ T4055] Bluetooth: hci3: command 0x0409 tx timeout [ 45.735978][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 45.737695][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 45.806167][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.862236][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.912431][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.963188][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.028891][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.063645][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.120924][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.162222][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.254343][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.296416][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.336203][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.351030][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.431922][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.434936][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.438430][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.442285][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.476787][ T4032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.512726][ T4032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.572407][ T4032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.614977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.618386][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.621689][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.623870][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.626668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.629590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.632579][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.634560][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.636998][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.645362][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.649212][ T4032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.718832][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.721972][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.724971][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.727625][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.738604][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.748485][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.752771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.781344][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.783772][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.786238][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.788960][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.796595][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.819904][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.822815][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.825457][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.827366][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.829904][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.834502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.838372][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.840326][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.843040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.845962][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.848771][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.853197][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.855830][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.870572][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.877528][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.881476][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.884469][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.903450][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.906486][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.909228][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.914120][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.916780][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.919514][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.924665][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.942893][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.974248][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.992895][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.995598][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.006273][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.027603][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.029825][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.032915][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.035517][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.042661][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.054537][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.068494][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.072235][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.074777][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.076659][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.079391][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.097695][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.101664][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.104255][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.106174][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.108628][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.112478][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.115078][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.116949][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.132340][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.137770][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.141910][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.154491][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.157253][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.159977][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.161897][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.167249][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.182542][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.184747][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.186856][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.189389][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.193534][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.197782][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.207588][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.213900][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.216869][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.221123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.244133][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.246929][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.249706][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.253534][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.256260][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.258865][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.260874][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.264929][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.267759][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.285206][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.287766][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.291807][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.294643][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.296685][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.299012][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.303344][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.306235][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.321379][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.324574][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.327350][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.331211][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.333963][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.336703][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.339368][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.343678][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.346293][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.349043][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.357088][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.360439][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.372815][ T4029] device veth0_vlan entered promiscuous mode [ 47.376886][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.383708][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.388531][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.391451][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.394757][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.397852][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.401806][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.426819][ T4029] device veth1_vlan entered promiscuous mode [ 47.434654][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.437335][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.448399][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.461179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.476794][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.479492][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.504399][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.507243][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.510790][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.518188][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.521886][ T4025] device veth0_vlan entered promiscuous mode [ 47.526516][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.529528][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.543097][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.545943][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.553241][ T4029] device veth0_macvtap entered promiscuous mode [ 47.564092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.566983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.569720][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.570410][ T4016] Bluetooth: hci0: command 0x041b tx timeout [ 47.576853][ T4025] device veth1_vlan entered promiscuous mode [ 47.591623][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.594455][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.597222][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.601320][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.603515][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.608125][ T4029] device veth1_macvtap entered promiscuous mode [ 47.616822][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.622602][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.639074][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.642337][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 47.644753][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.647911][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.650509][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.690854][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.694833][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.697924][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.701635][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.721578][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.724214][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 47.726543][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.740485][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.747414][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.757197][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.759856][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.763855][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.768414][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.771840][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.774201][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.776632][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.785370][ T4025] device veth0_macvtap entered promiscuous mode [ 47.789931][ T4025] device veth1_macvtap entered promiscuous mode [ 47.800494][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 47.802232][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 47.814582][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.817249][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.821560][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.824261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.836399][ T4033] device veth0_vlan entered promiscuous mode [ 47.848542][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.852083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.883604][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.885735][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.889141][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.894061][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.898114][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.907934][ T4033] device veth1_vlan entered promiscuous mode [ 47.914536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.917110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.919827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.924917][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.927782][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.932236][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.936624][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.947267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.949933][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.975846][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.978367][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.983802][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.986024][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.016183][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.018877][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.022775][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.039585][ T1768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.050579][ T1768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.056658][ T4033] device veth0_macvtap entered promiscuous mode [ 48.063496][ T4033] device veth1_macvtap entered promiscuous mode [ 48.068482][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.072746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.075367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.077965][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.082359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.085017][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.087697][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.091855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.099804][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.104795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.107322][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.110928][ T4034] device veth0_vlan entered promiscuous mode [ 48.161809][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.164792][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.167542][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.177979][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.182512][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.187764][ T1768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.189930][ T1768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.195286][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.198165][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.202111][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.206577][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.209507][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.213275][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.216116][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.219871][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.223870][ T4034] device veth1_vlan entered promiscuous mode [ 48.235896][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.238519][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.242317][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.245035][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.247697][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.267551][ T4032] device veth0_vlan entered promiscuous mode [ 48.271561][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.275011][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.277534][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.301672][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.304183][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.306570][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.308951][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.326530][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.327551][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.329241][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.337890][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.344098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.353281][ T4034] device veth0_macvtap entered promiscuous mode [ 48.356550][ T4032] device veth1_vlan entered promiscuous mode [ 48.381557][ T4034] device veth1_macvtap entered promiscuous mode [ 48.432402][ T4103] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 48.432944][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.436423][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.440760][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.449525][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.454008][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.456702][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.459197][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.516657][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.519561][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.532964][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.535870][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.538431][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.543247][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.547645][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.572322][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.575896][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.579276][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.583471][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.591398][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.596962][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.599588][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.609710][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.612941][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.615843][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.619803][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.637563][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.640857][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.643327][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.646120][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.654980][ T4032] device veth0_macvtap entered promiscuous mode [ 48.662895][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.665623][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.668367][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.674760][ T4107] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 48.694227][ T4107] device veth1_macvtap left promiscuous mode [ 48.704726][ T4032] device veth1_macvtap entered promiscuous mode [ 48.730179][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.733805][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.736105][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.747484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.938109][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.950521][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.953714][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.956684][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.959421][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.963790][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.966443][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.969318][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.974166][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.097994][ T4112] xt_TCPMSS: Only works on TCP SYN packets [ 49.730782][ T4074] Bluetooth: hci0: command 0x040f tx timeout [ 49.732754][ T4074] Bluetooth: hci1: command 0x040f tx timeout [ 49.792178][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.794559][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.800805][ T4074] Bluetooth: hci3: command 0x040f tx timeout [ 49.834664][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.837591][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.841141][ T1768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.021079][ T4055] Bluetooth: hci2: command 0x040f tx timeout [ 50.023441][ T4055] Bluetooth: hci4: command 0x040f tx timeout [ 50.033847][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.036754][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.039628][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.043517][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.046157][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.049100][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.051927][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.054864][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.058976][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.818617][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.821641][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.826330][ T1756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.828583][ T1756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.837202][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.866597][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.868990][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.873324][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.875703][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.925990][ T4124] loop1: detected capacity change from 0 to 64 [ 50.951936][ T1756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.954239][ T1756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.029713][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.290587][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.293940][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.310401][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.344665][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.347485][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.351723][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.425460][ T4134] Can't find a SQUASHFS superblock on nullb0 [ 52.074119][ T4074] Bluetooth: hci1: command 0x0419 tx timeout [ 52.075983][ T4074] Bluetooth: hci0: command 0x0419 tx timeout [ 52.077802][ T4074] Bluetooth: hci3: command 0x0419 tx timeout [ 52.079554][ T4074] Bluetooth: hci4: command 0x0419 tx timeout [ 52.081212][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 52.216357][ T4142] loop2: detected capacity change from 0 to 1764 [ 53.042474][ T4147] loop4: detected capacity change from 0 to 128 [ 53.068749][ T4148] loop1: detected capacity change from 0 to 1024 [ 54.021923][ T4148] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.210691][ T4148] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 54.305515][ T4148] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 54.312438][ T4148] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.318982][ T4148] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.323160][ T4148] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.323160][ T4148] [ 54.325812][ T4148] EXT4-fs (loop1): Total free blocks count 0 [ 54.327442][ T4148] EXT4-fs (loop1): Free/Dirty block details [ 54.328982][ T4148] EXT4-fs (loop1): free_blocks=20480 [ 54.335620][ T4148] EXT4-fs (loop1): dirty_blocks=80 [ 54.337052][ T4148] EXT4-fs (loop1): Block reservation details [ 54.644940][ T4148] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 55.530945][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 55.535198][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.535198][ T9] [ 55.615680][ T4173] loop2: detected capacity change from 0 to 4096 [ 55.649200][ T4173] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 56.627727][ T4173] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 57.591702][ T4187] fuse: Bad value for 'fd' [ 57.710852][ T4192] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 60.977457][ T4202] udc-core: couldn't find an available UDC or it's busy [ 60.980289][ T4202] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.794247][ T4205] Zero length message leads to an empty skb [ 61.810582][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 62.223900][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 64.428477][ T4239] loop0: detected capacity change from 0 to 128 [ 64.530482][ T4239] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 67.760008][ C1] sched: RT throttling activated [ 67.796216][ T4269] xt_HMARK: proto mask must be zero with L3 mode [ 68.576900][ T4272] loop4: detected capacity change from 0 to 8 [ 68.779340][ T4272] SQUASHFS error: lzo decompression failed, data probably corrupt [ 68.781891][ T4272] SQUASHFS error: Failed to read block 0x91: -5 [ 68.783712][ T4272] SQUASHFS error: Unable to read metadata cache entry [8f] [ 68.785751][ T4272] SQUASHFS error: Unable to read inode 0x11f [ 69.643138][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.645195][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.772607][ T7] cfg80211: failed to load regulatory.db [ 75.319504][ T26] audit: type=1326 audit(75.088:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.408086][ T26] audit: type=1326 audit(75.088:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.758036][ T4311] loop1: detected capacity change from 0 to 8 [ 75.764639][ T26] audit: type=1326 audit(75.118:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.770948][ T26] audit: type=1326 audit(75.118:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.776980][ T26] audit: type=1326 audit(75.118:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.784043][ T26] audit: type=1326 audit(75.128:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.790229][ T26] audit: type=1326 audit(75.128:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.796085][ T26] audit: type=1326 audit(75.128:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.810055][ T26] audit: type=1326 audit(75.138:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 75.815787][ T26] audit: type=1326 audit(75.138:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac29d8a8 code=0x7ffc0000 [ 76.096803][ T4318] loop0: detected capacity change from 0 to 1024 [ 76.106687][ T4318] ======================================================= [ 76.106687][ T4318] WARNING: The mand mount option has been deprecated and [ 76.106687][ T4318] and is ignored by this kernel. Remove the mand [ 76.106687][ T4318] option from the mount to silence this warning. [ 76.106687][ T4318] ======================================================= [ 76.145976][ T4318] EXT4-fs (loop0): Ignoring removed bh option [ 76.147775][ T4318] EXT4-fs (loop0): Ignoring removed nobh option [ 76.333163][ T4318] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.441051][ T4330] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 77.232349][ T4318] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,usrjquota=,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback. [ 77.397790][ T4339] loop2: detected capacity change from 0 to 256 [ 77.562538][ T4339] FAT-fs (loop2): Directory bread(block 64) failed [ 77.564905][ T4339] FAT-fs (loop2): Directory bread(block 65) failed [ 77.566996][ T4339] FAT-fs (loop2): Directory bread(block 66) failed [ 77.569088][ T4339] FAT-fs (loop2): Directory bread(block 67) failed [ 77.571361][ T4339] FAT-fs (loop2): Directory bread(block 68) failed [ 77.573152][ T4339] FAT-fs (loop2): Directory bread(block 69) failed [ 77.575513][ T4339] FAT-fs (loop2): Directory bread(block 70) failed [ 77.577622][ T4339] FAT-fs (loop2): Directory bread(block 71) failed [ 77.579886][ T4339] FAT-fs (loop2): Directory bread(block 72) failed [ 77.582147][ T4339] FAT-fs (loop2): Directory bread(block 73) failed [ 78.721104][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 78.723877][ T4350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'. [ 78.761850][ T4350] device gtp0 entered promiscuous mode [ 79.458716][ T4352] ax25_connect(): syz.3.67 uses autobind, please contact jreuter@yaina.de [ 79.674014][ T4361] loop0: detected capacity change from 0 to 512 [ 79.925203][ T4360] loop3: detected capacity change from 0 to 40427 [ 79.985862][ T4365] udc-core: couldn't find an available UDC or it's busy [ 79.987813][ T4365] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.998575][ T4360] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 80.001201][ T4360] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 80.005879][ T4360] F2FS-fs (loop3): invalid crc value [ 80.026769][ T4360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.045912][ T4360] F2FS-fs (loop3): Start checkpoint disabled! [ 80.084687][ T4360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 80.969870][ T4169] attempt to access beyond end of device [ 80.969870][ T4169] loop3: rw=2049, want=40976, limit=40427 [ 82.939706][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.950493][ T4396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'. [ 83.134261][ T4400] loop0: detected capacity change from 0 to 256 [ 83.188096][ T4400] FAT-fs (loop0): Directory bread(block 64) failed [ 83.200110][ T4400] FAT-fs (loop0): Directory bread(block 65) failed [ 83.202001][ T4400] FAT-fs (loop0): Directory bread(block 66) failed [ 83.203769][ T4400] FAT-fs (loop0): Directory bread(block 67) failed [ 83.231814][ T4400] FAT-fs (loop0): Directory bread(block 68) failed [ 83.233667][ T4400] FAT-fs (loop0): Directory bread(block 69) failed [ 83.235526][ T4400] FAT-fs (loop0): Directory bread(block 70) failed [ 83.237597][ T4400] FAT-fs (loop0): Directory bread(block 71) failed [ 83.239508][ T4400] FAT-fs (loop0): Directory bread(block 72) failed [ 83.248438][ T4400] FAT-fs (loop0): Directory bread(block 73) failed [ 90.564615][ T4462] loop4: detected capacity change from 0 to 512 [ 90.783783][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 91.890338][ T4478] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.96: corrupted inode contents [ 91.922806][ T4478] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.96: mark_inode_dirty error [ 91.934281][ T4478] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.96: corrupted inode contents [ 91.942866][ T4478] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.96: mark_inode_dirty error [ 92.348251][ T4481] loop1: detected capacity change from 0 to 128 [ 92.358773][ T4484] loop0: detected capacity change from 0 to 256 [ 92.375062][ T4486] loop3: detected capacity change from 0 to 1024 [ 92.481461][ T4484] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 92.486472][ T4484] exFAT-fs (loop0): error, invalid access to FAT bad cluster (entry 0x00000005) [ 92.488954][ T4484] exFAT-fs (loop0): failed to initialize root inode [ 92.524388][ T4486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.085469][ T4497] loop4: detected capacity change from 0 to 512 [ 94.630418][ T4503] loop0: detected capacity change from 0 to 1764 [ 94.795821][ T4497] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 94.797750][ T4497] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 94.915680][ T4497] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.917898][ T4497] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 94.925263][ T4509] loop3: detected capacity change from 0 to 64 [ 95.640622][ T4497] EXT4-fs (loop4): 1 truncate cleaned up [ 95.642379][ T4497] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 95.778596][ T4521] loop0: detected capacity change from 0 to 64 [ 95.968641][ T4526] loop2: detected capacity change from 0 to 512 [ 96.132777][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 96.473079][ T4526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.476859][ T4526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.503382][ T4526] EXT4-fs (loop2): 1 truncate cleaned up [ 96.505175][ T4526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.719595][ T4538] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback. [ 98.634085][ T4551] loop1: detected capacity change from 0 to 8 [ 98.879147][ T4552] loop3: detected capacity change from 0 to 32768 [ 98.953816][ T4552] XFS (loop3): Mounting V5 Filesystem [ 99.775506][ T4551] SQUASHFS error: xz decompression failed, data probably corrupt [ 99.777789][ T4551] SQUASHFS error: Failed to read block 0x108: -5 [ 99.779881][ T4551] SQUASHFS error: Unable to read metadata cache entry [106] [ 99.791769][ T4551] SQUASHFS error: Unable to read inode 0x11f [ 99.792088][ T4552] XFS (loop3): Ending clean mount [ 99.802998][ T4552] XFS (loop3): Quotacheck needed: Please wait. [ 100.138320][ T4576] loop4: detected capacity change from 0 to 512 [ 100.445984][ T4579] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 101.287332][ T4552] XFS (loop3): Quotacheck: Done. [ 101.507803][ T4576] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.121: inode #1: comm syz.4.121: iget: illegal inode # [ 101.513807][ T4576] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.121: error while reading EA inode 1 err=-117 [ 102.592500][ T4576] EXT4-fs (loop4): 1 orphan inode deleted [ 102.594082][ T4576] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nolazytime,noinit_itable,nojournal_checksum,,errors=continue. Quota mode: none. [ 102.716563][ T4033] XFS (loop3): Unmounting Filesystem [ 103.113129][ T4597] loop1: detected capacity change from 0 to 8192 [ 103.889342][ T4602] binder: 4599:4602 tried to acquire reference to desc 0, got 1 instead [ 103.893379][ T4602] binder: 4599:4602 transaction failed 29201/-28, size 80-9086186381401218727 line 3085 [ 103.896671][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.011825][ T4598] capability: warning: `syz.2.128' uses 32-bit capabilities (legacy support in use) [ 110.288756][ T4672] loop2: detected capacity change from 0 to 1024 [ 110.311516][ T4680] loop3: detected capacity change from 0 to 256 [ 110.387664][ T4672] EXT4-fs (loop2): Ignoring removed bh option [ 110.422086][ T4672] EXT4-fs (loop2): Ignoring removed nobh option [ 110.515036][ T4672] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.640838][ T4680] FAT-fs (loop3): Directory bread(block 64) failed [ 110.647190][ T4680] FAT-fs (loop3): Directory bread(block 65) failed [ 110.649255][ T4680] FAT-fs (loop3): Directory bread(block 66) failed [ 110.663706][ T4672] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,usrjquota=,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback. [ 110.688833][ T4680] FAT-fs (loop3): Directory bread(block 67) failed [ 110.703004][ T4680] FAT-fs (loop3): Directory bread(block 68) failed [ 110.725218][ T4680] FAT-fs (loop3): Directory bread(block 69) failed [ 110.968982][ T4680] FAT-fs (loop3): Directory bread(block 70) failed [ 111.005446][ T4680] FAT-fs (loop3): Directory bread(block 71) failed [ 111.007373][ T4680] FAT-fs (loop3): Directory bread(block 72) failed [ 111.009178][ T4680] FAT-fs (loop3): Directory bread(block 73) failed [ 112.689813][ T4705] process 'syz.0.149' launched './file2' with NULL argv: empty string added [ 112.697103][ T4707] loop4: detected capacity change from 0 to 128 [ 113.688853][ T4705] loop0: detected capacity change from 0 to 128 [ 113.719734][ T4705] befs: Unrecognized mount option "gid=0xffffffffffffffff˙˙˙˙01777777777777777777777" or missing value [ 113.738921][ T4707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.099214][ T4721] bridge0: port 3(netdevsim0) entered blocking state [ 114.102392][ T4721] bridge0: port 3(netdevsim0) entered disabled state [ 114.105874][ T4721] device netdevsim0 entered promiscuous mode [ 114.108148][ T4721] bridge0: port 3(netdevsim0) entered blocking state [ 114.110291][ T4721] bridge0: port 3(netdevsim0) entered forwarding state [ 114.574671][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.950421][ T4725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.063824][ T4736] loop3: detected capacity change from 0 to 1024 [ 115.102671][ T4736] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 115.295591][ T4736] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 117.728211][ T4754] binder: 4739 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 117.728344][ T4754] binder: 4739:4754 ioctl c018620c 20000240 returned -22 [ 119.868645][ T4769] binder: 4768:4769 tried to acquire reference to desc 0, got 1 instead [ 121.351231][ T4769] binder: 4768:4769 got transaction with invalid handle, 3 [ 121.376550][ T4769] binder: 4768:4769 transaction failed 29201/-22, size 72-24 line 3242 [ 121.820358][ T4055] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.038854][ T4779] loop2: detected capacity change from 0 to 2048 [ 123.148732][ T4779] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.177263][ T4779] NILFS (loop2): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 123.180672][ T4779] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2) [ 123.264989][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 123.265003][ T26] audit: type=1326 audit(123.178:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.2.168" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa688f8a8 code=0x0 [ 123.797381][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 123.804459][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 124.750059][ T4827] loop2: detected capacity change from 0 to 1024 [ 126.420844][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.737647][ T4861] loop0: detected capacity change from 0 to 512 [ 128.988644][ T4869] loop2: detected capacity change from 0 to 256 [ 129.032134][ T4861] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.193: inode #1: comm syz.0.193: iget: illegal inode # [ 129.685097][ T4861] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.193: error while reading EA inode 1 err=-117 [ 129.717419][ T4861] EXT4-fs (loop0): 1 orphan inode deleted [ 129.719071][ T4861] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nolazytime,noinit_itable,nojournal_checksum,,errors=continue. Quota mode: none. [ 129.806979][ T4857] loop1: detected capacity change from 0 to 16384 [ 129.855618][ T4861] libceph: resolve '0.0' (ret=-3): failed [ 129.863371][ T4875] loop4: detected capacity change from 0 to 512 [ 129.904862][ T4880] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.932847][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 131.264482][ T4887] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.198: corrupted inode contents [ 131.282234][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.284109][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.312368][ T4887] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.198: mark_inode_dirty error [ 131.328937][ T4887] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.198: corrupted inode contents [ 131.342034][ T4887] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.198: mark_inode_dirty error [ 132.060759][ T26] audit: type=1326 audit(131.938:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4890 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa688f8a8 code=0x7ffc0000 [ 132.066632][ T26] audit: type=1326 audit(131.938:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4890 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=242 compat=0 ip=0xffffa688f8a8 code=0x7ffc0000 [ 132.074199][ T26] audit: type=1326 audit(131.938:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4890 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa688f8a8 code=0x7ffc0000 [ 132.899856][ T4899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.205'. [ 134.189934][ T4916] loop1: detected capacity change from 0 to 256 [ 134.258881][ T4916] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.263091][ T4916] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 134.279617][ T4916] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.257226][ T4916] 9pnet_virtio: no channels available for device syz [ 135.359089][ T4927] loop4: detected capacity change from 0 to 1024 [ 139.986382][ T4965] loop1: detected capacity change from 0 to 512 [ 140.048873][ T4961] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 140.093694][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.273817][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 142.458892][ T4994] loop1: detected capacity change from 0 to 64 [ 142.743362][ T4072] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.773567][ T5005] udc-core: couldn't find an available UDC or it's busy [ 144.131892][ T5005] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.480469][ T4072] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 144.482958][ T4072] usb 1-1: can't read configurations, error -71 [ 146.296309][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 149.133653][ T5047] ALSA: mixer_oss: invalid OSS volume '' [ 150.278234][ T5081] loop1: detected capacity change from 0 to 4096 [ 150.361529][ T5082] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.364778][ T5081] NILFS (loop1): corrupt root inode [ 150.984158][ T5088] loop4: detected capacity change from 0 to 1024 [ 152.960225][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 153.005433][ T5103] loop4: detected capacity change from 0 to 256 [ 153.026461][ T5103] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.029259][ T5103] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 153.063670][ T5103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.081606][ T5103] 9pnet_virtio: no channels available for device syz [ 154.199674][ T5110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.263'. [ 156.770564][ T5146] loop0: detected capacity change from 0 to 512 [ 157.126381][ T5146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.637322][ T5146] EXT4-fs (loop0): 1 truncate cleaned up [ 157.638984][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 158.739825][ T5167] loop1: detected capacity change from 0 to 1764 [ 158.749074][ T5170] loop0: detected capacity change from 0 to 512 [ 158.842585][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 160.062040][ T5178] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.280: corrupted inode contents [ 160.079195][ T5178] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #2: comm syz.0.280: mark_inode_dirty error [ 160.090686][ T5178] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.280: corrupted inode contents [ 160.101077][ T5178] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.280: mark_inode_dirty error [ 161.107049][ T5190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.285'. [ 161.469539][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 161.659537][ T5194] loop4: detected capacity change from 0 to 512 [ 161.732559][ T5194] EXT4-fs (loop4): unable to read superblock [ 164.048428][ T5226] xt_hashlimit: max too large, truncated to 1048576 [ 164.268155][ T5232] binder: 5228:5232 tried to acquire reference to desc 0, got 1 instead [ 164.288833][ T5232] binder: 5228:5232 got new transaction with bad transaction stack, transaction 15 has target 5228:0 [ 164.301312][ T5232] binder: 5228:5232 transaction failed 29201/-71, size 0-0 line 2973 [ 164.304184][ T7] binder: release 5228:5232 transaction 15 out, still active [ 164.306480][ T7] binder: undelivered TRANSACTION_COMPLETE [ 164.308094][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.340763][ T1534] binder: send failed reply for transaction 15, target dead [ 165.153455][ T5256] binder: 5254:5256 ioctl c0046209 0 returned -22 [ 165.291785][ T5245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.508922][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.513158][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.518885][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.523025][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.216750][ T5281] netlink: 'syz.4.316': attribute type 12 has an invalid length. [ 166.235819][ T5281] netlink: 'syz.4.316': attribute type 28 has an invalid length. [ 166.238013][ T5281] netlink: 148 bytes leftover after parsing attributes in process `syz.4.316'. [ 169.166539][ T4073] Bluetooth: hci3: command 0x0406 tx timeout [ 169.169675][ T4073] Bluetooth: hci2: command 0x0406 tx timeout [ 169.173115][ T4036] Bluetooth: hci1: command 0x0406 tx timeout [ 170.986391][ T5322] loop3: detected capacity change from 0 to 512 [ 172.681149][ T5322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.382914][ T5358] loop4: detected capacity change from 0 to 2048 [ 176.502432][ T5362] loop3: detected capacity change from 0 to 1024 [ 176.765398][ T5362] hfsplus: unable to find HFS+ superblock [ 176.791469][ T5358] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 176.854077][ T5358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.047261][ T5362] loop3: detected capacity change from 0 to 2048 [ 177.087634][ T5362] UDF-fs: bad mount option "i" or missing value [ 179.355437][ T5394] udc-core: couldn't find an available UDC or it's busy [ 179.357390][ T5394] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 183.901917][ T5418] loop4: detected capacity change from 0 to 1764 [ 183.917712][ T5420] loop1: detected capacity change from 0 to 1024 [ 190.155432][ T4073] Bluetooth: hci4: command 0x0406 tx timeout [ 190.595361][ T5469] ubi31: attaching mtd0 [ 190.609688][ T5469] ubi31: scanning is finished [ 190.611259][ T5469] ubi31: empty MTD device detected [ 191.029822][ T5469] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 191.134135][ T5473] loop3: detected capacity change from 0 to 1764 [ 193.709487][ T5491] loop4: detected capacity change from 0 to 4096 [ 194.396728][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398490][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.322011][ T5491] NILFS (loop4): corrupt root inode [ 195.323662][ T5503] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.020824][ T5570] loop4: detected capacity change from 0 to 2048 [ 201.924420][ T5570] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 202.025064][ T5570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.152662][ T5587] loop1: detected capacity change from 0 to 64 [ 206.491943][ T5620] loop3: detected capacity change from 0 to 4096 [ 206.500570][ T4025] Trying to free block not in datazone [ 206.571857][ T5621] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.572694][ T5620] NILFS (loop3): corrupt root inode [ 209.631413][ T5644] device bond_slave_0 entered promiscuous mode [ 209.633333][ T5644] device bond_slave_1 entered promiscuous mode [ 209.635632][ T5644] device vlan2 entered promiscuous mode [ 209.637144][ T5644] device bond0 entered promiscuous mode [ 211.937490][ T5689] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 215.157451][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 216.086219][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 216.106035][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'. [ 221.118810][ T5810] loop3: detected capacity change from 0 to 1764 [ 223.062829][ T5820] loop4: detected capacity change from 0 to 32768 [ 223.268280][ T5820] XFS (loop4): Mounting V5 Filesystem [ 223.319092][ T5820] XFS (loop4): Ending clean mount [ 224.110112][ T5820] XFS (loop4): Quotacheck needed: Please wait. [ 224.371160][ T5820] XFS (loop4): Quotacheck: Done. [ 224.393438][ T4034] XFS (loop4): Unmounting Filesystem [ 233.180997][ T5924] netlink: 80 bytes leftover after parsing attributes in process `syz.4.516'. [ 233.183723][ T5924] netlink: 80 bytes leftover after parsing attributes in process `syz.4.516'. [ 233.188152][ T5924] netlink: 80 bytes leftover after parsing attributes in process `syz.4.516'. [ 234.217265][ T5937] loop3: detected capacity change from 0 to 4096 [ 235.265431][ T5937] NILFS (loop3): corrupt root inode [ 235.266917][ T5943] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.357329][ T5949] tmpfs: Unknown parameter 'usrquota' [ 240.678229][ T5982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.533'. [ 240.681061][ T5982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.533'. [ 240.688831][ T5982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.533'. [ 242.377948][ T5996] loop4: detected capacity change from 0 to 4096 [ 242.444345][ T5996] NILFS (loop4): mounting unchecked fs [ 242.446010][ T5996] NILFS (loop4): recovery required for readonly filesystem [ 242.447934][ T5996] NILFS (loop4): write access will be enabled during recovery [ 242.456889][ T5996] NILFS (loop4): invalid segment: Checksum error in super root [ 242.459010][ T5996] NILFS (loop4): error -22 while loading super root [ 242.590140][ T6001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.549'. [ 242.592684][ T6001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.549'. [ 242.601484][ T6003] loop1: detected capacity change from 0 to 256 [ 242.604947][ T6001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.549'. [ 243.712574][ T6013] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 243.715048][ T6013] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 243.717770][ T6013] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 243.766136][ T6016] tmpfs: Unknown parameter 'usrquota' [ 253.133770][ T6066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.557'. [ 253.136356][ T6066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.557'. [ 253.167832][ T6066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.557'. [ 253.223116][ T6072] loop4: detected capacity change from 0 to 128 [ 253.310256][ T6072] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 253.317263][ T6072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.564507][ T6078] loop3: detected capacity change from 0 to 4096 [ 254.862207][ T6078] NILFS (loop3): mounting unchecked fs [ 254.863852][ T6078] NILFS (loop3): recovery required for readonly filesystem [ 254.865811][ T6078] NILFS (loop3): write access will be enabled during recovery [ 255.660474][ T6078] NILFS (loop3): invalid segment: Checksum error in super root [ 255.662616][ T6078] NILFS (loop3): error -22 while loading super root [ 255.889119][ T6088] loop1: detected capacity change from 0 to 512 [ 256.884889][ T6088] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 256.945578][ T6104] loop3: detected capacity change from 0 to 128 [ 257.704316][ T6104] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 258.648300][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.704099][ T6114] tmpfs: Unknown parameter 'usrquota' [ 260.255677][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.257750][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.373708][ T6163] loop4: detected capacity change from 0 to 1024 [ 268.209338][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 268.248187][ T6167] loop3: detected capacity change from 0 to 512 [ 268.420451][ T6167] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 268.439294][ T6178] netlink: 'syz.4.584': attribute type 4 has an invalid length. [ 271.160979][ T6197] loop1: detected capacity change from 0 to 1024 [ 271.291890][ T6197] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 271.331878][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,mblk_io_submit,minixdf,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 271.720773][ T6209] netlink: 80 bytes leftover after parsing attributes in process `syz.4.591'. [ 278.447249][ T6254] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 279.373703][ T6268] netlink: 80 bytes leftover after parsing attributes in process `syz.0.606'. [ 281.889399][ T6292] loop3: detected capacity change from 0 to 1024 [ 282.163790][ T6293] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 283.743107][ T6293] device syz_tun entered promiscuous mode [ 283.775323][ T6293] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 283.901941][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 284.342734][ T6311] loop3: detected capacity change from 0 to 4096 [ 284.460357][ T6317] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.468393][ T6311] NILFS (loop3): corrupt root inode [ 284.684026][ T6321] netlink: 80 bytes leftover after parsing attributes in process `syz.4.620'. [ 286.022013][ T6335] loop1: detected capacity change from 0 to 1764 [ 289.878731][ T6357] loop1: detected capacity change from 0 to 262144 [ 290.205687][ T6372] netlink: 80 bytes leftover after parsing attributes in process `syz.0.635'. [ 290.722635][ T6373] loop4: detected capacity change from 0 to 4096 [ 290.801574][ T6373] NILFS (loop4): corrupt root inode [ 290.803346][ T6374] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.805281][ T6369] loop3: detected capacity change from 0 to 256 [ 290.828235][ T6357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 290.859695][ T6357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.120464][ T6369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 294.833028][ T144] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 301.233725][ T6448] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 302.102908][ T6467] loop1: detected capacity change from 0 to 512 [ 302.316332][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.125616][ T6467] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 306.326989][ T6507] loop1: detected capacity change from 0 to 4096 [ 306.403554][ T6510] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.495223][ T6507] NILFS (loop1): corrupt root inode [ 306.988873][ T6516] loop4: detected capacity change from 0 to 64 [ 310.259217][ T6539] loop4: detected capacity change from 0 to 512 [ 312.722771][ T6539] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.889557][ T6559] loop1: detected capacity change from 0 to 2048 [ 313.782015][ T6559] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 313.813313][ T6559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.309382][ T6539] EXT4-fs (loop4): 1 truncate cleaned up [ 314.323064][ T6539] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 314.941098][ T6568] loop1: detected capacity change from 0 to 4096 [ 314.996197][ T6570] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.996582][ T6568] NILFS (loop1): corrupt root inode [ 316.017032][ T6580] loop4: detected capacity change from 0 to 128 [ 317.122325][ T6580] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 317.158074][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.419851][ T6595] loop3: detected capacity change from 0 to 4096 [ 318.452573][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.295449][ T6621] loop1: detected capacity change from 0 to 8192 [ 320.525187][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.527315][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.853918][ T6673] loop1: detected capacity change from 0 to 4096 [ 327.955074][ T6673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 328.111099][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 329.825898][ T6699] loop1: detected capacity change from 0 to 4096 [ 333.245907][ T6733] netlink: 80 bytes leftover after parsing attributes in process `syz.1.732'. [ 333.248585][ T6733] netlink: 80 bytes leftover after parsing attributes in process `syz.1.732'. [ 333.256454][ T6733] netlink: 80 bytes leftover after parsing attributes in process `syz.1.732'. [ 333.834391][ T6737] loop4: detected capacity change from 0 to 512 [ 333.849932][ T6737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 333.892562][ T6737] EXT4-fs (loop4): 1 truncate cleaned up [ 333.894132][ T6737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.068141][ T6764] loop4: detected capacity change from 0 to 1024 [ 336.399583][ T6764] hfsplus: gid requires an argument [ 336.408081][ T6764] hfsplus: unable to parse mount options [ 337.002439][ T4016] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 337.005414][ T4016] Bluetooth: hci3: Injecting HCI hardware error event [ 337.011052][ T4026] Bluetooth: hci3: hardware error 0x00 [ 337.466090][ T144] Bluetooth: Wrong link type (-71) [ 337.468082][ T144] Bluetooth: hci4: link tx timeout [ 337.469684][ T144] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 337.471942][ T144] Bluetooth: hci4: link tx timeout [ 337.473322][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.802715][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.1.749'. [ 337.805293][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.1.749'. [ 337.808105][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.1.749'. [ 338.244572][ T4040] Bluetooth: Unexpected start frame (len 16) [ 338.247703][ T4040] Bluetooth: Frame is too long (len 16, expected len 4) [ 340.229325][ T6833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.766'. [ 340.229353][ T6833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.766'. [ 340.229751][ T6833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.766'. [ 340.719970][ T6839] loop1: detected capacity change from 0 to 2048 [ 342.888941][ T6839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.492696][ T6868] loop3: detected capacity change from 0 to 4096 [ 345.298789][ T6868] NILFS (loop3): corrupt root inode [ 345.300360][ T6873] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.889832][ T6887] netlink: 80 bytes leftover after parsing attributes in process `syz.2.779'. [ 346.892380][ T6887] netlink: 80 bytes leftover after parsing attributes in process `syz.2.779'. [ 346.895628][ T6887] netlink: 80 bytes leftover after parsing attributes in process `syz.2.779'. [ 347.319749][ T6895] loop3: detected capacity change from 0 to 128 [ 348.123109][ T6895] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 351.637537][ T6917] loop4: detected capacity change from 0 to 40427 [ 353.021359][ T6917] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 353.023810][ T6917] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 353.027875][ T6917] F2FS-fs (loop4): invalid crc value [ 353.045138][ T6917] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.063848][ T6917] F2FS-fs (loop4): Start checkpoint disabled! [ 353.071996][ T6917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 353.194867][ T6932] loop1: detected capacity change from 0 to 8 [ 353.905257][ T6932] SQUASHFS error: lzo decompression failed, data probably corrupt [ 353.907485][ T6932] SQUASHFS error: Failed to read block 0x91: -5 [ 353.909246][ T6932] SQUASHFS error: Unable to read metadata cache entry [8f] [ 353.911220][ T6932] SQUASHFS error: Unable to read inode 0x11f [ 354.240344][ T6936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.793'. [ 354.242868][ T6936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.793'. [ 354.245583][ T6936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.793'. [ 355.119782][ T1768] attempt to access beyond end of device [ 355.119782][ T1768] loop4: rw=2049, want=40976, limit=40427 [ 355.401989][ T6950] netlink: 80 bytes leftover after parsing attributes in process `syz.3.805'. [ 355.404557][ T6950] netlink: 80 bytes leftover after parsing attributes in process `syz.3.805'. [ 355.407824][ T6950] netlink: 80 bytes leftover after parsing attributes in process `syz.3.805'. [ 355.424211][ T6949] loop1: detected capacity change from 0 to 2048 [ 356.763815][ T6960] loop3: detected capacity change from 0 to 512 [ 356.772979][ T6954] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.008057][ T6949] overlayfs: upper fs does not support tmpfile. [ 357.541253][ T6949] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.556232][ T6949] overlayfs: failed to set xattr on upper [ 357.558111][ T6949] overlayfs: ...falling back to index=off,metacopy=off. [ 357.575038][ T6960] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.798: corrupted in-inode xattr [ 357.589385][ T6960] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.798: couldn't read orphan inode 15 (err -117) [ 357.780109][ T6960] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 357.930784][ T6960] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.798: dx entry: limit 0 != root limit 125 [ 357.934648][ T6960] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.798: Corrupt directory, running e2fsck is recommended [ 357.967424][ T6954] ------------[ cut here ]------------ [ 357.969092][ T6954] WARNING: CPU: 0 PID: 6954 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x590/0x6f4 [ 357.971662][ T6954] Modules linked in: [ 357.972730][ T6954] CPU: 0 PID: 6954 Comm: segctord Not tainted 5.15.185-syzkaller #0 [ 357.974899][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.977704][ T6954] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 357.979858][ T6954] pc : nilfs_dat_commit_end+0x590/0x6f4 [ 357.981381][ T6954] lr : nilfs_dat_commit_end+0x590/0x6f4 [ 357.982853][ T6954] sp : ffff80001f5471d0 [ 357.984066][ T6954] x29: ffff80001f5471f0 x28: ffff0000ddde0158 x27: 1ffff00003ea8e5b [ 357.986379][ T6954] x26: dfff800000000000 x25: 0700000000000002 x24: ffff0000e52efa40 [ 357.988610][ T6954] x23: 0000000000000003 x22: ffff0000ce733088 x21: ffff0000ce731b40 [ 357.990869][ T6954] x20: ffff80001f5472d8 x19: ffff80001f5472c0 x18: 0000000000000000 [ 357.993082][ T6954] x17: ffff800016cf0000 x16: ffff8000082d4c48 x15: ffff8000167d04c0 [ 357.995279][ T6954] x14: ffff0000ce732540 x13: 1ffff0000282c06b x12: 0000000000ff0100 [ 357.997537][ T6954] x11: 0000000000000001 x10: 0000000000000000 x9 : ffff800009b6eba4 [ 357.999762][ T6954] x8 : ffff0000ce731b40 x7 : ffff800009b9de60 x6 : 0000000000000000 [ 358.001995][ T6954] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff0000e52ef000 [ 358.004185][ T6954] x2 : ffff0000c06739f8 x1 : 0000000000000003 x0 : 0700000000000002 [ 358.006401][ T6954] Call trace: [ 358.007315][ T6954] nilfs_dat_commit_end+0x590/0x6f4 [ 358.008813][ T6954] nilfs_dat_commit_update+0x38/0x58 [ 358.010264][ T6954] nilfs_direct_propagate+0x1a4/0x2f8 [ 358.011754][ T6954] nilfs_bmap_propagate+0x74/0x124 [ 358.013185][ T6954] nilfs_collect_file_data+0x54/0xe8 [ 358.014709][ T6954] nilfs_segctor_apply_buffers+0x170/0x31c [ 358.016343][ T6954] nilfs_segctor_scan_file+0x5d0/0xc64 [ 358.017862][ T6954] nilfs_segctor_do_construct+0x1684/0x62cc [ 358.019441][ T6954] nilfs_segctor_construct+0x134/0x540 [ 358.020962][ T6954] nilfs_segctor_thread+0x804/0xe08 [ 358.022379][ T6954] kthread+0x374/0x454 [ 358.023577][ T6954] ret_from_fork+0x10/0x20 [ 358.024883][ T6954] irq event stamp: 576 [ 358.026044][ T6954] hardirqs last enabled at (575): [] free_unref_page_list+0x6c8/0x754 [ 358.028847][ T6954] hardirqs last disabled at (576): [] el1_dbg+0x24/0x80 [ 358.031280][ T6954] softirqs last enabled at (0): [] copy_process+0x111c/0x34ac [ 358.033852][ T6954] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 358.035851][ T6954] ---[ end trace 61a9d453c2c51e41 ]--- [ 358.186609][ T4025] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 358.189548][ T4025] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 358.198790][ T4025] Remounting filesystem read-only [ 358.200858][ T4025] NILFS (loop1): error -5 truncating bmap (ino=16) [ 358.205984][ T4025] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer