last executing test programs: 27.648640419s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x82}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40d2}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r2, 0x0, r1, 0x0, 0xe4, 0x0) 25.822950748s ago: executing program 3 (id=301): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x22, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020) 23.418312681s ago: executing program 3 (id=310): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x81) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 21.646429385s ago: executing program 3 (id=320): openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 13.811348881s ago: executing program 1 (id=340): r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) socket(0x28, 0x5, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r1) r2 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000580), 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000300)='logon\x00', 0x0, &(0x7f0000000380)='syz', r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x0) 13.676959573s ago: executing program 1 (id=344): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000006480)={[{@numtail}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@rodir}]}, 0x3, 0x354, &(0x7f00000068c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 9.429675406s ago: executing program 1 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c041}, 0x8810) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) 8.52914349s ago: executing program 1 (id=356): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@data_journal}, {@nombcache}, {@block_validity}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 8.413459451s ago: executing program 0 (id=357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) umount2(0x0, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x4, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 8.112298808s ago: executing program 1 (id=360): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000011143dcf00000000000000000800", @ANYRES16=r0], 0x28}}, 0x0) 7.502570885s ago: executing program 0 (id=364): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1010000, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.842283701s ago: executing program 2 (id=369): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.699975704s ago: executing program 2 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chdir(&(0x7f0000000000)='./file0\x00') r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 4.352832257s ago: executing program 0 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x1}, 0x10) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 4.31891867s ago: executing program 2 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYRES32], 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x402, r2}, 0x38) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x4008000) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, @in=@broadcast}}, 0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 3.13141002s ago: executing program 1 (id=374): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000380)=0x5, 0x12) 3.12871744s ago: executing program 4 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r4, 0x10d, 0x8b, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x48a, 0x4) getsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000440)=0x3f, 0x4) 3.110624902s ago: executing program 2 (id=377): r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000005c, &(0x7f00000001c0)=ANY=[], 0x1, 0x1532, &(0x7f0000002100)="$eJzs3An4jdX2OPC19t4vX5JOknmvvV5OMmySkCEhQ5IkSZIpIUmSJCRTpiQkIXOSOSRTSOZ5ypwkV5IkISHJ/j+63Z/63/l3+133ud/1eZ79fPc671n7rH3Web7nPe/znPN1+0GV61apUJuZ4V+Cf/zTDQBSAKAvAFwDABEAFMtULNOl4+m0+tceQ/zOHph6pSsQV5L0P3WT/qdu0v/UTfqfukn/Uzfpf+om/U/dpP9CpGZbp2W/Vsa/OAxc+Rr+l+Pfe/0fu/0uL1rxT0v7F2+V9///IocLjf58faHrO/wTKdL/1E36n7pJ/1M36X/qJv1P3aT///3K/41j0v/UTfovRGr2P9eCL4QQ/gOuR/+7R/n/gBqu5LjSrz8hhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEKnDuXCZAYA/za90XUIIIYQQQgghhPj9hLRXugIhhBBCCCGEEEL830NQoMFABGkgLaRAOkgPV0EGuBoywjWQgGshE1wHmeF6yAJZIRtkhxyQE3KBBQIHDDHkhjyQhBsgL9wI+SA/FICC4KEQFIaboAjcDEXhFigGxaEE3AoloRSUhjJwG5SF26EclIcKcAdUhEpQGarAnVAV7oJqcDdUh3ugBtwLNeE+qAX3Q214AOrAg1AXHoJ68DDUhwbQEBpB49/mj/3H8p+HzvACdIGu0A26Qw94EXpCL+gNfaAvvAT94GXoD6/AABgIg+BVGAyvwRB4HYbCMBgOb8AIGAmjYDSMgbEwDt6E8fAWTIC3YSJMgskwBabCNJgO78AMmAmz4F2YDe/BHJgL82A+LID3YSEsgsXwASyBD2EpLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCt8BNtgO+yAnbALdsMe+Bj2wiewDz6F/fDZ38k/rOE3+Wf/v/wOCAioUKFBg2kwDaZgCqbH9JgBM2BGzIgJTGAmzISZMTNmwSyYDbNhDsyBuTAXEhIyMubG3JjEJObFvJgP82EBLIAePRbGwlgEb8aiWBSLYTEsgSWwJJbCUlgGy2BZLIvlsBxWwApYEStiZayMd+KdeBdWw2pYHatjDayBNbEm1sJaWBtrYx2sg3WxLtbDelgf62NDbIiNsTE2wSbYFJtic2yOLbAFtsSW2ApbYWtsjW2wDbbFttgO22F7bI8dsCN2xOfxeXwBX8CuWFF1xx7YA3tiT+yNfbAPvoT98GV8GV/BATgQB+Gr+Cq+hkPwDA7FYTgch2NZNRJH4WhkNRbH4Tgcj+NxAk7AiTgJJ+EUnIrTcDpOxxk4E2fiuzgb38P3cC7Oxfm4ABfgQlyEi3ExLsGzuBSX4XJcgStxFa7ENbgW1+B63IDrcRNuwi24BT/Cj3A7bseduBN34278GD/GT/ATHID7cT8ewAN4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4Hs/jBXw2x5d1dudfNwDUJUYZlUalUSkqRaVX6VUGlUFlVBlVQiVUJpVJZVaZVRaVRWVT2VQOlUPlUrkUKVKsYpVb5VZJlVR5VV6VT+VTBVQB5ZVXhVVhVUQVUUVVUVVMFVcl1K2qpCqlmvkyqowqq5r7cqq8qqAqqIqqkqqsqqgqqqqqqqqpaqq6qq5qqBqqprpP1VLdsTc+oC51pq4aiPXUIKyvGqiGqpF6DR9RTdQQbKqaqebqMTUMh2JL1cS3Uk+q1moUtlFPq9H4jGqnxmJ79ZzqoDqqTup51Vk19V1UVzURu6seagr2VL1Ub9VHzcBK6lLHKqtX1AA1UA1Sr6r5+Joaol5XQ9UwNVy9oUaokWqUGq3GqLFqnHpTjVdvqQnqbTVRTVKT1RQ1VU1T09U7aoaaqWapd9Vs9Z6ao+aqeWq+WqDeVwvVIrVYfaCWqA/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1kdqmtqsdaqfapXarPepjtVd9ovapT9V+9Zk6oP6gDqrP1SH1hTq8yagj6it1VH2tjqlv1HH1rTqhTqpT6jt1Wn2vzqiz6pz6QZ1XP6oL6id1UQUFGrXSWhsd6TQ6rU7R6XR6fZXOoK/WGfU1OqGv1Zn0dTqzvl5n0Vl1Np1d59A5dS5tNWmnWcc6t86jk/oGnVffqPPp/LqALqi9LqQL65t0EX2zLqpv0cV0cV1C36pL6lK6tC6jb9Nl9e26nC6vK+g7dEVdSVfWVfSduqq+S1fTd+vq+h5dQ9+ra+r7dC19v66tH9B19IO6rn5I19MP6/q6gW6oG+nG+hHdRD+qm+pmurl+TLfQj+uW+gndSj+pW+undBv9tG6rn9Ht9LO6vX5Od9AddSf9k76og+6iu+puurvuoV/UPXUv3Vv30X31S7qffln316/oAXqgHqRf1YP1a3qIfl0P1cP0cP2GHqFH6lF6tB6jx+px+k09Xr+lJ+i39UQ9SU/WU/RUPU33/mWlWf9A/lt/Ib//z4++RW/VH+lterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqFP6h/0d/q0/l6f0Wf1Wf2DPq/P6wu/PAdg0CijjTGRSWPSmhSTzqQ3V5kM5mqT0VxjEuZak8lcZzKb600Wk9VkM9lNDpPT5DLWkHGGTWxymzwmaW4wec2NJp/JbwqYgsabQqawuelfzv+5vhQA+Cv1NTaNTRPTxDQ1TU1z09y0MC1MS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDAdTCfTyXQ2nU0X08V0M91MD/Oi6Wl6md6mj+lrXjL9TD/T3/Q3A8wAM8gMMoPNYDPEDDFDzVAz3Aw3I8wIM8qMMmPMGDPOjDPjzXgzwUwwE81EM9lMNlPNVDPdTDczzAwzy8wys81sM8fMMfPMPLPALDALzUKz2Cw2S8wSs9QsM8vMCrPCrDKrzBqzxqwz68wGs8FsMpvMUrPVbDXbzDazw+wwu8wus8fsMXvNXrPP7DP7zX5zwBwwB81Bc8gcMofNYXPEHDFHzVFzzBwzx81xc8KcMKfMKXPanDZnzBlzzpwz5815c8FcMBfNxUunfZGKVGQiE6WJ0kQpUUqUPkofZYgyRBmjjFEiSkSZokxR5uj6KEuUNcoWZY9yRDmjXJGNKHIRR3GUO8oTJaMborzRjVG+KH9UICoY+ahQVDi6KSoS3RwVjW6JikXFoxLRrVHJqFRUOioT3RaVjW6PykXlowrRHVHFqFJUOaoS3RlVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7eiCqEz0Y1Y0eiupFD0f1owZRw6hR1Ph3XT+EM1kf9V1sV9vNdrc97Iu2p+1le9s+tq99yfazL9v+9hU7wA60g+yrdrB9zQ6xr9uhdpgdbt+wI+xIO8qOtmPsWDvOvmnH27fsBPu2nWgn2cl2ip1qp9np9h07w860s+y7drZ9z86xc+08O98usO/bhXaRXWw/sEvsh3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3IbrPb7Q670+6yu+0e+7Hdaz+x++yndr/9zB6wf7AH7ef2kP3CHrZf2iP2K3vUfm2P2W/scfutPWFP2lP2O3vafm/P2LP2nP3Bnrc/2gv2J3vRhksn95fe3smQoTSUhlIohdJTespAGSgjZaQEJSgTZaLMlJmyUBbKRtkoB+WgXJSLLmFiyk25KUlJykt5KR/lowJUgDx5KkyFqQgVoaJUlIpRMSpBJagklaTSVJpuo9vodrqdylN5uoPuoEpUiapQFapKVakaVaPqVJ1qUA2qSTWpFtWi2lSb6lAdqkt1qR7Vo/pUnxpSQ2pMjakJNaGm1JSaU3NqQS2oJbWkVtSKWlNrakNtqC21pXbUjtpTe+pAHagTdaLO1Jm6UBfqRt2oB/WgntSTelNv6kt9qR/1o/7UnwbQABpEg2gwDaYhNISG0jAaTm/QCBpJo2g0jaGxNI7G0XgaTxNoAk2kiTSZJtNUmkrTaTrNoBk0i2bRbJpNc2gOzaN5tIAW0EJaSItpMS2hJbSUltJyWk4raSWtptW0ltbSelpPG2kjbabNtJW20jbaRjtoB+2iXbSH9tBe2kv7aB/tp/10gA7QQTpIh+gQHabDdISO0FE6SsfoGB2n43SCTtApOkWn6TSdoTN0js7RefqRLtBPdJECpTgF6d1VLoO72mV017gUl879Os7msrscLqfL5azL4rL+JibnXD6X3xVwBY13hVxhd9OfYvenuKQr5Uq7Mu42V9bd7sr9WVzV3eWqubtddXePq+Lu/E1cw93rarqHXC33sKvtGrg6rpGr6x5y9dzDrr5r4Bq6Rq6Fe9y1dE+4Vu5J19o99WfxQrfIrXXr3Hq3we11n7hz7gd31H3tzrsfXRfX1fV1L7l+7mXX373iBriBfxYPd2+4EW6kG+VGuzFu7J/Fk90UN9VNc9Mdwgw381fxO+5SvMC972Y7wDlurpvn5v8cX6ppsfvALXEfuqVumVvuVriVbpVb7db8T60r3Ca32W1xe9zHbpvb7na4nW6X2/1zfGkf+9ynbr/7zB1JC+6g+9wdcsfcYfelO+K++nl/x9w37rj71p1wJ90p95077b53Z9zZn/d/ae/fuZ/cRRccMPrBrNlwxGk4LadwOk7PV3EGvpoz8jWc4Gs5E1/Hmfl6zsJZORtn5xyck3OxZWLHzDHn5jyc5Bs4L9/I+Tg/F+CC7LkQF+abuAjfzEX5Fi7GxbkE38oluRSX5jJ8G5fl27kcl+cKfAdX5EpcmavwnVyV7+JqfDdX53u4Bt/LNfk+rsX3c21+gOvwg1yXH+J6/DDX5wbckBtxY36Em/Cj3JSbcXN+jFvw49ySn+BW/CS35qe4DT/NbfkZbsfPcnt+jjtwR+7Ez3NnfoG7cFfuxt25B7/IPbkX9+Y+3Jdf4n78MvfnV3gAD+RB/CoPNq/xEH6dh/IwHs5v8AgeyaN4NI/hsTyO3+Tx/BZP4Ld5Ik/iyTyFp/I0ns7v8AyeybP4XZ7N7/EcnsvzeD4v4Pd5IS/ixfwBL+EPeSkv4+W8glfyKl7Na3gtr+P1vIE38ibezFt4K3/E23g77+CdvIt38x7+mPfyJ7yPP+X9/Bkf4D/wQf6cD/EXfJi/5CP8FR/lr/kYf8PH+Vs+wSf5FH/Hp/l7PsNn+Rz/wOf5R77AP/FFDgwxxirWsYmjOE2cNk6J08Xp46viDPHVccb4mjgRXxtniq+LM8fXx1nirHG2OHucI84Z54ptTLGLOY7j3HGeOBnfEOeNb4zzxfnjAnHB2MeF4sLxTXGR+Oa4aHxLXCwuHhf/8ta4ZFwqfuieMvFtcdn49rhcXD6uEN8RV4wrxZXjKvGdcdX4rrhafHdcPb4nLhrfG9eM74trxffHteMH4jrxg3Hd+KG4XvxwXD9uEDeMG8WN40fiJvGjcdO4Wdw8fixuET8et4yfiFvFT8at46f+7vFucfe4R/xi/GIcwt16XnJ+ckHy/eTC5KLk4uQHySXJD5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUSQsevfLaGx/5ND6tT/HpfHp/lc/gr/YZ/TU+4a/1mfx1PrO/3mfxWX02n93n8Dl9Lm89eefZxz63z+OT/gaf19/o8/n8voAv6L0v5Av7Rr6xb+yb+Ed9U9/MN/eP+cf84/5x/4R/wj/pW/unfBv/tG/rn/Ht/LP+Wf+c7+A7+k7+ed/Zv+C7+K6+m+/me/gevqfv6Xv73r6v7+v7+X6+v+/vB/gBfpAf5Af7wX6IH+KH+qF+uB/uR/gRfpQf5cf4MX6cH+fH+/F+gp/gJ/qJfrKf7Kf6qX66n+5n+Bl+lp/lZ+eb7ef4OX6en+cX+AV+oV/oF/vFfolf4pf6pX65X+5X+pV+tV/t1/q1fr1f7zf6jX6z3+y3+q1+m9/md/gdfpff5ff4PX6v3+v3+X1+v9/vD/gD/qA/6A/5L/xh/6U/4r/yR/3X/pj/xh/33/oT/qQ/5b/zp/33/ow/68/5H/x5/6O/4H/yF33w4xJvJsYn3kpMSLydmJiYlJicmJKYmpiWmJ54JzEjMTMxK/FuYnbivcScxNzEvMT8xILE+4mFiUWJxYkPEksSHyaWJpYllidWJFYmViVCyLktDrlDnpAMN4S84caQL+QPBULB4EOhUDjcFIqEm0PRYQAQiocS4dZQMpQKpcPDoX5oEBqGRqFxeCQ0CY+GpqFZaB4eCy3C46FleCK0Ck+G1uGp0CY8HdqGZ0K78GxoH54LHULH0Ck8HzqHF0KX0DV0C91Dj/Bi6Bl6hd6hT+gbXgr9wsuhf3glDAgDw6DwahgcXgtDwuthaBgWhoc3wogwMowKo8OYMDaMC2+G8eGtMCG8HSaGSWFymBKmhmlhengnzAgzw6zwbpgd3gtzwtwwL8wPC8L7YWFYFBaHD8KS8GFYGpaF5WFFWBlWhdVhTVgb1oX1YUPYGDaFzWFL2Bo+CtvC9rAj7Ay7wu6wJ3wc9oZPwr7wadgfPgsHwh/CwfB5OBS+CIfDl+FI+CocDV+HY+GbcDx8G06Ek+FU+C6cDt+HM+FsOBd+COfDj+FC+ClclO+sCSGEEEL8Q/7ed/27/4Xb1C/jkh4AcPX27M/8+rgBgI1Z/jjvpXK0SADAk13bP/CnUbFit27dfrnvUg1RnrkAkLicnwYux8ugOTwOraAZFPmL9fVSHc/z31gfT4SQLA6Q/lc5KXA5vrz+zX9l/UceG76wRHwu02/Xv/DL83ap/uRcgHx5Luekg8vx5fWL/pX1szb5W/Uv1ZDu83EATX+VkwEux5fXLwyPwlPQ6jf3FEIIIYQQQggh/qiXKt229D/w+TyHuZyTFi7Hf+/zuRBCCCGEEEIIIa68Zzp2euKRVq2atU3VkzTwH1GGTGTyHzO50v+ZhBBCCCGEEL+3yyf9/0RSJ/w/rEgIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEh9/h0/J3al9yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcaf8vAAD//7KPQg4=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_link_settings={0x18}}) write(r0, &(0x7f0000000100), 0x0) 2.995551062s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x3fe, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) 2.984649223s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r3, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.800717913s ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.043123863s ago: executing program 0 (id=381): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x8e}, {0x0}], 0x2}}], 0xf4240, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc}, 0x0, 0x0) 530.811111ms ago: executing program 2 (id=382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") socket(0x10, 0x803, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@errors_continue}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x4, 0x54f, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(r1, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) migrate_pages(0x0, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) 496.984943ms ago: executing program 4 (id=383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x4) 412.222481ms ago: executing program 4 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x54}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$bt_hci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="01"], 0x27) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r4 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'ip6gretap0\x00', @random="0200ff7fdfff"}) 314.44745ms ago: executing program 3 (id=321): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYRES32=0x1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x1, 0x3, 0xd, 0x9}, {0x2, 0x1, 0xc, 0x5}], 0x10, 0xf15, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) 246.904957ms ago: executing program 3 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ftruncate(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x8004550f, 0xffffffffffffffff) 105.13058ms ago: executing program 0 (id=386): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000b40)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)=ANY=[], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xf80) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1.778289ms ago: executing program 4 (id=387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000600)) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000000)=0x1, 0x4) 0s ago: executing program 2 (id=388): socket(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa03, 0x0) socket$inet(0x2, 0x802, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): lave_1 entered promiscuous mode [ 44.681958][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.683739][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.690005][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.700057][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.702289][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.708638][ T4021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.730585][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.732805][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.738901][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.793393][ T4031] device hsr_slave_0 entered promiscuous mode [ 44.841651][ T4031] device hsr_slave_1 entered promiscuous mode [ 44.891432][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.893499][ T4031] Cannot create hsr debugfs directory [ 44.933387][ T4028] device hsr_slave_0 entered promiscuous mode [ 44.971731][ T4028] device hsr_slave_1 entered promiscuous mode [ 45.011350][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.013322][ T4028] Cannot create hsr debugfs directory [ 45.123455][ T4033] device hsr_slave_0 entered promiscuous mode [ 45.161628][ T4033] device hsr_slave_1 entered promiscuous mode [ 45.211380][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.213301][ T4033] Cannot create hsr debugfs directory [ 45.255015][ T4021] device hsr_slave_0 entered promiscuous mode [ 45.301634][ T4021] device hsr_slave_1 entered promiscuous mode [ 45.341401][ T4021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.343487][ T4021] Cannot create hsr debugfs directory [ 45.551723][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 45.568660][ T4012] Bluetooth: hci0: command 0x0409 tx timeout [ 45.570692][ T4012] Bluetooth: hci1: command 0x0409 tx timeout [ 45.574106][ T4031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.631672][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 45.635519][ T4031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.641624][ T4012] Bluetooth: hci3: command 0x0409 tx timeout [ 45.674657][ T4031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.723410][ T4031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.806680][ T4022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.845552][ T4022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.893813][ T4022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.940884][ T4022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.003757][ T4021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.043398][ T4021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.114807][ T4021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.144812][ T4021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.204328][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.244367][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.283221][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.323292][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.410751][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.436305][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.456912][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.503654][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.547774][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.550939][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.566509][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.616076][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.634699][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.637540][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.640721][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.642870][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.651163][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.664617][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.668075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.670905][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.674649][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.676569][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.704705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.707309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.710700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.720509][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.733742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.746994][ T4021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.770138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.774610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.777051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.779699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.783778][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.785743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.787861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.790579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.794530][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.796394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.798582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.808276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.810875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.841759][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.855364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.858263][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.860858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.870513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.874158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.877058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.879834][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.888752][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.893127][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.895950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.899497][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.907162][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.909810][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.912992][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.917702][ T4021] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.930138][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.939345][ T4031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.943044][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.948670][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.958129][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.961732][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.964188][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.966750][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.970019][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.979313][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.983081][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.984865][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.987032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.989486][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.992703][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.996031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.998574][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.000509][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.004627][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.007236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.009685][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.011458][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.013970][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.016386][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.019567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.028373][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.051785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.055264][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.058418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.061044][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.063004][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.066345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.069746][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.079016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.083700][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.086493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.089363][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.100259][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.130012][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.134429][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.142301][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.144819][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.147656][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.150902][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.160225][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.164464][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.167190][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.180620][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.197835][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.200952][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.204684][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.206798][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.208825][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.210851][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.215397][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.218153][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.220731][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.227610][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.230136][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.232025][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.234954][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.237589][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.240006][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.241918][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.244510][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.256956][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.283655][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.290974][ T4031] device veth0_vlan entered promiscuous mode [ 47.303312][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.305930][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.308709][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.312563][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.315315][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.318580][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.321179][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.325397][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.327846][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.330533][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.335018][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.337680][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.340316][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.344261][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.346897][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.349388][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.352583][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.355165][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.357576][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.361722][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.369922][ T4031] device veth1_vlan entered promiscuous mode [ 47.374198][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.376754][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.379279][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.402659][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.405230][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.407857][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.443033][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.456010][ T4022] device veth0_vlan entered promiscuous mode [ 47.466690][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.469339][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.474194][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.486462][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.495255][ T4031] device veth0_macvtap entered promiscuous mode [ 47.499864][ T4031] device veth1_macvtap entered promiscuous mode [ 47.507796][ T4022] device veth1_vlan entered promiscuous mode [ 47.516222][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.518655][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.526010][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.529241][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.554588][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.562553][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.565525][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.569013][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.574526][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.590032][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.602824][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.605586][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.608345][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.617517][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.619852][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.623994][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.628764][ T4022] device veth0_macvtap entered promiscuous mode [ 47.640638][ T4069] Bluetooth: hci1: command 0x041b tx timeout [ 47.645838][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.651644][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 47.653286][ T4069] Bluetooth: hci2: command 0x041b tx timeout [ 47.660762][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.664974][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.666948][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.674601][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.676985][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.679282][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.682752][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.695281][ T4021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.700949][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.710597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.713559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.715780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.722455][ T4067] Bluetooth: hci3: command 0x041b tx timeout [ 47.722906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.724153][ T4067] Bluetooth: hci4: command 0x041b tx timeout [ 47.740603][ T4022] device veth1_macvtap entered promiscuous mode [ 47.766939][ T4028] device veth0_vlan entered promiscuous mode [ 47.785470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.788570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.798501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.803839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.806618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.816300][ T4028] device veth1_vlan entered promiscuous mode [ 47.821582][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.824322][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.828116][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.851099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.853735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.856182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.858676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.861050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.867769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.873407][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.876025][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.879522][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.910971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.916774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.919455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.923458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.926086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.928545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.939332][ T4022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.942577][ T4022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.944768][ T4022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.946772][ T4022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.954910][ T4021] device veth0_vlan entered promiscuous mode [ 47.966541][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.969242][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.998816][ T4028] device veth0_macvtap entered promiscuous mode [ 48.005021][ T4021] device veth1_vlan entered promiscuous mode [ 48.013101][ T4028] device veth1_macvtap entered promiscuous mode [ 48.040794][ T526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.048586][ T526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.055602][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.058235][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.060659][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.064842][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.067326][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.069759][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.073116][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.097934][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.101423][ T526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.103660][ T526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.105229][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.108232][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.110756][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.117956][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.128857][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.129487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.130920][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.133942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.141136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.145071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.156895][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.159875][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.166613][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.169257][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.173810][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.177394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.180403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.183404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.186014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.214611][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.217551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.219230][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.222715][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.225061][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.226934][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.231820][ T4021] device veth0_macvtap entered promiscuous mode [ 48.236173][ T4021] device veth1_macvtap entered promiscuous mode [ 48.242559][ T4033] device veth0_vlan entered promiscuous mode [ 48.249237][ T4033] device veth1_vlan entered promiscuous mode [ 48.258155][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.260753][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.266210][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.268704][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.271808][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.274355][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.325070][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.328602][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.331003][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.347711][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.350458][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.360856][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.365535][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.368033][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.370653][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.375144][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.380146][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.384329][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.386889][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.389430][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.392633][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.395640][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.399273][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.412476][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.415038][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.418594][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.442978][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.474316][ T4021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.476445][ T4021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.478590][ T4021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.487109][ T4021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.493678][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.496591][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.508247][ T4107] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 48.510297][ T4107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.525587][ T4107] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 48.527415][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.532826][ T4033] device veth0_macvtap entered promiscuous mode [ 48.561007][ T4033] device veth1_macvtap entered promiscuous mode [ 48.614346][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.616879][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.619209][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.639308][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.644406][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.647404][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.655395][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.658150][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.670336][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.702161][ T4112] loop3: detected capacity change from 0 to 4096 [ 48.722015][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.731725][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.734469][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.737092][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.741829][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.743185][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.746490][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.750542][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.755754][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.758310][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.760934][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.764416][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.767245][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.769631][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.773413][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.777521][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.813284][ T4112] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 48.832198][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.834740][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.838086][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 48.870880][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.876939][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.879456][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.882851][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.894625][ T4112] ntfs: volume version 3.1. [ 48.919904][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.923531][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.927079][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.938205][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.943242][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.958351][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.085590][ T1702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.087897][ T1702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.093189][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.095362][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.098257][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.119459][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.128400][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.137013][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.178141][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.199554][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 49.214226][ T4121] MPTCP: addr_signal error, rm_addr=1 [ 49.995530][ T4069] Bluetooth: hci2: command 0x040f tx timeout [ 50.069446][ T4069] Bluetooth: hci0: command 0x040f tx timeout [ 50.442343][ T4069] Bluetooth: hci1: command 0x040f tx timeout [ 50.444110][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 50.452414][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 52.068099][ T4148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13'. [ 52.122542][ T4067] Bluetooth: hci2: command 0x0419 tx timeout [ 52.522644][ T4067] Bluetooth: hci3: command 0x0419 tx timeout [ 52.525482][ T4067] Bluetooth: hci4: command 0x0419 tx timeout [ 52.527424][ T4067] Bluetooth: hci1: command 0x0419 tx timeout [ 52.529377][ T4067] Bluetooth: hci0: command 0x0419 tx timeout [ 52.662975][ T4152] loop1: detected capacity change from 0 to 128 [ 52.725345][ T4152] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 52.734401][ T4152] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (54545!=39978) [ 52.772582][ T4152] EXT4-fs (loop1): group descriptors corrupted! [ 52.858236][ T4155] loop2: detected capacity change from 0 to 256 [ 56.142730][ T4171] process 'syz.4.21' launched './file1' with NULL argv: empty string added [ 56.153823][ T4174] loop2: detected capacity change from 0 to 2048 [ 56.221049][ T4177] loop1: detected capacity change from 0 to 256 [ 56.251504][ T4174] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 56.253241][ T4174] EXT4-fs (loop2): quotafile must be on filesystem root [ 56.290969][ T4177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 56.458370][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 56.649167][ T4192] loop0: detected capacity change from 0 to 1024 [ 57.846324][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 57.847105][ T4207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34'. [ 57.858558][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 57.911643][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 57.913605][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 57.959396][ T4210] hfsplus: request for non-existent node 33423360 in B*Tree [ 57.967397][ T4210] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.005183][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.015419][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.044256][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.045752][ T4217] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 58.046190][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.074402][ T4217] PKCS7: Only support pkcs7_signedData type [ 58.127062][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.129082][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.153704][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.155798][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.164643][ T4219] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.201383][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 58.203480][ T4192] hfsplus: request for non-existent node 33423360 in B*Tree [ 59.243777][ T4221] sched: RT throttling activated [ 59.726853][ T4235] loop3: detected capacity change from 0 to 256 [ 59.772051][ T4235] ======================================================= [ 59.772051][ T4235] WARNING: The mand mount option has been deprecated and [ 59.772051][ T4235] and is ignored by this kernel. Remove the mand [ 59.772051][ T4235] option from the mount to silence this warning. [ 59.772051][ T4235] ======================================================= [ 60.680509][ T4235] FAT-fs (loop3): Directory bread(block 64) failed [ 60.685233][ T4235] FAT-fs (loop3): Directory bread(block 65) failed [ 60.687072][ T4235] FAT-fs (loop3): Directory bread(block 66) failed [ 60.688673][ T4235] FAT-fs (loop3): Directory bread(block 67) failed [ 60.690293][ T4235] FAT-fs (loop3): Directory bread(block 68) failed [ 60.711313][ T4235] FAT-fs (loop3): Directory bread(block 69) failed [ 60.713097][ T4235] FAT-fs (loop3): Directory bread(block 70) failed [ 60.714813][ T4235] FAT-fs (loop3): Directory bread(block 71) failed [ 60.723823][ T4235] FAT-fs (loop3): Directory bread(block 72) failed [ 60.725668][ T4235] FAT-fs (loop3): Directory bread(block 73) failed [ 62.640409][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 62.642361][ T4026] Bluetooth: hci5: sending frame failed (-49) [ 62.730717][ T4261] device veth0_to_bridge entered promiscuous mode [ 62.753751][ T4261] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 62.954411][ T4264] device bond0 entered promiscuous mode [ 62.956045][ T4264] device bond_slave_0 entered promiscuous mode [ 62.972216][ T4264] device bond_slave_1 entered promiscuous mode [ 62.981771][ T4264] device macvlan2 entered promiscuous mode [ 63.042340][ T4271] loop0: detected capacity change from 0 to 256 [ 63.092731][ T4271] exfat: Deprecated parameter 'utf8' [ 63.094206][ T4271] exfat: Deprecated parameter 'namecase' [ 63.133322][ T4271] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 63.265429][ T4280] binder: 4279:4280 tried to acquire reference to desc 0, got 1 instead [ 63.270615][ T4068] binder: release 4279:4280 transaction 5 out, still active [ 63.275280][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 63.276938][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 63.278387][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 63.297191][ T4153] binder: undelivered transaction 7, process died. [ 63.299096][ T4153] binder: send failed reply for transaction 5, target dead [ 63.300888][ T4153] binder: undelivered transaction 6, process died. [ 64.586798][ T4298] loop0: detected capacity change from 0 to 1024 [ 64.682872][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 64.684649][ T4026] Bluetooth: hci5: sending frame failed (-49) [ 66.461368][ T4298] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 66.762437][ T4012] Bluetooth: hci5: command 0x1009 tx timeout [ 66.790030][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 66.867774][ T4327] loop4: detected capacity change from 0 to 256 [ 67.084547][ T4327] exfat: Deprecated parameter 'utf8' [ 67.085932][ T4327] exfat: Deprecated parameter 'namecase' [ 67.117766][ T4327] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 68.486542][ T4351] loop4: detected capacity change from 0 to 64 [ 68.531756][ T4351] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 68.534341][ T4351] MINIX-fs: bad superblock or unable to read bitmaps [ 68.536052][ T4350] loop0: detected capacity change from 0 to 2048 [ 68.624316][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.770759][ T4350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.80: bg 0: block 234: padding at end of block bitmap is not set [ 68.775119][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 68.778858][ T4350] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 196 with error 28 [ 68.786564][ T4350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.786564][ T4350] [ 68.789477][ T4350] EXT4-fs (loop0): Total free blocks count 0 [ 68.791036][ T4350] EXT4-fs (loop0): Free/Dirty block details [ 68.794707][ T4350] EXT4-fs (loop0): free_blocks=0 [ 68.796062][ T4350] EXT4-fs (loop0): dirty_blocks=208 [ 68.797396][ T4350] EXT4-fs (loop0): Block reservation details [ 68.798797][ T4350] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 68.986099][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.988107][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.990737][ T4347] device bridge_slave_0 entered promiscuous mode [ 69.004096][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.061473][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.064541][ T4347] device bridge_slave_1 entered promiscuous mode [ 69.097479][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 69.121762][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.126374][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.142353][ T4347] team0: Port device team_slave_0 added [ 69.146572][ T4347] team0: Port device team_slave_1 added [ 69.173015][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.174988][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.191288][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.195512][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.197217][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.211574][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.380560][ T4372] binder: 4371:4372 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.399156][ T4372] binder: 4372 RLIMIT_NICE not set [ 69.417375][ T4347] device hsr_slave_0 entered promiscuous mode [ 69.436086][ T4370] xt_TCPMSS: Only works on TCP SYN packets [ 69.450070][ T4374] binder: 4371:4374 tried to acquire reference to desc 0, got 1 instead [ 69.453317][ T4372] binder: 4372 RLIMIT_NICE not set [ 69.456013][ T4374] binder: 4371:4374 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 69.461974][ T4347] device hsr_slave_1 entered promiscuous mode [ 69.482389][ T4012] binder: release 4371:4374 transaction 12 out, still active [ 69.484404][ T4012] binder: undelivered TRANSACTION_COMPLETE [ 69.501426][ T4347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.502465][ T4012] binder: release 4371:4372 transaction 12 in, still active [ 69.505129][ T4012] binder: send failed reply for transaction 12, target dead [ 69.505208][ T4347] Cannot create hsr debugfs directory [ 69.616933][ T4377] binder: 4375:4377 tried to acquire reference to desc 0, got 1 instead [ 69.635339][ T1534] cfg80211: failed to load regulatory.db [ 69.649917][ T4377] binder: tried to use weak ref as strong ref [ 69.652107][ T4377] binder: 4375:4377 got transaction to invalid handle, 1 [ 69.670321][ T4377] binder: 4375:4377 transaction failed 29201/-22, size 0-0 line 2917 [ 69.673966][ T4068] binder: release 4375:4377 transaction 17 out, still active [ 69.676309][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 69.700729][ T4068] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.707368][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.709345][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.718155][ T4068] binder: send failed reply for transaction 17, target dead [ 70.667566][ T4068] Bluetooth: hci6: command 0x0409 tx timeout [ 70.814744][ T266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.954551][ T4392] loop3: detected capacity change from 0 to 2048 [ 72.018158][ T266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.050070][ T4392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.151715][ T266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.221190][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 72.224825][ T4405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.93: bg 0: block 234: padding at end of block bitmap is not set [ 72.232043][ T4405] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 72.235402][ T4405] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.235402][ T4405] [ 72.244155][ T4405] EXT4-fs (loop3): Total free blocks count 0 [ 72.250766][ T4405] EXT4-fs (loop3): Free/Dirty block details [ 72.254414][ T266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.260905][ T4405] EXT4-fs (loop3): free_blocks=0 [ 72.262599][ T4405] EXT4-fs (loop3): dirty_blocks=208 [ 72.263998][ T4405] EXT4-fs (loop3): Block reservation details [ 72.285484][ T4405] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 72.375019][ T4410] loop4: detected capacity change from 0 to 1024 [ 72.465873][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.467755][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.488294][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.490169][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.498870][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.500837][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.534622][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.536705][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.549489][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.555452][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.568036][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.570249][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.579979][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.587131][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.596018][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.598155][ T4410] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.519762][ T4153] Bluetooth: hci6: command 0x041b tx timeout [ 77.212207][ T4068] Bluetooth: hci6: command 0x040f tx timeout [ 78.996114][ T4457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.031531][ T4457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.044110][ T4450] loop4: detected capacity change from 0 to 256 [ 79.090031][ T4457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.982813][ T1534] Bluetooth: hci6: command 0x0419 tx timeout [ 80.304762][ T4347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.363569][ T4347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.429589][ T4347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.493372][ T4347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.185720][ T4495] netlink: 5 bytes leftover after parsing attributes in process `syz.0.119'. [ 82.292866][ T4499] loop2: detected capacity change from 0 to 512 [ 82.299516][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.338788][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.365854][ T4499] EXT4-fs (loop2): Ignoring removed nobh option [ 82.365925][ T4499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.365938][ T4499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.398113][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.398642][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.399071][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.399528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.399820][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.400065][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.400464][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.400888][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.402283][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.402326][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.402990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.420524][ T4499] EXT4-fs (loop2): 1 truncate cleaned up [ 82.420548][ T4499] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 82.455910][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.456789][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.488960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.493232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.496029][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.533209][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.536370][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.669856][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.673319][ T4522] loop2: detected capacity change from 0 to 256 [ 82.676294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.684083][ T4347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.687659][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.700526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.712517][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.721904][ T4522] exfat: Deprecated parameter 'utf8' [ 82.723285][ T4522] exfat: Deprecated parameter 'namecase' [ 82.724816][ T4522] exfat: Deprecated parameter 'utf8' [ 82.803822][ T4522] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 82.817998][ T4531] syz.3.127 sent an empty control message without MSG_MORE. [ 83.109815][ T4541] loop0: detected capacity change from 0 to 2048 [ 83.857795][ T4541] UDF-fs: bad mount option "lastblļck=000000" or missing value [ 83.904111][ T26] audit: type=1326 audit(83.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 83.948990][ T26] audit: type=1326 audit(83.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 83.963826][ T26] audit: type=1326 audit(83.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.013431][ T26] audit: type=1326 audit(83.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.018985][ T26] audit: type=1326 audit(83.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffadedb120 code=0x7ffc0000 [ 84.024554][ T26] audit: type=1326 audit(83.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.029897][ T26] audit: type=1326 audit(83.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.036246][ T26] audit: type=1326 audit(83.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.050149][ T26] audit: type=1326 audit(83.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.056437][ T26] audit: type=1326 audit(83.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadedc9e8 code=0x7ffc0000 [ 84.104574][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.106791][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.163438][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.928390][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.931951][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.294428][ T4347] device veth0_vlan entered promiscuous mode [ 86.301153][ T4347] device veth1_vlan entered promiscuous mode [ 86.333223][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.335965][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.339059][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.414954][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.430030][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.437070][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.545321][ T266] device hsr_slave_0 left promiscuous mode [ 86.588964][ T4584] syz.0.137 uses obsolete (PF_INET,SOCK_PACKET) [ 86.592498][ T266] device hsr_slave_1 left promiscuous mode [ 86.752976][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.755028][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.759716][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.770109][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.783161][ T266] device bridge_slave_1 left promiscuous mode [ 86.791820][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.858545][ T266] device bridge_slave_0 left promiscuous mode [ 86.860362][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.978375][ T266] device veth1_macvtap left promiscuous mode [ 87.980388][ T266] device veth0_macvtap left promiscuous mode [ 87.983170][ T266] device veth1_vlan left promiscuous mode [ 87.984826][ T266] device veth0_vlan left promiscuous mode [ 88.240225][ T4596] loop2: detected capacity change from 0 to 32768 [ 88.539263][ T266] team0 (unregistering): Port device team_slave_1 removed [ 88.587935][ T266] team0 (unregistering): Port device team_slave_0 removed [ 88.631660][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.703563][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.758906][ T4603] 9pnet: Insufficient options for proto=fd [ 88.927860][ T266] bond0 (unregistering): Released all slaves [ 89.039968][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.043288][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.049928][ T4347] device veth0_macvtap entered promiscuous mode [ 89.184679][ T4347] device veth1_macvtap entered promiscuous mode [ 89.193384][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 89.219253][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.223335][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.225903][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.228812][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.231591][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.235180][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.237880][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.240859][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.245180][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.249874][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.253288][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.255769][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.258570][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.261870][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.264953][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.267686][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.270629][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.275157][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.280593][ T4347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.286604][ T4347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.289868][ T4347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.293797][ T4347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.298455][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.302901][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.305767][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.309292][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.312845][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.359299][ T4611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.146'. [ 89.370932][ T4611] device veth1_macvtap left promiscuous mode [ 89.417803][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.420681][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.425758][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.437834][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 89.441114][ T4611] netlink: 72 bytes leftover after parsing attributes in process `syz.0.146'. [ 89.444813][ T4611] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 89.460772][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.463511][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.467330][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.718717][ T4618] openvswitch: netlink: Key type 4613 is out of range max 29 [ 89.762629][ T4620] loop2: detected capacity change from 0 to 2048 [ 90.626724][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 90.629046][ T4618] tipc: Started in network mode [ 90.630279][ T4618] tipc: Node identity @emory.en, cluster identity 8 [ 90.657747][ T4623] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.664467][ T4618] netlink: 120 bytes leftover after parsing attributes in process `syz.0.147'. [ 90.695539][ T4624] device dummy0 entered promiscuous mode [ 90.727210][ T4624] batman_adv: batadv0: Adding interface: macsec1 [ 90.728879][ T4624] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.753221][ T4624] batman_adv: batadv0: Interface activated: macsec1 [ 90.766350][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 91.018007][ T4638] loop2: detected capacity change from 0 to 256 [ 91.596154][ T4636] device pim6reg1 entered promiscuous mode [ 91.921810][ T4638] exfat: Deprecated parameter 'namecase' [ 91.923352][ T4638] exfat: Deprecated parameter 'utf8' [ 91.924723][ T4638] exfat: Deprecated parameter 'namecase' [ 91.926105][ T4638] exfat: Deprecated parameter 'utf8' [ 91.935573][ T4644] loop0: detected capacity change from 0 to 8 [ 91.951144][ T4636] loop3: detected capacity change from 0 to 128 [ 91.969038][ T4638] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 91.975436][ T4644] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 92.147612][ T4636] FAT-fs (loop3): bogus logical sector size 12 [ 92.149322][ T4636] FAT-fs (loop3): Can't find a valid FAT filesystem [ 93.293417][ T4651] cramfs: Error -5 while decompressing! [ 93.309232][ T4651] cramfs: 00000000016fdf6f(26)->00000000f4696624(4096) [ 93.331620][ T4651] cramfs: Error -3 while decompressing! [ 93.333128][ T4651] cramfs: 000000003febda33(26)->00000000e9b3a476(4096) [ 93.342909][ T4651] cramfs: Error -3 while decompressing! [ 93.344546][ T4651] cramfs: 000000000e4df5d4(16)->000000008bbea079(4096) [ 93.359909][ T4651] cramfs: Error -5 while decompressing! [ 93.362034][ T4651] cramfs: 00000000016fdf6f(26)->00000000f4696624(4096) [ 93.576639][ T4657] loop2: detected capacity change from 0 to 64 [ 93.603906][ T4655] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 93.605954][ T4655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 93.654220][ T4655] bridge0: port 3(veth0_vlan) entered blocking state [ 93.656258][ T4655] bridge0: port 3(veth0_vlan) entered disabled state [ 93.665343][ T4655] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 93.786139][ T4663] loop3: detected capacity change from 0 to 2048 [ 93.816060][ T4670] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 93.816060][ T4670] The task syz.2.160 (4670) triggered the difference, watch for misbehavior. [ 93.821771][ T3640] loop3: p1 < > p3 p4 < > [ 93.825461][ T3640] loop3: p3 start 4284289 is beyond EOD, truncated [ 93.839348][ T4663] loop3: p1 < > p3 p4 < > [ 93.845613][ T4663] loop3: p3 start 4284289 is beyond EOD, truncated [ 93.858799][ T3640] loop3: p1 < > p3 p4 < > [ 93.860817][ T3640] loop3: p3 start 4284289 is beyond EOD, truncated [ 94.080249][ T3640] loop3: p1 < > p3 p4 < > [ 94.088065][ T3640] loop3: p3 start 4284289 is beyond EOD, truncated [ 95.107046][ T4684] binder: 4682:4684 tried to acquire reference to desc 0, got 1 instead [ 95.151011][ T4684] binder: release 4682:4684 transaction 28 out, still active [ 95.192012][ T4684] binder: undelivered TRANSACTION_COMPLETE [ 95.213093][ T4690] Zero length message leads to an empty skb [ 95.271523][ T4685] loop0: detected capacity change from 0 to 4096 [ 95.291384][ T4115] binder: send failed reply for transaction 28, target dead [ 95.327034][ T4685] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 95.396157][ T4700] binder: 4692:4700 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 95.399644][ T4700] binder: 4700 RLIMIT_NICE not set [ 95.400945][ T4700] binder: 4692:4700 ioctl c0306201 20000580 returned -14 [ 95.428501][ T4699] binder: 4698:4699 tried to acquire reference to desc 0, got 1 instead [ 95.445013][ T4699] binder: 4698:4699 BC_FREE_BUFFER u0000000025000000 no match [ 95.450438][ T4699] binder: 4698:4699 unknown command 0 [ 95.462248][ T4699] binder: 4698:4699 ioctl c0306201 20000540 returned -22 [ 95.467747][ T4069] binder: release 4698:4699 transaction 35 out, still active [ 95.470671][ T4069] binder: undelivered TRANSACTION_COMPLETE [ 95.527764][ T4701] udc-core: couldn't find an available UDC or it's busy [ 95.529487][ T4701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.600273][ T4115] binder: send failed reply for transaction 35, target dead [ 96.547925][ T4707] loop1: detected capacity change from 0 to 1024 [ 96.604154][ T4710] loop3: detected capacity change from 0 to 128 [ 96.624147][ T4707] EXT4-fs (loop1): error: journal path ./file0 is not a block device [ 97.558844][ T4714] loop0: detected capacity change from 0 to 512 [ 97.634352][ T4710] loop3: detected capacity change from 0 to 4096 [ 97.636287][ T4719] loop4: detected capacity change from 0 to 47 [ 97.640418][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 97.644546][ T4714] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.546814][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.549630][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.564001][ T4719] MINIX-fs: bad superblock [ 98.598536][ T4710] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 98.630799][ T4714] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.181: invalid block [ 98.639831][ T4714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.181: invalid indirect mapped block 4294967295 (level 1) [ 98.647238][ T4714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.181: invalid indirect mapped block 4294967295 (level 1) [ 98.655456][ T4714] EXT4-fs (loop0): 2 truncates cleaned up [ 98.655762][ T4710] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.656975][ T4714] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000002,dioread_nolock,,errors=continue. Quota mode: writeback. [ 98.811469][ T526] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 98.847066][ T4710] Cannot find add_set index 0 as target [ 98.851797][ T4714] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.854634][ T4714] EXT4-fs error (device loop0): ext4_remount:5854: comm syz.0.181: Abort forced by user [ 99.631386][ T4714] EXT4-fs (loop0): Remounting filesystem read-only [ 99.634963][ T4714] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,. Quota mode: writeback. [ 99.654627][ T4733] loop4: detected capacity change from 0 to 2048 [ 99.732220][ T4022] ntfs3: loop3: ino=5, "/" directory corrupted [ 99.772572][ T4022] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 99.802327][ T4733] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.944412][ T4033] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /46/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 100.129737][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.149702][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.250974][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.285753][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.286730][ T4747] loop0: detected capacity change from 0 to 40427 [ 100.326905][ T4747] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 100.329524][ T4747] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.338194][ T4747] F2FS-fs (loop0): invalid crc value [ 100.360068][ T4747] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.396629][ T4747] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.398513][ T4747] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.451016][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.489330][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.514836][ T4761] udc-core: couldn't find an available UDC or it's busy [ 101.516586][ T4761] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.534888][ T4764] udc-core: couldn't find an available UDC or it's busy [ 101.552002][ T4764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.576287][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.597167][ T4755] udevd[4755]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.762997][ T4766] binder: 4765:4766 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 102.635152][ T4766] binder: 4765:4766 got transaction to invalid handle, 1 [ 102.637216][ T4766] binder: 4765:4766 transaction failed 29201/-22, size 0-0 line 2917 [ 102.649152][ T4153] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.931003][ T4762] chnl_net:caif_netlink_parms(): no params data found [ 103.002963][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 103.060564][ T4778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 103.200799][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 103.227868][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.485453][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.091176][ T4762] device bridge_slave_0 entered promiscuous mode [ 104.114142][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.122987][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.160977][ T4153] Bluetooth: hci0: command 0x0409 tx timeout [ 104.164730][ T4762] device bridge_slave_1 entered promiscuous mode [ 104.283560][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.296706][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.385306][ T4787] device syzkaller0 entered promiscuous mode [ 104.426154][ T4762] team0: Port device team_slave_0 added [ 104.441788][ T4762] team0: Port device team_slave_1 added [ 104.592205][ T4792] loop2: detected capacity change from 0 to 4096 [ 104.636187][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.637862][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.679591][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.692992][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.694653][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.737914][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.775188][ T4798] loop4: detected capacity change from 0 to 8 [ 105.560369][ T4762] device hsr_slave_0 entered promiscuous mode [ 105.772626][ T4762] device hsr_slave_1 entered promiscuous mode [ 105.781737][ T4802] binder: 4801:4802 tried to acquire reference to desc 0, got 1 instead [ 105.790263][ T4802] binder_alloc: 4801: pid 4801 spamming oneway? 2 buffers allocated for a total size of 5192 [ 105.799381][ T4762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.801387][ T4762] Cannot create hsr debugfs directory [ 105.831873][ T7] binder: undelivered TRANSACTION_COMPLETE [ 105.833592][ T7] binder: undelivered TRANSACTION_COMPLETE [ 105.906180][ T7] binder: undelivered transaction 44, process died. [ 105.907875][ T7] binder: undelivered transaction 43, process died. [ 105.927026][ T4804] loop4: detected capacity change from 0 to 256 [ 105.943718][ T4804] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.039423][ T4798] netlink: 'syz.4.207': attribute type 12 has an invalid length. [ 106.184266][ T4762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.191695][ T4153] Bluetooth: hci0: command 0x041b tx timeout [ 106.238594][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 106.296459][ T4762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.395449][ T4762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.504613][ T4762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.554760][ T4808] loop4: detected capacity change from 0 to 4096 [ 106.592446][ T4808] __ntfs_warning: 16 callbacks suppressed [ 106.592460][ T4808] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.598893][ T4808] ntfs: (device loop4): parse_options(): Invalid errors option argument: co [ 106.605017][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.607684][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.716852][ T4762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.762847][ T4762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.765005][ T7] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 106.767178][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.769256][ T7] usb 1-1: Product: syz [ 106.770241][ T7] usb 1-1: Manufacturer: syz [ 106.781391][ T7] usb 1-1: SerialNumber: syz [ 106.787749][ T7] usb 1-1: config 0 descriptor?? [ 106.813408][ T4762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.982904][ T4762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.626994][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.653555][ T4153] usb 1-1: USB disconnect, device number 2 [ 107.670587][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.698434][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.710422][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.731505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.735422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.738398][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.740192][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.764799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.767730][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.782654][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.789645][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.791563][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.805756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.808746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.831381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.835194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.848203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.858234][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.910306][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.940605][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.943843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.955074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.325312][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.820036][ T1534] Bluetooth: hci0: command 0x040f tx timeout [ 108.830808][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.100237][ T4828] loop0: detected capacity change from 0 to 1024 [ 109.117424][ T4830] No such timeout policy "syz0" [ 109.128482][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.130478][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.151946][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.194893][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.203104][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.205824][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.206984][ T4825] loop1: detected capacity change from 0 to 4096 [ 109.235361][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.238000][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.244605][ T4762] device veth0_vlan entered promiscuous mode [ 109.246483][ T4825] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 109.273301][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.275773][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.294441][ T4762] device veth1_vlan entered promiscuous mode [ 109.316042][ T4825] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.433263][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.436553][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.439297][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.451677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.456968][ T4762] device veth0_macvtap entered promiscuous mode [ 109.533353][ T4762] device veth1_macvtap entered promiscuous mode [ 109.563647][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.568831][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.575252][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.590149][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.613551][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.616220][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.618720][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.632314][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.635043][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.637722][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.663604][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.673658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.676284][ T355] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 109.678751][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.683249][ T4347] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 109.699404][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.707088][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.713531][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.716285][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.720442][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.728941][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.751437][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.754170][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.756528][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.758929][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.760996][ T4843] loop4: detected capacity change from 0 to 64 [ 109.780288][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.792035][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.795782][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.798358][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.802342][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.811277][ T4762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.813781][ T4762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.815888][ T4762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.818100][ T4762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.047303][ T4070] Bluetooth: hci0: command 0x0419 tx timeout [ 111.086935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.089211][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.111194][ T4858] loop1: detected capacity change from 0 to 8 [ 111.160986][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.180282][ T355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.183176][ T355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.187466][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.756299][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 111.869583][ T4888] loop4: detected capacity change from 0 to 1024 [ 112.038855][ T4864] loop3: detected capacity change from 0 to 32768 [ 112.087399][ T4888] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 112.124371][ T4888] EXT4-fs (loop4): mount failed [ 112.892951][ T4851] loop0: detected capacity change from 0 to 40427 [ 117.409875][ T4960] xt_ipcomp: unknown flags B [ 118.823799][ T4086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.858486][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 118.925535][ T4086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.077078][ T4086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.137182][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.150419][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.154761][ T4947] device bridge_slave_0 entered promiscuous mode [ 119.231338][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 119.249296][ T4086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.276931][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.278867][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.282805][ T4947] device bridge_slave_1 entered promiscuous mode [ 119.287664][ T4993] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 119.346021][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.361167][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.461591][ T4947] team0: Port device team_slave_0 added [ 119.465084][ T4947] team0: Port device team_slave_1 added [ 119.505678][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.507494][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.555172][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.560526][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.563675][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.570362][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.653672][ T4947] device hsr_slave_0 entered promiscuous mode [ 119.695673][ T4947] device hsr_slave_1 entered promiscuous mode [ 120.568055][ C1] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 120.611850][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.613765][ T4947] Cannot create hsr debugfs directory [ 120.715745][ T4998] tipc: Started in network mode [ 120.717051][ T4998] tipc: Node identity ffffffff, cluster identity 4711 [ 120.718799][ T4998] tipc: Node number set to 4294967295 [ 122.555164][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 122.819318][ T5020] loop1: detected capacity change from 0 to 4096 [ 123.087621][ T5020] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.093083][ T5020] ntfs: (device loop1): parse_options(): Invalid errors option argument: co [ 123.171063][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 124.789286][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 126.640376][ T5069] loop4: detected capacity change from 0 to 47 [ 126.870256][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 128.614710][ T4947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.889601][ T5093] loop1: detected capacity change from 0 to 512 [ 128.953204][ T4947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.121453][ T5099] Cannot find add_set index 0 as target [ 129.897069][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.900290][ T4947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.025292][ T5093] udc-core: couldn't find an available UDC or it's busy [ 130.028753][ T5093] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.042276][ T4947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.075246][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.077363][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.146673][ T5115] loop3: detected capacity change from 0 to 4096 [ 131.203815][ T5115] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 131.218157][ T5115] ntfs: (device loop3): parse_options(): Invalid errors option argument: co [ 131.255669][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.270119][ T5117] device vlan2 entered promiscuous mode [ 131.274799][ T5117] device bond0 entered promiscuous mode [ 131.276512][ T5117] device bond_slave_0 entered promiscuous mode [ 131.278079][ T5117] device bond_slave_1 entered promiscuous mode [ 131.302888][ T5117] device bond0 left promiscuous mode [ 131.304396][ T5117] device bond_slave_0 left promiscuous mode [ 131.305971][ T5117] device bond_slave_1 left promiscuous mode [ 131.355612][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.358549][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.530819][ T5122] batman_adv: Cannot find parent device [ 131.541890][ T5122] batman_adv: batadv0: Adding interface: ip6gretap1 [ 131.543751][ T5122] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.550629][ T5122] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 131.557325][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.559546][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 131.562562][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.564633][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.567542][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.569586][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.572702][ T5120] batman_adv: batadv0: Removing interface: ip6gretap1 [ 132.594055][ T5133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.607237][ T5133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.620009][ T5133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.866977][ T5135] udc-core: couldn't find an available UDC or it's busy [ 132.868853][ T5135] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.892655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.895315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.897755][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.899476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.902665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.905249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.907580][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.909428][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.912807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.009468][ T4947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.014582][ T4947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.020487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.024811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.027635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.030937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.034464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.037450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.040077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.043828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.046606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.049113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.056843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.059529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.170332][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.172991][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.197079][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.213097][ T4086] device hsr_slave_0 left promiscuous mode [ 133.251785][ T4086] device hsr_slave_1 left promiscuous mode [ 133.331497][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.333682][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.336212][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.338113][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.340720][ T4086] device bridge_slave_1 left promiscuous mode [ 133.343279][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.393778][ T4086] device bridge_slave_0 left promiscuous mode [ 133.395598][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.512220][ T4086] device veth1_macvtap left promiscuous mode [ 133.513885][ T4086] device veth0_macvtap left promiscuous mode [ 133.515603][ T4086] device veth1_vlan left promiscuous mode [ 133.517163][ T4086] device veth0_vlan left promiscuous mode [ 133.759881][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 133.773240][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 133.782547][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.821735][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.947888][ T4086] bond0 (unregistering): Released all slaves [ 134.071877][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.075006][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.082864][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.085681][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.090310][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.093117][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.096555][ T4947] device veth0_vlan entered promiscuous mode [ 134.105711][ T4947] device veth1_vlan entered promiscuous mode [ 134.123275][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.125944][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.128435][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.131054][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.139300][ T4947] device veth0_macvtap entered promiscuous mode [ 134.146566][ T4947] device veth1_macvtap entered promiscuous mode [ 134.159200][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.162635][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.165059][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.167599][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.169955][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.173541][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.176761][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.179485][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.183669][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.185662][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.188154][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.190706][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.194394][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.199891][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.203311][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.205850][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.208552][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.210999][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.214039][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.216440][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.218857][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.222712][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.226301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.228928][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.234821][ T4947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.236969][ T4947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.239051][ T4947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.241119][ T4947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.297753][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.300057][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.306239][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.327806][ T4548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.330041][ T4548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.336251][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.431718][ T5148] loop3: detected capacity change from 0 to 1024 [ 134.546745][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 134.582463][ T5155] loop2: detected capacity change from 0 to 47 [ 134.718916][ T5156] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 134.721350][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 136.279068][ T5170] kernel read not supported for file /šLŲ (pid: 5170 comm: syz.0.300) [ 138.737563][ T5187] loop0: detected capacity change from 0 to 512 [ 138.778744][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 139.038328][ T5187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.516950][ T1960] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 139.590444][ T1960] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 139.938830][ T1960] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 140.030992][ T5199] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.304: Directory hole found for htree leaf block 0 [ 140.177361][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 140.179815][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 140.182614][ T5204] tipc: Started in network mode [ 140.183873][ T5204] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 140.200281][ T5204] tipc: Enabled bearer , priority 10 [ 140.340352][ T5207] udc-core: couldn't find an available UDC or it's busy [ 140.371903][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.601335][ T1960] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.314904][ T1534] tipc: Node number set to 8432298 [ 141.871459][ T1960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.874428][ T1960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.876809][ T1960] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 141.879351][ T1960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.932811][ T1960] usb 1-1: config 0 descriptor?? [ 142.013744][ T5222] xt_hashlimit: max too large, truncated to 1048576 [ 142.139913][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 143.303661][ T5208] udc-core: couldn't find an available UDC or it's busy [ 143.305519][ T5208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.371687][ T4012] Bluetooth: hci0: command 0x0409 tx timeout [ 143.439597][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.457575][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.480345][ T5212] device bridge_slave_0 entered promiscuous mode [ 143.495847][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.500629][ T5239] loop2: detected capacity change from 0 to 256 [ 143.516982][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.520978][ T5212] device bridge_slave_1 entered promiscuous mode [ 143.545612][ T1960] chicony 0003:04F2:1236.0002: item fetching failed at offset 7/11 [ 143.548253][ T1960] chicony 0003:04F2:1236.0002: Chicony hid parse failed: -22 [ 143.678642][ T1960] chicony: probe of 0003:04F2:1236.0002 failed with error -22 [ 144.262624][ T5239] FAT-fs (loop2): Directory bread(block 64) failed [ 144.264504][ T5239] FAT-fs (loop2): Directory bread(block 65) failed [ 144.281092][ T5239] FAT-fs (loop2): Directory bread(block 66) failed [ 144.291281][ T5239] FAT-fs (loop2): Directory bread(block 67) failed [ 144.293093][ T5239] FAT-fs (loop2): Directory bread(block 68) failed [ 144.294805][ T5239] FAT-fs (loop2): Directory bread(block 69) failed [ 144.320215][ T5239] FAT-fs (loop2): Directory bread(block 70) failed [ 144.343771][ T5239] FAT-fs (loop2): Directory bread(block 71) failed [ 144.354935][ T5239] FAT-fs (loop2): Directory bread(block 72) failed [ 144.356763][ T5239] FAT-fs (loop2): Directory bread(block 73) failed [ 144.364018][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.368902][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.373202][ T1960] usb 1-1: USB disconnect, device number 3 [ 144.632564][ T5212] team0: Port device team_slave_0 added [ 144.656398][ T5243] device syzkaller0 entered promiscuous mode [ 146.643674][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 147.833756][ T5212] team0: Port device team_slave_1 added [ 147.869069][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.880741][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.901294][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.908383][ T5258] tipc: Started in network mode [ 147.909808][ T5258] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 147.912338][ T5258] tipc: Enabling of bearer rejected, failed to enable media [ 147.914796][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.916606][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.924400][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.945248][ T355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.062043][ T355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.075753][ T5271] loop0: detected capacity change from 0 to 64 [ 148.095838][ T5212] device hsr_slave_0 entered promiscuous mode [ 148.139969][ T5271] minix_free_block (loop0:2): bit already cleared [ 148.142215][ T5271] minix_free_block (loop0:3): bit already cleared [ 148.144143][ T5271] minix_free_block (loop0:4): bit already cleared [ 148.154107][ T5212] device hsr_slave_1 entered promiscuous mode [ 148.157070][ T5271] minix_free_block (loop0:1): bit already cleared [ 148.158903][ T5271] minix_free_block (loop0:4): bit already cleared [ 148.160731][ T5271] minix_free_block (loop0:3): bit already cleared [ 148.162710][ T5271] minix_free_block (loop0:2): bit already cleared [ 148.164456][ T5271] minix_free_block (loop0:1): bit already cleared [ 148.201366][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.203272][ T5212] Cannot create hsr debugfs directory [ 148.205915][ T5269] netlink: 'syz.4.337': attribute type 15 has an invalid length. [ 148.247653][ T355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.334796][ T355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.507008][ T5282] loop1: detected capacity change from 0 to 256 [ 149.384298][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 150.039559][ T5282] FAT-fs (loop1): Directory bread(block 64) failed [ 150.062912][ T5282] FAT-fs (loop1): Directory bread(block 65) failed [ 150.064814][ T5282] FAT-fs (loop1): Directory bread(block 66) failed [ 150.066551][ T5282] FAT-fs (loop1): Directory bread(block 67) failed [ 150.068320][ T5282] FAT-fs (loop1): Directory bread(block 68) failed [ 150.101836][ T5282] FAT-fs (loop1): Directory bread(block 69) failed [ 150.103738][ T5282] FAT-fs (loop1): Directory bread(block 70) failed [ 150.105449][ T5282] FAT-fs (loop1): Directory bread(block 71) failed [ 150.107192][ T5282] FAT-fs (loop1): Directory bread(block 72) failed [ 150.315788][ T5282] FAT-fs (loop1): Directory bread(block 73) failed [ 151.326939][ T5288] loop2: detected capacity change from 0 to 8192 [ 151.479659][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 151.493925][ T1960] Bluetooth: hci0: command 0x0419 tx timeout [ 152.497549][ T5288] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 152.515816][ T5288] REISERFS (device loop2): using ordered data mode [ 152.517631][ T5288] reiserfs: using flush barriers [ 152.520760][ T5288] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.530693][ T355] tipc: Left network mode [ 152.545274][ T5288] REISERFS (device loop2): checking transaction log (loop2) [ 152.557715][ T5288] REISERFS (device loop2): Using r5 hash to sort names [ 152.736008][ T5315] netlink: 'syz.1.353': attribute type 15 has an invalid length. [ 153.575740][ T5327] loop1: detected capacity change from 0 to 512 [ 153.578790][ T5325] loop4: detected capacity change from 0 to 64 [ 153.691957][ T5326] udc-core: couldn't find an available UDC or it's busy [ 153.694382][ T5326] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.712312][ T5327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.764153][ T5327] EXT4-fs (loop1): 1 truncate cleaned up [ 153.765811][ T5327] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 153.849733][ T5336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.358'. [ 153.917216][ T4347] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 153.992343][ T4347] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.008475][ T4347] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 154.028320][ T4347] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.050445][ T4347] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 154.074881][ T4347] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.102253][ T4347] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 154.109446][ T5212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.117211][ T5348] loop7: detected capacity change from 0 to 16384 [ 154.119309][ T4347] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.132921][ T4347] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 154.140917][ T4347] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.160935][ T5212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.218748][ T5212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.265086][ T5212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.489188][ T5352] loop_set_status: loop7 () has still dirty pages (nrpages=527) [ 154.608822][ T5364] loop0: detected capacity change from 0 to 256 [ 154.695477][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.722197][ T5364] FAT-fs (loop0): Directory bread(block 64) failed [ 154.724215][ T5364] FAT-fs (loop0): Directory bread(block 65) failed [ 154.725793][ T5364] FAT-fs (loop0): Directory bread(block 66) failed [ 154.731858][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.734335][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.740021][ T5364] FAT-fs (loop0): Directory bread(block 67) failed [ 154.746292][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.750205][ T5364] FAT-fs (loop0): Directory bread(block 68) failed [ 154.761054][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.763990][ T5364] FAT-fs (loop0): Directory bread(block 69) failed [ 154.764097][ T5364] FAT-fs (loop0): Directory bread(block 70) failed [ 154.764137][ T5364] FAT-fs (loop0): Directory bread(block 71) failed [ 154.769084][ T5364] FAT-fs (loop0): Directory bread(block 72) failed [ 154.769734][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.770702][ T5364] FAT-fs (loop0): Directory bread(block 73) failed [ 154.780740][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.782663][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.021431][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.024588][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.031809][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.035399][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.037331][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.639906][ T5212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.642816][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.936057][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.079911][ T5212] device veth0_vlan entered promiscuous mode [ 157.110075][ T5212] device veth1_vlan entered promiscuous mode [ 157.199761][ T5212] device veth0_macvtap entered promiscuous mode [ 157.221862][ T5212] device veth1_macvtap entered promiscuous mode [ 157.260209][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.274403][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.287468][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.290375][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.306325][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.313308][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.315820][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.319174][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.359777][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.366689][ T5355] loop_set_block_size: loop7 () has still dirty pages (nrpages=736) [ 157.378742][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.382769][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.389058][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.392503][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.397547][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.536591][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.540150][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.543401][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.545932][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.548566][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.585054][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.587801][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.605694][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.607800][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.610752][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.616909][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.633914][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.644478][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.654424][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.663726][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.676893][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.679781][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.684064][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.686751][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.688717][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.690864][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.694568][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.697123][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.699830][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.709967][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.712750][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.715087][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.717613][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.720111][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.722544][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.726126][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.730315][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.741455][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.744079][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.746682][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.749560][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.760941][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.771998][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.807478][ T5212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.809731][ T5212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.823881][ T5212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.827042][ T5212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.838611][ T5390] netlink: 'syz.0.371': attribute type 7 has an invalid length. [ 157.840546][ T5390] netlink: 'syz.0.371': attribute type 39 has an invalid length. [ 157.868245][ T5393] bridge1: port 1(gretap1) entered blocking state [ 157.870022][ T5393] bridge1: port 1(gretap1) entered disabled state [ 158.823184][ T5393] device gretap1 entered promiscuous mode [ 158.944700][ T5390] netlink: 'syz.0.371': attribute type 7 has an invalid length. [ 158.946260][ T5402] loop2: detected capacity change from 0 to 256 [ 158.946987][ T5390] netlink: 'syz.0.371': attribute type 39 has an invalid length. [ 158.991008][ T5402] exFAT-fs (loop2): bogus data start sector [ 159.002470][ T5402] exFAT-fs (loop2): failed to read boot sector [ 159.010210][ T5402] exFAT-fs (loop2): failed to recognize exfat type [ 159.063521][ T355] device hsr_slave_0 left promiscuous mode [ 159.141053][ T355] device hsr_slave_1 left promiscuous mode [ 159.328447][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.334694][ T355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.584776][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.690894][ T355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.182188][ T355] device bridge_slave_1 left promiscuous mode [ 160.190730][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.243934][ T355] device bridge_slave_0 left promiscuous mode [ 160.245915][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.751561][ T355] device veth1_macvtap left promiscuous mode [ 160.753287][ T355] device veth0_macvtap left promiscuous mode [ 160.754973][ T355] device veth1_vlan left promiscuous mode [ 160.756634][ T355] device veth0_vlan left promiscuous mode [ 161.145012][ T355] team0 (unregistering): Port device team_slave_1 removed [ 161.157156][ T355] team0 (unregistering): Port device team_slave_0 removed [ 161.161727][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 161.165934][ T355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.222417][ T355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.369076][ T355] bond0 (unregistering): Released all slaves [ 161.539567][ T5422] loop2: detected capacity change from 0 to 512 [ 161.574194][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.577187][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.582434][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.619502][ T526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.621272][ T5422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.627432][ T526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.655495][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.682035][ T5422] EXT4-fs (loop2): 1 orphan inode deleted [ 161.690728][ T5422] EXT4-fs (loop2): 1 truncate cleaned up [ 161.703788][ T5422] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,block_validity,quota,. Quota mode: writeback. [ 161.753363][ T5422] EXT4-fs (loop2): shut down requested (0) [ 161.833038][ T5435] EXT4-fs error (device loop2): ext4_lookup:1856: inode #15: comm syz.2.382: iget: bad extra_isize 46 (inode size 256) [ 161.868275][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 161.907579][ T5435] EXT4-fs (loop2): Remounting filesystem read-only [ 161.971009][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.980318][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.986783][ T5407] device bridge_slave_0 entered promiscuous mode [ 162.014068][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.016030][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.018728][ T5407] device bridge_slave_1 entered promiscuous mode [ 162.113036][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.129301][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.188817][ T5407] team0: Port device team_slave_0 added [ 162.194878][ T5407] team0: Port device team_slave_1 added [ 162.226917][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.228899][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.236376][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.240749][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.243000][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.249296][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.959707][ T4068] ------------[ cut here ]------------ [ 162.961462][ T4068] WARNING: CPU: 0 PID: 4068 at kernel/rcu/sync.c:193 rcu_sync_dtor+0x14c/0x170 [ 162.963886][ T4068] Modules linked in: [ 162.964892][ T4068] CPU: 0 PID: 4068 Comm: kworker/0:4 Not tainted 5.15.167-syzkaller #0 [ 162.967179][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.969983][ T4068] Workqueue: events destroy_super_work [ 162.971413][ T4068] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.973606][ T4068] pc : rcu_sync_dtor+0x14c/0x170 [ 162.974946][ T4068] lr : percpu_free_rwsem+0x48/0x88 [ 162.976334][ T4068] sp : ffff800020397ad0 [ 162.977460][ T4068] x29: ffff800020397ad0 x28: ffff0001b41a0100 x27: ffff0000cdab4218 [ 162.979621][ T4068] x26: ffff0000d4e6e848 x25: ffff0001b41a4e00 x24: dfff800000000000 [ 162.981850][ T4068] x23: 1fffe0001a9cdd09 x22: 1fffe0001a9cdc7f x21: dfff800000000000 [ 162.984085][ T4068] x20: ffff0000d4e6e394 x19: ffff0000d4e6e390 x18: 0000000000000101 [ 162.986358][ T4068] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 0000000000000001 [ 162.988574][ T4068] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000117ba851 [ 162.990827][ T4068] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 162.992997][ T4068] x8 : 0000000000000001 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 162.995183][ T4068] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 162.997540][ T4068] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d4e6e390 [ 162.999794][ T4068] Call trace: [ 163.000707][ T4068] rcu_sync_dtor+0x14c/0x170 [ 163.002013][ T4068] percpu_free_rwsem+0x48/0x88 [ 163.003362][ T4068] destroy_super_work+0x20/0x48 [ 163.004700][ T4068] process_one_work+0x790/0x11b8 [ 163.006074][ T4068] worker_thread+0x910/0x1034 [ 163.007324][ T4068] kthread+0x37c/0x45c [ 163.008417][ T4068] ret_from_fork+0x10/0x20 [ 163.009584][ T4068] irq event stamp: 346882 [ 163.010805][ T4068] hardirqs last enabled at (346881): [] _raw_spin_unlock_irq+0x9c/0x134 [ 163.013616][ T4068] hardirqs last disabled at (346882): [] el1_dbg+0x24/0x80 [ 163.016087][ T4068] softirqs last enabled at (346878): [] handle_softirqs+0xb88/0xdbc [ 163.018778][ T4068] softirqs last disabled at (346835): [] do_softirq+0xfc/0x1b0 [ 163.021257][ T4068] ---[ end trace e79e50126106d6c1 ]--- [ 163.174782][ T5407] device hsr_slave_0 entered promiscuous mode [ 163.201718][ T5407] device hsr_slave_1 entered promiscuous mode [ 163.206361][ T4068] ------------[ cut here ]------------ [ 163.207736][ T4068] WARNING: CPU: 0 PID: 4068 at kernel/rcu/sync.c:194 rcu_sync_dtor+0xd8/0x170 [ 163.209825][ T4068] Modules linked in: [ 163.210637][ T4068] CPU: 0 PID: 4068 Comm: kworker/0:4 Tainted: G W 5.15.167-syzkaller #0 [ 163.213108][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 163.215702][ T4068] Workqueue: events destroy_super_work [ 163.217138][ T4068] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 163.219090][ T4068] pc : rcu_sync_dtor+0xd8/0x170 [ 163.220416][ T4068] lr : percpu_free_rwsem+0x48/0x88 [ 163.221675][ T4068] sp : ffff800020397ad0 [ 163.222867][ T4068] x29: ffff800020397ad0 x28: ffff0001b41a0100 x27: ffff0000cdab4218 [ 163.225049][ T4068] x26: ffff0000d4e6e848 x25: ffff0001b41a4e00 x24: dfff800000000000 [ 163.227007][ T4068] x23: 1fffe0001a9cdd09 x22: 1fffe0001a9cdc72 x21: dfff800000000000 [ 163.229123][ T4068] x20: ffff0000d4e6e394 x19: ffff0000d4e6e390 x18: 0000000000000101 [ 163.231245][ T4068] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 0000000000000001 [ 163.231487][ T4012] Bluetooth: hci3: command 0x041b tx timeout [ 163.233192][ T4068] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000117ba851 [ 163.236753][ T4068] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 163.238833][ T4068] x8 : 0000000000000002 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 163.240998][ T4068] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 163.243105][ T4068] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d4e6e390 [ 163.245242][ T4068] Call trace: [ 163.245999][ T4068] rcu_sync_dtor+0xd8/0x170 [ 163.247230][ T4068] percpu_free_rwsem+0x48/0x88 [ 163.248496][ T4068] destroy_super_work+0x20/0x48 [ 163.249728][ T4068] process_one_work+0x790/0x11b8 [ 163.250990][ T4068] worker_thread+0x910/0x1034 [ 163.252183][ T4068] kthread+0x37c/0x45c [ 163.253232][ T4068] ret_from_fork+0x10/0x20 [ 163.254387][ T4068] irq event stamp: 347004 [ 163.255539][ T4068] hardirqs last enabled at (347003): [] exit_to_kernel_mode+0x100/0x178 [ 163.258163][ T4068] hardirqs last disabled at (347004): [] el1_dbg+0x24/0x80 [ 163.260525][ T4068] softirqs last enabled at (346998): [] handle_softirqs+0xb88/0xdbc [ 163.263204][ T4068] softirqs last disabled at (346887): [] __irq_exit_rcu+0x268/0x4d8 [ 163.265837][ T4068] ---[ end trace e79e50126106d6c2 ]--- [ 163.282649][ T5407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.284809][ T5407] Cannot create hsr debugfs directory [ 163.332967][ T4068] ------------[ cut here ]------------ [ 163.334429][ T4068] WARNING: CPU: 0 PID: 4068 at kernel/rcu/sync.c:204 rcu_sync_dtor+0xe0/0x170 [ 163.336667][ T4068] Modules linked in: [ 163.337636][ T4068] CPU: 0 PID: 4068 Comm: kworker/0:4 Tainted: G W 5.15.167-syzkaller #0 [ 163.339971][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 163.342512][ T4068] Workqueue: events destroy_super_work [ 163.344036][ T4068] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 163.345962][ T4068] pc : rcu_sync_dtor+0xe0/0x170 [ 163.347198][ T4068] lr : rcu_sync_dtor+0xb0/0x170 [ 163.348420][ T4068] sp : ffff800020397ad0 [ 163.349402][ T4068] x29: ffff800020397ad0 x28: ffff0001b41a0100 x27: ffff0000cdab4218 [ 163.351444][ T4068] x26: ffff0000d4e6e848 x25: ffff0001b41a4e00 x24: dfff800000000000 [ 163.353469][ T4068] x23: 0000000000000002 x22: 1fffe0001a9cdc72 x21: dfff800000000000 [ 163.355534][ T4068] x20: ffff0000d4e6e398 x19: ffff0000d4e6e390 x18: ffff8000203972a0 [ 163.357592][ T4068] x17: 0000000000000000 x16: ffff80000824ecc0 x15: 0000000000000005 [ 163.359727][ T4068] x14: ffff80001713e500 x13: dfff800000000000 x12: 0000000000000001 [ 163.361767][ T4068] x11: 1fffe00018fd3004 x10: 0000000000000000 x9 : 7876629398af8100 [ 163.363749][ T4068] x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000 [ 163.365796][ T4068] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008250244 [ 163.367921][ T4068] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 163.370008][ T4068] Call trace: [ 163.370942][ T4068] rcu_sync_dtor+0xe0/0x170 [ 163.372120][ T4068] percpu_free_rwsem+0x48/0x88 [ 163.373374][ T4068] destroy_super_work+0x20/0x48 [ 163.374629][ T4068] process_one_work+0x790/0x11b8 [ 163.375888][ T4068] worker_thread+0x910/0x1034 [ 163.377116][ T4068] kthread+0x37c/0x45c [ 163.378137][ T4068] ret_from_fork+0x10/0x20 [ 163.379312][ T4068] irq event stamp: 347232 [ 163.380437][ T4068] hardirqs last enabled at (347231): [] _raw_spin_unlock_irqrestore+0xac/0x158 [ 163.383219][ T4068] hardirqs last disabled at (347232): [] el1_dbg+0x24/0x80 [ 163.385485][ T4068] softirqs last enabled at (347204): [] handle_softirqs+0xb88/0xdbc [ 163.387708][ T4068] softirqs last disabled at (347007): [] __irq_exit_rcu+0x268/0x4d8 [ 163.390194][ T4068] ---[ end trace e79e50126106d6c3 ]--- [ 163.436318][ T5407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.510786][ T5407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.565224][ T5407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.615173][ T5407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.789615][ T5407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.823914][ T5407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.863562][ T5407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.913552][ T5407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.070844][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.089202][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.092307][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.097794][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.116171][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.119377][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.123364][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.125429][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.128053][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.134463][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.137601][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.140578][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.142582][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.154369][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.160663][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.177465][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.183278][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.202216][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.205543][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.209289][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.221928][ T5407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.225032][ T5407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.229857][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.233465][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.236618][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.239904][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.248564][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.359484][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.362178][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.377720][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.398228][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.401176][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.422975][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.425651][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.428555][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.433553][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.438933][ T5407] device veth0_vlan entered promiscuous mode [ 164.456013][ T5407] device veth1_vlan entered promiscuous mode [ 164.495314][ T5407] device veth0_macvtap entered promiscuous mode [ 164.498225][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.500776][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.507965][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.511040][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.517140][ T5407] device veth1_macvtap entered promiscuous mode [ 164.522211][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.524843][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.535688][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.538593][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.541078][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.545574][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.548279][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.550838][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.554695][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.557450][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.560011][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.563280][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.567278][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.572281][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.575488][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.583338][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.586029][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.589056][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.601249][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.603830][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.606601][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.609175][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.613813][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.616399][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.619179][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.623393][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.625359][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.627909][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.634366][ T5407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.636603][ T5407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.638917][ T5407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.640939][ T5407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.717328][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.719751][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.728192][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.756392][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.758796][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.768953][ T4086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.322064][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 167.401384][ T4069] Bluetooth: hci3: command 0x0419 tx timeout [ 168.992273][ T4069] Bluetooth: hci2: command 0x0406 tx timeout [ 168.992862][ T4115] Bluetooth: hci4: command 0x0406 tx timeout