last executing test programs: 5.136280417s ago: executing program 0 (id=708): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x3, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev}}, 0xe8) 4.956198048s ago: executing program 0 (id=713): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) 4.932845691s ago: executing program 0 (id=714): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="56f7e1c9a054", 0x6}], 0x1, 0x3, 0x9) 4.699601368s ago: executing program 4 (id=718): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fstat(0xffffffffffffffff, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000200)) unshare(0x20000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010180)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031200000000000000000000000400090088000000e3d36433c4920893924540ac18fabaf0c70000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000c0000000005000500000000000a00000000000000ff01000000000000000000000000000100"], 0x90}, 0x1, 0x7}, 0x0) 3.473628159s ago: executing program 3 (id=724): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) 3.088531283s ago: executing program 1 (id=732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bdb69a95f92c6380af2bd003fa56f06a", 0x6f}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000640)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834bf922b3f1e025a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe6b, 0x0, 0x0, 0x0) 2.840253912s ago: executing program 3 (id=734): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000003a0000400000000000402d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a"], 0x6c}}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog512-generic\x00'}}) 2.050338773s ago: executing program 3 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 2.035540605s ago: executing program 1 (id=736): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "570002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) 1.952048675s ago: executing program 2 (id=737): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 1.868303494s ago: executing program 1 (id=738): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x21}}) 1.861021095s ago: executing program 0 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 1.853219676s ago: executing program 2 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 1.790695663s ago: executing program 1 (id=741): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) 1.789318273s ago: executing program 4 (id=742): capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffe}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 1.694568514s ago: executing program 4 (id=743): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20200007) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf4, &(0x7f0000000080), &(0x7f0000000000)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r5) syz_emit_ethernet(0x7f, &(0x7f0000001900)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x49, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, [{0x1, 0x3, "0abd00"/22}, {0x1, 0x1, "1b45972501b9ed"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x66) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080009000b000000", 0x24) 1.694407795s ago: executing program 0 (id=744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2b6cdefcd4329b5e}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002c) 1.689879715s ago: executing program 2 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r8, 0xfbff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000440)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(r4, 0x1263, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000078625e9661e01664000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000400", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 1.38438329s ago: executing program 1 (id=746): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x82, 0x0) write$cgroup_int(r0, 0x0, 0x0) 1.20890259s ago: executing program 4 (id=747): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 940.271421ms ago: executing program 1 (id=748): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x24, &(0x7f0000000180)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 63.126573ms ago: executing program 2 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)="df0ed2f5779ad7331890769b4f21", 0xe, 0x400bcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x6, 0xb, 0xf5, 0x8, 0x1, 0x3, 0x1, 0x3, 0x1, 0x4, 0x6, 0x9, 0x4, 0x4}, 0xe) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 62.945382ms ago: executing program 3 (id=750): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 61.795083ms ago: executing program 0 (id=751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f0000000180)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x0, @dev}, 0x28, {0x2, 0x3, @empty}, 'bond_slave_1\x00'}) 61.620873ms ago: executing program 3 (id=752): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xa24d34b4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 61.538773ms ago: executing program 2 (id=753): setpriority(0x1, 0x0, 0x4) 59.742573ms ago: executing program 4 (id=754): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f00007a1000/0x3000)=nil, &(0x7f0000500000/0x2000)=nil], &(0x7f0000000400)=[0x1], &(0x7f0000000440), 0x2) 312.22µs ago: executing program 2 (id=755): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000040)) 97.13µs ago: executing program 3 (id=756): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xa24d34b4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 4 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. syzkaller login: [ 36.039928][ T4017] cgroup: Unknown subsys name 'net' [ 36.312153][ T4017] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.605546][ T4017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.910142][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 38.076536][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.078095][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.080299][ T4030] device bridge_slave_0 entered promiscuous mode [ 38.084212][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.085654][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.088419][ T4030] device bridge_slave_1 entered promiscuous mode [ 38.105970][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 38.125182][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.138263][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 38.148685][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.193183][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 38.213145][ T4030] team0: Port device team_slave_0 added [ 38.218727][ T4030] team0: Port device team_slave_1 added [ 38.272032][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.273691][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.280724][ T4035] device bridge_slave_0 entered promiscuous mode [ 38.289082][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.290638][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.296152][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.299929][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.301349][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.307249][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.316917][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.318447][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.320686][ T4035] device bridge_slave_1 entered promiscuous mode [ 38.333995][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.335602][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.338062][ T4036] device bridge_slave_0 entered promiscuous mode [ 38.352650][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 38.362329][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.363868][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.366183][ T4036] device bridge_slave_1 entered promiscuous mode [ 38.373491][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.374905][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377339][ T4037] device bridge_slave_0 entered promiscuous mode [ 38.404378][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.406527][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.407950][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.410173][ T4037] device bridge_slave_1 entered promiscuous mode [ 38.458908][ T4030] device hsr_slave_0 entered promiscuous mode [ 38.506170][ T4030] device hsr_slave_1 entered promiscuous mode [ 38.562811][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.566261][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.590151][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.625331][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.629837][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.644519][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.652610][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.654788][ T4034] device bridge_slave_0 entered promiscuous mode [ 38.659256][ T4035] team0: Port device team_slave_0 added [ 38.667811][ T4036] team0: Port device team_slave_0 added [ 38.670719][ T4036] team0: Port device team_slave_1 added [ 38.684909][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.686470][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.688704][ T4034] device bridge_slave_1 entered promiscuous mode [ 38.691627][ T4035] team0: Port device team_slave_1 added [ 38.704419][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.706363][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.711354][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.716503][ T4037] team0: Port device team_slave_0 added [ 38.743938][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.745349][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.751729][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.755438][ T4037] team0: Port device team_slave_1 added [ 38.768191][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.769691][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.775417][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.793904][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.796194][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.797619][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.803036][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.814001][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.815423][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.821574][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.826264][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.828491][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.829910][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.835349][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.895538][ T4034] team0: Port device team_slave_0 added [ 38.977698][ T4035] device hsr_slave_0 entered promiscuous mode [ 39.016198][ T4035] device hsr_slave_1 entered promiscuous mode [ 39.065852][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.067716][ T4035] Cannot create hsr debugfs directory [ 39.070487][ T4034] team0: Port device team_slave_1 added [ 39.107947][ T4036] device hsr_slave_0 entered promiscuous mode [ 39.146708][ T4036] device hsr_slave_1 entered promiscuous mode [ 39.195812][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.197768][ T4036] Cannot create hsr debugfs directory [ 39.234084][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.235572][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.245863][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.269034][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.270712][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.276658][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.337755][ T4037] device hsr_slave_0 entered promiscuous mode [ 39.386141][ T4037] device hsr_slave_1 entered promiscuous mode [ 39.445773][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.447533][ T4037] Cannot create hsr debugfs directory [ 39.489520][ T4030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.547744][ T4030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.588945][ T4030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.654633][ T4030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.716394][ T1533] Bluetooth: hci0: command 0x0409 tx timeout [ 39.757819][ T4034] device hsr_slave_0 entered promiscuous mode [ 39.806152][ T4034] device hsr_slave_1 entered promiscuous mode [ 39.845826][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.847458][ T4034] Cannot create hsr debugfs directory [ 39.875941][ T4021] Bluetooth: hci3: command 0x0409 tx timeout [ 39.877345][ T4021] Bluetooth: hci4: command 0x0409 tx timeout [ 39.878839][ T4021] Bluetooth: hci2: command 0x0409 tx timeout [ 39.880215][ T4021] Bluetooth: hci1: command 0x0409 tx timeout [ 40.001637][ T4036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.062248][ T4036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.087599][ T4036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.138216][ T4036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.214541][ T4037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.254179][ T4037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.291501][ T4037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.335957][ T4037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.399194][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.414644][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.419197][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.432679][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.459844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.462097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.464345][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.466070][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.470172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.482949][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.485355][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.493773][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.495420][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.506733][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.516879][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.518478][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.548661][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.609212][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.647432][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.649795][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.709347][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.712239][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.714675][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.717509][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.719880][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.734040][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.746600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.748575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.750573][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.752620][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.759119][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.808646][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.867247][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.870121][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.873706][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.909183][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.911398][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.913568][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.914926][ T1783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.917542][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.919906][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.923874][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.926158][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.928469][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.930533][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.932091][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.947700][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.005265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.010060][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.028820][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.031561][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.033913][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.040612][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.060170][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.062694][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.076976][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.079034][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.099094][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.102666][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.104930][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.137492][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.139771][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.142307][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.143742][ T1783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.147984][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.150273][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.152251][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.153759][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.155767][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.158082][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.160316][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.162988][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.164742][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.175274][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.179384][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.181839][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.184212][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.189185][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.193543][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.201080][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.203396][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.235541][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.239553][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.241703][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.243778][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.247991][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.255365][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.275532][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.312926][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.314932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.327087][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.332144][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.334399][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.348727][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.372391][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.374493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.391170][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.393634][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.397098][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.398584][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.400591][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.402295][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.410328][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.412583][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.428048][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.433251][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.435523][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.438528][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.440151][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.442377][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.444897][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.448944][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.451073][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.453331][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.455353][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.467745][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.469426][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.471143][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.473412][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.475500][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.476945][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.494125][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.496671][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.499571][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.501804][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.504195][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.514289][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.515864][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.518919][ T4030] device veth0_vlan entered promiscuous mode [ 41.520882][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.524563][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.535938][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.538430][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.555628][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.558207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.567440][ T4030] device veth1_vlan entered promiscuous mode [ 41.578765][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.580960][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.582987][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.585283][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.588571][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.590887][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.595122][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.598146][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.601736][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.604107][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.621183][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.623471][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.632698][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.648503][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.656528][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.658828][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.671340][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.673540][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.676708][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.679763][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.682470][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.684604][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.699455][ T4034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.702236][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.704265][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.712865][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.719306][ T4036] device veth0_vlan entered promiscuous mode [ 41.733426][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.736238][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.740400][ T4030] device veth0_macvtap entered promiscuous mode [ 41.757142][ T4036] device veth1_vlan entered promiscuous mode [ 41.780283][ T4037] device veth0_vlan entered promiscuous mode [ 41.786059][ T4076] Bluetooth: hci0: command 0x041b tx timeout [ 41.794084][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.796437][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.798526][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.800699][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.802903][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.805254][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.809774][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.811627][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.813640][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.821393][ T4037] device veth1_vlan entered promiscuous mode [ 41.827327][ T4030] device veth1_macvtap entered promiscuous mode [ 41.833838][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.855047][ T4036] device veth0_macvtap entered promiscuous mode [ 41.871555][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.873690][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.878247][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.881639][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.883871][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.889482][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.911684][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.914152][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.923817][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.926845][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.931707][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.933320][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.937925][ T4036] device veth1_macvtap entered promiscuous mode [ 41.946441][ T4076] Bluetooth: hci1: command 0x041b tx timeout [ 41.947807][ T4076] Bluetooth: hci2: command 0x041b tx timeout [ 41.949186][ T4076] Bluetooth: hci4: command 0x041b tx timeout [ 41.950510][ T4076] Bluetooth: hci3: command 0x041b tx timeout [ 41.954156][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.957768][ T4037] device veth0_macvtap entered promiscuous mode [ 41.973030][ T4037] device veth1_macvtap entered promiscuous mode [ 41.983252][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.985566][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.989635][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.995564][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.007845][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.010209][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.012540][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.014877][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.018358][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.020478][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.025022][ T4030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.028664][ T4030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.030448][ T4030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.032388][ T4030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.042262][ T4035] device veth0_vlan entered promiscuous mode [ 42.045534][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.053351][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.055625][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.064116][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.070701][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.072973][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.075040][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.082502][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.086556][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.088997][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.091371][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.093569][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.096494][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.105023][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.116049][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.121763][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.131761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.134225][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.149196][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.151469][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.153437][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.155430][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.159918][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.163094][ T4035] device veth1_vlan entered promiscuous mode [ 42.174563][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.176860][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.178841][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.180986][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.185480][ T4036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.189967][ T4036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.191677][ T4036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.193519][ T4036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.205390][ T4037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.211059][ T4037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.212864][ T4037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.214815][ T4037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.281593][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.283851][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.316293][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.318622][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.322918][ T4035] device veth0_macvtap entered promiscuous mode [ 42.343580][ T4035] device veth1_macvtap entered promiscuous mode [ 42.367121][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.368935][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.398209][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.400299][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.402254][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.431309][ T1848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.432977][ T1848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.440684][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.443101][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.445460][ T1783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.445633][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.448273][ T1783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.450489][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.452730][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.463838][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.465491][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.466921][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.469286][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.471215][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.473201][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.475092][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.478404][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.482133][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.483986][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.486393][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.488442][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.490730][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.504906][ T4034] device veth0_vlan entered promiscuous mode [ 42.537456][ T4034] device veth1_vlan entered promiscuous mode [ 42.557631][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.559814][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.561854][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.564055][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.568060][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.570169][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.573216][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.574901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.579236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.592897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.595259][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.658036][ T1848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.659843][ T1848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.663352][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.674255][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.676657][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.678500][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.680424][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.701428][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.703765][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.711570][ T4034] device veth0_macvtap entered promiscuous mode [ 42.717232][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.724224][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.733462][ T4034] device veth1_macvtap entered promiscuous mode [ 42.740801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.743328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.750446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.828668][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.830839][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.833179][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.835642][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.861698][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.863912][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.868765][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.870854][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.885377][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.904282][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.908151][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.926956][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.932660][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.934677][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.943792][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.952793][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.955359][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.958402][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.960496][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.964525][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.971050][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.972808][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.974818][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.977185][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.985295][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.988576][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.027471][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.029536][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.062450][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.063994][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.066095][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.067666][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.071486][ T4122] device bridge0 entered promiscuous mode [ 43.081355][ T1783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.083153][ T1783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.100453][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.195844][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.197779][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.200072][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.271236][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.272973][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.287399][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.357720][ T1848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.359522][ T1848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.368683][ T1783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.422437][ T26] audit: type=1326 audit(43.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.436492][ T26] audit: type=1326 audit(43.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.443378][ T26] audit: type=1326 audit(43.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.474730][ T26] audit: type=1326 audit(43.400:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.506432][ T26] audit: type=1326 audit(43.400:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.510955][ T26] audit: type=1326 audit(43.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.568385][ T26] audit: type=1326 audit(43.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.572943][ T26] audit: type=1326 audit(43.420:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.618361][ T4138] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.634971][ T4138] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.665428][ T26] audit: type=1326 audit(43.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.703535][ T26] audit: type=1326 audit(43.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 43.868183][ T4081] Bluetooth: hci0: command 0x040f tx timeout [ 44.696143][ T4080] Bluetooth: hci3: command 0x040f tx timeout [ 44.697762][ T4080] Bluetooth: hci4: command 0x040f tx timeout [ 44.699182][ T4080] Bluetooth: hci2: command 0x040f tx timeout [ 44.700531][ T4080] Bluetooth: hci1: command 0x040f tx timeout [ 45.131823][ T4164] loop3: detected capacity change from 0 to 1024 [ 45.827752][ T4169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 45.829831][ T4169] device bridge_slave_1 left promiscuous mode [ 45.831309][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.886287][ T4176] loop4: detected capacity change from 0 to 512 [ 45.894969][ T4175] loop1: detected capacity change from 0 to 512 [ 45.924517][ T4169] device bridge_slave_0 left promiscuous mode [ 45.929025][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.946305][ T4175] ======================================================= [ 45.946305][ T4175] WARNING: The mand mount option has been deprecated and [ 45.946305][ T4175] and is ignored by this kernel. Remove the mand [ 45.946305][ T4175] option from the mount to silence this warning. [ 45.946305][ T4175] ======================================================= [ 45.957213][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 46.001004][ T4176] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 46.033172][ T4175] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.1.25: corrupted xattr block 95 [ 46.041863][ T4175] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 46.045528][ T4175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.25: bg 0: block 7: invalid block bitmap [ 46.056283][ T4175] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 46.064214][ T4175] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2932: inode #11: comm syz.1.25: corrupted xattr block 95 [ 46.070610][ T4175] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 46.075087][ T4175] EXT4-fs (loop1): 1 orphan inode deleted [ 46.079108][ T4175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.746566][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 46.748040][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 46.750068][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 46.751437][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 46.782527][ T4219] loop3: detected capacity change from 0 to 512 [ 46.794683][ T4215] loop4: detected capacity change from 0 to 1024 [ 47.457623][ T4219] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.3.40: corrupted xattr block 95 [ 47.468099][ T4219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.40: bg 0: block 7: invalid block bitmap [ 47.475627][ T4219] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 47.495416][ T4219] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #11: comm syz.3.40: corrupted xattr block 95 [ 47.512848][ T4219] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 47.514908][ T4219] EXT4-fs (loop3): 1 orphan inode deleted [ 47.519851][ T4219] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.122444][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 50.122456][ T26] audit: type=1326 audit(50.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.148770][ T26] audit: type=1326 audit(50.110:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=130 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.153281][ T26] audit: type=1326 audit(50.110:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.171345][ T26] audit: type=1326 audit(50.110:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.193068][ T26] audit: type=1326 audit(50.110:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.206886][ T4282] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 50.213021][ T26] audit: type=1326 audit(50.110:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.255790][ T26] audit: type=1326 audit(50.110:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83197fe8 code=0x7ffc0000 [ 50.283271][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.607257][ T4314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.79'. [ 50.609498][ T4314] x_tables: ip_tables: udp match: only valid for protocol 17 [ 50.614464][ T4312] Zero length message leads to an empty skb [ 50.626179][ T4309] loop2: detected capacity change from 0 to 512 [ 50.700812][ T4309] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 50.703636][ T4309] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 50.717030][ T4309] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.76: Failed to acquire dquot type 1 [ 50.723265][ T4309] EXT4-fs (loop2): 1 truncate cleaned up [ 50.738974][ T4309] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,delalloc,nodioread_nolock,init_itable,,errors=continue. Quota mode: writeback. [ 50.891898][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.83'. [ 50.922811][ T26] audit: type=1326 audit(50.880:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8aa52fe8 code=0x7ffc0000 [ 51.099912][ T4342] device veth1_virt_wifi entered promiscuous mode [ 51.102136][ T4342] device veth1_virt_wifi left promiscuous mode [ 51.184993][ T4347] loop2: detected capacity change from 0 to 2048 [ 51.209684][ T4022] loop2: p1 < > p2 p3 < p5 > [ 51.216684][ T4022] loop2: p2 start 16908804 is beyond EOD, truncated [ 51.222508][ T4022] loop2: p5 start 16908804 is beyond EOD, truncated [ 51.261301][ T4347] loop2: p1 < > p2 p3 < p5 > [ 51.266279][ T4347] loop2: p2 start 16908804 is beyond EOD, truncated [ 51.269254][ T4347] loop2: p5 start 16908804 is beyond EOD, truncated [ 51.296640][ T3606] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.367492][ T4347] loop2: detected capacity change from 0 to 512 [ 51.432153][ T4347] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 51.434481][ T4347] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.462278][ T4347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 51.464041][ T4347] System zones: 1-12 [ 51.475030][ T4347] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm +}[@: corrupted in-inode xattr [ 51.525811][ T3606] usb 1-1: device descriptor read/64, error -71 [ 51.637595][ T4347] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm +}[@: couldn't read orphan inode 15 (err -117) [ 51.649075][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,init_itable=0x0000000000000000,,errors=continue. Quota mode: none. [ 52.575859][ T3606] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.786272][ T3606] usb 1-1: device descriptor read/64, error -71 [ 52.907587][ T3606] usb usb1-port1: attempt power cycle [ 53.093149][ T4405] loop2: detected capacity change from 0 to 8192 [ 53.769071][ T4408] loop3: detected capacity change from 0 to 1024 [ 53.920463][ T4408] EXT4-fs (loop3): Ignoring removed orlov option [ 53.924750][ T4408] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 53.928608][ T4405] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.982658][ T4402] device hsr_slave_0 left promiscuous mode [ 53.985851][ T3606] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.999439][ T4408] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 54.049345][ T4402] device hsr_slave_1 left promiscuous mode [ 54.108059][ T4421] capability: warning: `syz.0.125' uses 32-bit capabilities (legacy support in use) [ 54.230632][ T3606] usb 1-1: device not accepting address 4, error -71 [ 55.422336][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.440060][ T4022] udevd[4022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.534019][ T4457] loop3: detected capacity change from 0 to 512 [ 55.541813][ T4022] udevd[4022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.554571][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.315343][ T4459] loop0: detected capacity change from 0 to 8192 [ 56.372666][ T4457] EXT4-fs (loop3): Ignoring removed oldalloc option [ 56.396196][ T4457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.141: Parent and EA inode have the same ino 15 [ 56.418533][ T4459] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.424930][ T4457] EXT4-fs (loop3): Remounting filesystem read-only [ 56.426889][ T4457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.141: Parent and EA inode have the same ino 15 [ 56.436204][ T4457] EXT4-fs (loop3): Remounting filesystem read-only [ 56.437943][ T4457] EXT4-fs (loop3): 1 orphan inode deleted [ 56.439166][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 56.455369][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 56.455380][ T26] audit: type=1326 audit(56.410:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.463169][ T26] audit: type=1326 audit(56.420:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.490716][ T26] audit: type=1326 audit(56.430:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.495151][ T26] audit: type=1326 audit(56.430:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.506701][ T4022] udevd[4022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.521391][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.523071][ T4469] loop4: detected capacity change from 0 to 512 [ 56.530942][ T26] audit: type=1326 audit(56.430:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.535435][ T26] audit: type=1326 audit(56.430:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.546290][ T26] audit: type=1326 audit(56.430:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.550960][ T26] audit: type=1326 audit(56.430:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.573034][ T26] audit: type=1326 audit(56.430:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.583974][ T26] audit: type=1326 audit(56.430:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 56.606473][ T4469] EXT4-fs (loop4): too many log groups per flexible block group [ 56.608433][ T4469] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 56.609901][ T4469] EXT4-fs (loop4): mount failed [ 56.887845][ T4481] Cannot find set identified by id 0 to match [ 57.029107][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.152'. [ 57.500839][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 57.586946][ T4514] netlink: 268 bytes leftover after parsing attributes in process `syz.0.166'. [ 57.698519][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 57.851932][ T4529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.171'. [ 57.883455][ T4528] usb usb7: usbfs: process 4528 (syz.1.172) did not claim interface 0 before use [ 58.074649][ T4544] loop0: detected capacity change from 0 to 512 [ 58.201947][ T4546] loop2: detected capacity change from 0 to 2048 [ 58.229360][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 58.386513][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.392045][ T4546] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.181: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.619224][ T4566] udc-core: couldn't find an available UDC or it's busy [ 58.627114][ T4566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.163528][ T4578] netlink: 180 bytes leftover after parsing attributes in process `syz.0.190'. [ 59.172787][ T4578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.190'. [ 59.193251][ T4581] loop1: detected capacity change from 0 to 1024 [ 59.296170][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 59.359827][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 59.387251][ T4595] loop2: detected capacity change from 0 to 512 [ 59.464918][ T4595] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 59.476335][ T4593] device hsr_slave_1 left promiscuous mode [ 60.059531][ T4612] loop2: detected capacity change from 0 to 512 [ 60.138079][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.146122][ T25] cfg80211: failed to load regulatory.db [ 60.336759][ T4622] capability: warning: `syz.0.209' uses deprecated v2 capabilities in a way that may be insecure [ 60.521446][ T4632] loop0: detected capacity change from 0 to 164 [ 60.646254][ T4632] Unable to read rock-ridge attributes [ 60.676580][ T4632] Unable to read rock-ridge attributes [ 60.684778][ T4632] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.726193][ T4642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.217'. [ 60.782450][ T4647] loop0: detected capacity change from 0 to 512 [ 60.834869][ T4647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.221: bg 0: block 393: padding at end of block bitmap is not set [ 60.852622][ T4647] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 60.862903][ T4647] EXT4-fs (loop0): 2 truncates cleaned up [ 60.864418][ T4647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.935499][ T4645] loop1: detected capacity change from 0 to 1764 [ 60.978071][ T4651] usb usb1: usbfs: process 4651 (syz.2.222) did not claim interface 0 before use [ 61.405165][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 61.414972][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 61.442751][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 61.444912][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 61.613059][ T4676] loop2: detected capacity change from 0 to 1024 [ 61.695481][ T4678] tmpfs: Unknown parameter 'U ' [ 61.736350][ T4676] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.738744][ T4676] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.751707][ T4676] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.232: Invalid block bitmap block 0 in block_group 0 [ 61.769588][ T4676] __quota_error: 70 callbacks suppressed [ 61.769601][ T4676] Quota error (device loop2): write_blk: dquota write failed [ 61.772539][ T4676] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 61.774881][ T4676] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.232: Failed to acquire dquot type 0 [ 61.788584][ T4676] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.232: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.796151][ T4676] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.232: Invalid inode bitmap blk 0 in block_group 0 [ 61.802293][ T4676] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 61.804292][ T4676] EXT4-fs (loop2): 1 orphan inode deleted [ 61.806817][ T4269] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 61.809652][ T4269] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:13: Failed to release dquot type 0 [ 61.823526][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 61.952255][ T4692] loop2: detected capacity change from 0 to 512 [ 62.064339][ T4692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.238: inode #1: comm syz.2.238: iget: illegal inode # [ 62.077217][ T4692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.238: error while reading EA inode 1 err=-117 [ 62.083988][ T4692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.238: inode #1: comm syz.2.238: iget: illegal inode # [ 62.178786][ T4692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.238: error while reading EA inode 1 err=-117 [ 62.181829][ T4692] EXT4-fs (loop2): 1 orphan inode deleted [ 62.183091][ T4692] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 62.553691][ T4717] syz.2.248 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.751707][ T4724] loop1: detected capacity change from 0 to 2048 [ 63.904549][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.087778][ T4737] loop4: detected capacity change from 0 to 256 [ 64.793799][ T4737] FAT-fs (loop4): IO charset not found [ 65.048631][ T4758] loop3: detected capacity change from 0 to 512 [ 65.084704][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 65.101994][ T4762] loop0: detected capacity change from 0 to 6 [ 65.128570][ T4762] Dev loop0: unable to read RDB block 6 [ 65.129829][ T4762] loop0: unable to read partition table [ 65.131159][ T4762] loop0: partition table beyond EOD, truncated [ 65.132391][ T4762] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 65.132391][ T4762] ) failed (rc=-5) [ 65.142258][ T3643] Dev loop0: unable to read RDB block 6 [ 65.143464][ T3643] loop0: unable to read partition table [ 65.145328][ T3643] loop0: partition table beyond EOD, truncated [ 65.171360][ T26] audit: type=1326 audit(65.130:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.192932][ T26] audit: type=1326 audit(65.140:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.199475][ T26] audit: type=1326 audit(65.150:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.207828][ T26] audit: type=1326 audit(65.150:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.244699][ T26] audit: type=1326 audit(65.200:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.250985][ T26] audit: type=1326 audit(65.200:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.255379][ T26] audit: type=1326 audit(65.200:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffb8e65fe8 code=0x7ffc0000 [ 65.268299][ T4758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.264: inode #1: comm syz.3.264: iget: illegal inode # [ 65.271317][ T4758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.264: error while reading EA inode 1 err=-117 [ 65.275437][ T4758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.264: inode #1: comm syz.3.264: iget: illegal inode # [ 65.301261][ T4758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.264: error while reading EA inode 1 err=-117 [ 65.304941][ T4758] EXT4-fs (loop3): 1 orphan inode deleted [ 65.309720][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 65.329723][ T4758] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 65.352810][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.354748][ T4775] netlink: 'syz.0.271': attribute type 5 has an invalid length. [ 65.465632][ T4782] vhci_hcd: default hub control req: d314 v6600 i0000 l35072 [ 65.620687][ T4790] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.179200][ T4822] mmap: syz.0.291 (4822) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 66.667062][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 66.669002][ T4854] netlink: 'syz.1.305': attribute type 5 has an invalid length. [ 66.692373][ T4852] loop3: detected capacity change from 0 to 2048 [ 67.270664][ T4868] hub 9-0:1.0: USB hub found [ 67.286962][ T4868] hub 9-0:1.0: 8 ports detected [ 67.812614][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 67.812629][ T26] audit: type=1326 audit(67.812:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.839219][ T26] audit: type=1326 audit(67.842:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.854805][ T26] audit: type=1326 audit(67.842:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.874623][ T26] audit: type=1326 audit(67.842:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.898872][ T26] audit: type=1326 audit(67.852:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.923672][ T26] audit: type=1326 audit(67.852:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.952597][ T26] audit: type=1326 audit(67.852:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 67.967658][ T26] audit: type=1326 audit(67.852:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 68.003543][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 68.011504][ T26] audit: type=1326 audit(67.852:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 68.052127][ T26] audit: type=1326 audit(67.852:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95658fe8 code=0x7ffc0000 [ 68.208402][ T4905] netlink: 116 bytes leftover after parsing attributes in process `syz.0.327'. [ 69.175380][ T4916] ODEBUG: Out of memory. ODEBUG disabled [ 69.215542][ T4920] loop3: detected capacity change from 0 to 4096 [ 69.309396][ T4920] EXT4-fs (loop3): Ignoring removed nobh option [ 69.373858][ T4920] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,nobh,i_version,,errors=continue. Quota mode: writeback. [ 69.642418][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.643995][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.931792][ T4937] tmpfs: Unknown parameter '' [ 70.929129][ T4948] loop2: detected capacity change from 0 to 2048 [ 71.106551][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,data_err=abort,errors=remount-ro,user_xattr,nombcache,noquota,noquota,. Quota mode: none. [ 71.122247][ T4948] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.343: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 71.133849][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 71.323116][ T4976] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.326292][ T4974] loop2: detected capacity change from 0 to 512 [ 71.379640][ T4974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.382152][ T4974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.388863][ T4974] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.413454][ T4974] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 71.567073][ T4974] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #16: comm syz.2.355: corrupted xattr block 31 [ 71.573294][ T4974] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 71.578745][ T4974] EXT4-fs (loop2): 1 orphan inode deleted [ 71.585344][ T4974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.059310][ T5003] netlink: 256 bytes leftover after parsing attributes in process `syz.3.365'. [ 72.061190][ T5003] nbd: must specify a device to reconfigure [ 72.207605][ T5002] ebtables: ebtables: counters copy to user failed while replacing table [ 72.244301][ T5016] loop1: detected capacity change from 0 to 128 [ 72.623264][ T5031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.720666][ T5037] netlink: 116 bytes leftover after parsing attributes in process `syz.3.380'. [ 72.731911][ T5041] loop1: detected capacity change from 0 to 512 [ 72.761456][ T5031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.983052][ T5031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.061216][ T5041] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.382: inode #1: comm syz.1.382: iget: illegal inode # [ 73.064452][ T5041] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.382: error while reading EA inode 1 err=-117 [ 73.074318][ T5041] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.382: inode #1: comm syz.1.382: iget: illegal inode # [ 73.086281][ T5041] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.382: error while reading EA inode 1 err=-117 [ 73.090021][ T5041] EXT4-fs (loop1): 1 orphan inode deleted [ 73.091324][ T5041] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,dioread_lock,,errors=continue. Quota mode: writeback. [ 73.160666][ T5031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.340083][ T5031] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.351371][ T5031] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.372849][ T5031] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.379053][ T5031] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.053582][ T5096] loop1: detected capacity change from 0 to 1024 [ 74.129922][ T5096] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.139741][ T5096] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.162214][ T5096] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.405: Invalid block bitmap block 0 in block_group 0 [ 74.176853][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 74.180057][ T5096] __quota_error: 80 callbacks suppressed [ 74.180077][ T5096] Quota error (device loop1): write_blk: dquota write failed [ 74.182776][ T5096] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 74.184857][ T5096] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.405: Failed to acquire dquot type 0 [ 74.262611][ T5096] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.405: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.301456][ T5096] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.405: Invalid inode bitmap blk 0 in block_group 0 [ 74.304280][ T5096] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 74.314589][ T4172] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 74.316872][ T4172] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:10: Failed to release dquot type 0 [ 74.320026][ T5096] EXT4-fs (loop1): 1 orphan inode deleted [ 74.322427][ T5096] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 74.468475][ T5117] loop1: detected capacity change from 0 to 512 [ 74.538356][ T5117] EXT4-fs (loop1): Ignoring removed orlov option [ 74.539608][ T5117] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.542623][ T5117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.566179][ T5117] EXT4-fs (loop1): 1 orphan inode deleted [ 74.567423][ T5117] EXT4-fs (loop1): 1 truncate cleaned up [ 74.568754][ T5117] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,nobarrier,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000000c,orlov,acl,,errors=continue. Quota mode: none. [ 74.897469][ T5136] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.420'. [ 74.900145][ T5135] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.420'. [ 75.238225][ T5148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 75.307285][ T5150] loop1: detected capacity change from 0 to 1764 [ 75.309832][ T5150] isofs_fill_super: bread failed, dev=loop1, iso_blknum=65552, block=131104 [ 75.332526][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 75.643666][ T5165] loop3: detected capacity change from 0 to 1024 [ 75.853306][ T5165] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.062349][ T5177] loop0: detected capacity change from 0 to 128 [ 76.219267][ T1800] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 76.226823][ T1800] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1188 with error 28 [ 76.230544][ T1800] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.230544][ T1800] [ 76.232456][ T1800] EXT4-fs (loop3): Total free blocks count 0 [ 76.233572][ T1800] EXT4-fs (loop3): Free/Dirty block details [ 76.248339][ T1800] EXT4-fs (loop3): free_blocks=68451041280 [ 76.249575][ T1800] EXT4-fs (loop3): dirty_blocks=1200 [ 76.250700][ T1800] EXT4-fs (loop3): Block reservation details [ 76.251897][ T1800] EXT4-fs (loop3): i_reserved_data_blocks=75 [ 76.452449][ T5182] loop0: detected capacity change from 0 to 1024 [ 76.537091][ T5187] syz.3.440 uses obsolete (PF_INET,SOCK_PACKET) [ 76.572031][ T5189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 76.593870][ T5182] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.596929][ T5182] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.605093][ T5182] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.438: Invalid block bitmap block 0 in block_group 0 [ 76.652320][ T5182] Quota error (device loop0): write_blk: dquota write failed [ 76.654051][ T5182] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 76.657963][ T5182] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.438: Failed to acquire dquot type 0 [ 76.677788][ T5182] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.438: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.702421][ T5182] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.438: Invalid inode bitmap blk 0 in block_group 0 [ 76.715899][ T136] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 76.717660][ T136] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 0 [ 76.726437][ T5182] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 76.728727][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 76.748992][ T5182] EXT4-fs (loop0): 1 orphan inode deleted [ 76.750462][ T5182] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 76.861775][ T26] audit: type=1326 audit(76.862:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 76.872707][ T26] audit: type=1326 audit(76.872:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 76.892848][ T26] audit: type=1326 audit(76.892:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 76.903893][ T26] audit: type=1326 audit(76.902:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=260 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 77.273471][ T5203] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.112456][ T5214] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.114806][ T5214] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 78.615581][ T5213] loop1: detected capacity change from 0 to 512 [ 78.742615][ T5223] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.453' sets config #236 [ 78.766506][ T5213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.450: inode #1: comm syz.1.450: iget: illegal inode # [ 78.769608][ T5213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.450: error while reading EA inode 1 err=-117 [ 78.785884][ T5213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.450: inode #1: comm syz.1.450: iget: illegal inode # [ 78.842312][ T5213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.450: error while reading EA inode 1 err=-117 [ 78.851743][ T5228] loop3: detected capacity change from 0 to 512 [ 78.853411][ T5213] EXT4-fs (loop1): 1 orphan inode deleted [ 78.854725][ T5213] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 78.907784][ T5213] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 78.948069][ T5228] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 79.130467][ T5239] loop2: detected capacity change from 0 to 512 [ 79.205432][ T5242] loop1: detected capacity change from 0 to 2048 [ 79.205979][ T5239] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.217860][ T5239] EXT4-fs (loop2): 1 truncate cleaned up [ 79.219085][ T5239] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,resgid=0x000000000000ee00,init_itable,noload,minixdf,usrjquota=,,errors=continue. Quota mode: none. [ 79.234729][ T5239] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 79.275877][ T5242] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.161005][ T5256] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 80.163259][ T5256] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 80.778381][ T5262] loop3: detected capacity change from 0 to 512 [ 81.078388][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 81.078400][ T26] audit: type=1326 audit(81.082:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.084588][ T26] audit: type=1326 audit(81.082:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.108245][ T26] audit: type=1326 audit(81.102:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.119784][ T26] audit: type=1326 audit(81.102:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.146381][ T26] audit: type=1326 audit(81.102:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.151682][ T26] audit: type=1326 audit(81.102:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.152321][ T5285] netlink: 'syz.3.476': attribute type 29 has an invalid length. [ 81.170792][ T26] audit: type=1326 audit(81.102:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.175143][ T26] audit: type=1326 audit(81.102:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.184270][ T5281] serio: Serial port ptm0 [ 81.198494][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 81.206681][ T26] audit: type=1326 audit(81.102:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.211125][ T26] audit: type=1326 audit(81.102:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 81.217128][ T5285] netlink: 'syz.3.476': attribute type 29 has an invalid length. [ 81.238209][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 81.253719][ T5289] netlink: 'syz.3.476': attribute type 29 has an invalid length. [ 81.260810][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 81.332720][ T5294] loop0: detected capacity change from 0 to 128 [ 81.389665][ T5300] process 'syz.4.482' launched './file1' with NULL argv: empty string added [ 81.461833][ T5304] loop4: detected capacity change from 0 to 512 [ 81.501954][ T5304] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.504589][ T5304] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.513276][ T5304] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.524672][ T5304] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 81.530490][ T5304] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #16: comm syz.4.483: corrupted xattr block 31 [ 81.542619][ T5304] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 81.554763][ T5304] EXT4-fs (loop4): 1 orphan inode deleted [ 81.556454][ T5304] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.820965][ T5323] serio: Serial port ptm0 [ 81.882402][ T5328] loop4: detected capacity change from 0 to 164 [ 81.948193][ T5328] Unable to read rock-ridge attributes [ 81.965766][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.121142][ T5336] loop4: detected capacity change from 0 to 256 [ 82.162087][ T5336] FAT-fs (loop4): Directory bread(block 64) failed [ 82.163735][ T5336] FAT-fs (loop4): Directory bread(block 65) failed [ 82.165114][ T5336] FAT-fs (loop4): Directory bread(block 66) failed [ 82.192908][ T5336] FAT-fs (loop4): Directory bread(block 67) failed [ 82.194479][ T5336] FAT-fs (loop4): Directory bread(block 68) failed [ 82.196692][ T5336] FAT-fs (loop4): Directory bread(block 69) failed [ 82.198069][ T5336] FAT-fs (loop4): Directory bread(block 70) failed [ 82.199522][ T5336] FAT-fs (loop4): Directory bread(block 71) failed [ 82.200949][ T5336] FAT-fs (loop4): Directory bread(block 72) failed [ 82.202343][ T5336] FAT-fs (loop4): Directory bread(block 73) failed [ 82.215990][ T5340] loop1: detected capacity change from 0 to 256 [ 82.237293][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 82.266829][ T5336] attempt to access beyond end of device [ 82.266829][ T5336] loop4: rw=524288, want=1768, limit=256 [ 82.269416][ T5336] attempt to access beyond end of device [ 82.269416][ T5336] loop4: rw=0, want=1744, limit=256 [ 82.395960][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.398237][ T25] usb 1-1: config 0 has no interfaces? [ 82.430576][ T5349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 82.593230][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 82.595524][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.603323][ T25] usb 1-1: Product: syz [ 82.604190][ T25] usb 1-1: Manufacturer: syz [ 82.605886][ T25] usb 1-1: SerialNumber: syz [ 82.629862][ T25] usb 1-1: config 0 descriptor?? [ 82.748352][ T5359] loop1: detected capacity change from 0 to 2048 [ 82.799898][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 82.807599][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 82.967857][ T1533] usb 1-1: USB disconnect, device number 6 [ 83.012752][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 83.031562][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 83.053322][ T5387] device bond1 entered promiscuous mode [ 83.054804][ T5387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.080174][ T5387] bond1 (unregistering): Released all slaves [ 83.100169][ T5380] device bridge1 entered promiscuous mode [ 83.101906][ T5380] device vlan2 entered promiscuous mode [ 83.104596][ T5380] bridge1: port 1(vlan2) entered blocking state [ 83.106655][ T5380] bridge1: port 1(vlan2) entered disabled state [ 83.109828][ T5380] device bridge1 left promiscuous mode [ 84.009513][ T5403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.011724][ T5403] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.746543][ T5420] loop2: detected capacity change from 0 to 512 [ 84.832736][ T5420] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 84.993506][ T5439] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 85.005917][ T5439] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.036294][ T5505] udc-core: couldn't find an available UDC or it's busy [ 86.037839][ T5505] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.100453][ T5511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 86.107053][ T5512] syz.2.564 (5512): drop_caches: 4 [ 86.115894][ T5511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.321341][ T5526] udc-core: couldn't find an available UDC or it's busy [ 86.322847][ T5526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.427840][ T5530] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.572'. [ 86.430032][ T5530] netlink: zone id is out of range [ 86.431401][ T5530] netlink: zone id is out of range [ 86.432508][ T5530] netlink: zone id is out of range [ 86.455874][ T5530] netlink: zone id is out of range [ 86.457064][ T5530] netlink: get zone limit has 4 unknown bytes [ 86.926763][ T5542] udc-core: couldn't find an available UDC or it's busy [ 86.928993][ T5542] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.966294][ T5545] udc-core: couldn't find an available UDC or it's busy [ 86.967889][ T5545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.284590][ T5553] udc-core: couldn't find an available UDC or it's busy [ 87.304382][ T5553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.385895][ T5555] udc-core: couldn't find an available UDC or it's busy [ 87.387277][ T5555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.887570][ T5569] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 87.889825][ T5569] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 87.975429][ T5571] udc-core: couldn't find an available UDC or it's busy [ 87.993047][ T5571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.084951][ T5573] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 88.510870][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 88.712778][ T5625] udc-core: couldn't find an available UDC or it's busy [ 88.715462][ T5625] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.407842][ T5698] udc-core: couldn't find an available UDC or it's busy [ 90.409638][ T5698] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.494158][ T4031] Bluetooth: hci0: Unknown advertising packet type: 0x1c [ 90.798616][ T5731] netlink: 124 bytes leftover after parsing attributes in process `syz.0.655'. [ 90.987638][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 91.193138][ T5759] udc-core: couldn't find an available UDC or it's busy [ 91.194778][ T5759] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.197089][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.435807][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 91.555959][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 91.557862][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.559816][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.563229][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.568301][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.571537][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.574202][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.780932][ T5788] bridge0: port 3(hsr0) entered blocking state [ 91.782645][ T5788] bridge0: port 3(hsr0) entered disabled state [ 91.784900][ T5788] device hsr0 entered promiscuous mode [ 91.794475][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 91.794486][ T26] audit: type=1326 audit(91.792:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 91.806741][ T5788] bridge0: port 3(hsr0) entered blocking state [ 91.808224][ T5788] bridge0: port 3(hsr0) entered forwarding state [ 91.808925][ T26] audit: type=1326 audit(91.812:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=183 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 91.825850][ T26] audit: type=1326 audit(91.812:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 91.835811][ T7] usb 1-1: usb_control_msg returned -32 [ 91.837285][ T7] usbtmc 1-1:16.0: can't read capabilities [ 91.878191][ T5794] udc-core: couldn't find an available UDC or it's busy [ 91.879616][ T5794] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.901348][ T5798] udc-core: couldn't find an available UDC or it's busy [ 91.902817][ T5798] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.576542][ T5816] udc-core: couldn't find an available UDC or it's busy [ 92.578067][ T5816] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.695784][ T5810] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 92.729569][ T5824] binder: 5817:5824 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 92.732073][ T5824] binder: 5817:5824 ioctl c0306201 20000080 returned -14 [ 92.738486][ T5825] binder: 5821:5825 ioctl c0306201 0 returned -14 [ 92.908802][ T4078] usb 1-1: USB disconnect, device number 7 [ 93.900245][ T5835] udc-core: couldn't find an available UDC or it's busy [ 93.900267][ T5835] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.035774][ T5842] binder: BINDER_SET_CONTEXT_MGR already set [ 94.037259][ T5842] binder: 5841:5842 ioctl 4018620d 20000040 returned -16 [ 94.039699][ T5842] binder: tried to use weak ref as strong ref [ 94.041251][ T5842] binder: 5841:5842 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.086959][ T5842] binder: 5841:5842 got transaction to invalid handle, 1 [ 94.088600][ T5842] binder: 5841:5842 transaction failed 29201/-22, size 104-24 line 2917 [ 94.107217][ T4078] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.214599][ T5849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.698'. [ 95.369965][ T5868] udc-core: couldn't find an available UDC or it's busy [ 95.372005][ T5868] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.469330][ T5875] udc-core: couldn't find an available UDC or it's busy [ 95.471035][ T5875] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.557649][ T5878] netlink: 56 bytes leftover after parsing attributes in process `syz.3.712'. [ 96.013847][ T1533] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.025320][ T5899] udc-core: couldn't find an available UDC or it's busy [ 96.029640][ T5899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.066368][ T5908] udc-core: couldn't find an available UDC or it's busy [ 97.067948][ T5908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.076202][ T1533] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.078122][ T1533] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.080051][ T1533] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.194822][ T26] audit: type=1326 audit(97.192:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.202349][ T26] audit: type=1326 audit(97.192:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.222786][ T26] audit: type=1326 audit(97.202:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.241931][ T1533] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.243799][ T1533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.245374][ T1533] usb 1-1: Product: syz [ 97.246888][ T1533] usb 1-1: Manufacturer: syz [ 97.247915][ T1533] usb 1-1: SerialNumber: syz [ 97.249519][ T26] audit: type=1326 audit(97.202:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.253734][ T26] audit: type=1326 audit(97.202:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.271484][ T26] audit: type=1326 audit(97.212:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.294600][ T26] audit: type=1326 audit(97.212:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.303321][ T26] audit: type=1326 audit(97.212:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.308781][ T26] audit: type=1326 audit(97.212:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.313743][ T26] audit: type=1326 audit(97.212:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3e0fe8 code=0x7ffc0000 [ 97.518797][ T1533] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.739437][ T1533] usb 1-1: USB disconnect, device number 8 [ 98.560244][ T1533] usblp0: removed [ 99.335801][ T5961] nvme_fabrics: missing parameter 'transport=%s' [ 99.337574][ T5961] nvme_fabrics: missing parameter 'nqn=%s' [ 99.798342][ T5968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.800328][ T5968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.281625][ T5970] udc-core: couldn't find an available UDC or it's busy [ 100.283096][ T5970] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.528715][ T5984] [ 100.529326][ T5984] ====================================================== [ 100.530761][ T5984] WARNING: possible circular locking dependency detected [ 100.532224][ T5984] 5.15.170-syzkaller #0 Not tainted [ 100.533291][ T5984] ------------------------------------------------------ [ 100.534759][ T5984] syz.3.756/5984 is trying to acquire lock: [ 100.535977][ T5984] ffff0000d9398d20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xcb8/0x17b4 [ 100.537995][ T5984] [ 100.537995][ T5984] but task is already holding lock: [ 100.539510][ T5984] ffff0000c5712c78 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x7b0/0x10dc [ 100.541554][ T5984] [ 100.541554][ T5984] which lock already depends on the new lock. [ 100.541554][ T5984] [ 100.543692][ T5984] [ 100.543692][ T5984] the existing dependency chain (in reverse order) is: [ 100.545547][ T5984] [ 100.545547][ T5984] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 100.547198][ T5984] _raw_spin_lock+0xb0/0x10c [ 100.548242][ T5984] __inet_hash+0xd0/0x8e0 [ 100.549340][ T5984] inet6_hash+0x74/0x9c [ 100.550259][ T5984] inet_csk_listen_start+0x1e8/0x2cc [ 100.551542][ T5984] inet_listen+0x258/0x6d4 [ 100.552559][ T5984] __sys_listen+0x1ac/0x21c [ 100.553619][ T5984] __arm64_sys_listen+0x5c/0x74 [ 100.554704][ T5984] invoke_syscall+0x98/0x2b8 [ 100.555843][ T5984] el0_svc_common+0x138/0x258 [ 100.556997][ T5984] do_el0_svc+0x58/0x14c [ 100.557945][ T5984] el0_svc+0x7c/0x1f0 [ 100.558910][ T5984] el0t_64_sync_handler+0x84/0xe4 [ 100.560109][ T5984] el0t_64_sync+0x1a0/0x1a4 [ 100.561191][ T5984] [ 100.561191][ T5984] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 100.562890][ T5984] __lock_acquire+0x32d4/0x7638 [ 100.564046][ T5984] lock_acquire+0x240/0x77c [ 100.565072][ T5984] mptcp_diag_get_info+0x208/0x8a0 [ 100.566289][ T5984] inet_sk_diag_fill+0xcb8/0x17b4 [ 100.567460][ T5984] mptcp_diag_dump+0xb4c/0x10dc [ 100.568636][ T5984] __inet_diag_dump+0x1e8/0x33c [ 100.569731][ T5984] inet_diag_dump_compat+0x17c/0x288 [ 100.570995][ T5984] netlink_dump+0x4a8/0xad0 [ 100.572045][ T5984] __netlink_dump_start+0x474/0x6d4 [ 100.573297][ T5984] inet_diag_rcv_msg_compat+0x1c8/0x434 [ 100.574604][ T5984] sock_diag_rcv_msg+0x174/0x39c [ 100.575764][ T5984] netlink_rcv_skb+0x20c/0x3b8 [ 100.576868][ T5984] sock_diag_rcv+0x3c/0x54 [ 100.577855][ T5984] netlink_unicast+0x664/0x938 [ 100.578968][ T5984] netlink_sendmsg+0x844/0xb38 [ 100.580139][ T5984] ____sys_sendmsg+0x584/0x870 [ 100.581326][ T5984] ___sys_sendmsg+0x214/0x294 [ 100.582466][ T5984] __arm64_sys_sendmsg+0x1ac/0x25c [ 100.583671][ T5984] invoke_syscall+0x98/0x2b8 [ 100.584796][ T5984] el0_svc_common+0x138/0x258 [ 100.585946][ T5984] do_el0_svc+0x58/0x14c [ 100.586948][ T5984] el0_svc+0x7c/0x1f0 [ 100.587906][ T5984] el0t_64_sync_handler+0x84/0xe4 [ 100.589099][ T5984] el0t_64_sync+0x1a0/0x1a4 [ 100.590225][ T5984] [ 100.590225][ T5984] other info that might help us debug this: [ 100.590225][ T5984] [ 100.592427][ T5984] Possible unsafe locking scenario: [ 100.592427][ T5984] [ 100.594042][ T5984] CPU0 CPU1 [ 100.595149][ T5984] ---- ---- [ 100.596261][ T5984] lock(&h->lhash2[i].lock); [ 100.597280][ T5984] lock(sk_lock-AF_INET6); [ 100.598755][ T5984] lock(&h->lhash2[i].lock); [ 100.600334][ T5984] lock(sk_lock-AF_INET6); [ 100.601253][ T5984] [ 100.601253][ T5984] *** DEADLOCK *** [ 100.601253][ T5984] [ 100.603042][ T5984] 6 locks held by syz.3.756/5984: [ 100.604127][ T5984] #0: ffff800016bfd788 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54 [ 100.606003][ T5984] #1: ffff800016bfd5e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x15c/0x39c [ 100.608156][ T5984] #2: ffff0000d6945690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x108/0x6d4 [ 100.610300][ T5984] #3: ffff800016cd6be8 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x17c/0x33c [ 100.612584][ T5984] #4: ffff800014c922e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 100.614654][ T5984] #5: ffff0000c5712c78 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x7b0/0x10dc [ 100.616847][ T5984] [ 100.616847][ T5984] stack backtrace: [ 100.618064][ T5984] CPU: 0 PID: 5984 Comm: syz.3.756 Not tainted 5.15.170-syzkaller #0 [ 100.619761][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.621813][ T5984] Call trace: [ 100.622491][ T5984] dump_backtrace+0x0/0x530 [ 100.623412][ T5984] show_stack+0x2c/0x3c [ 100.624374][ T5984] dump_stack_lvl+0x108/0x170 [ 100.625295][ T5984] dump_stack+0x1c/0x58 [ 100.626205][ T5984] print_circular_bug+0x150/0x1b8 [ 100.627274][ T5984] check_noncircular+0x2cc/0x378 [ 100.628343][ T5984] __lock_acquire+0x32d4/0x7638 [ 100.629488][ T5984] lock_acquire+0x240/0x77c [ 100.630408][ T5984] mptcp_diag_get_info+0x208/0x8a0 [ 100.631541][ T5984] inet_sk_diag_fill+0xcb8/0x17b4 [ 100.632653][ T5984] mptcp_diag_dump+0xb4c/0x10dc [ 100.633713][ T5984] __inet_diag_dump+0x1e8/0x33c [ 100.634785][ T5984] inet_diag_dump_compat+0x17c/0x288 [ 100.636028][ T5984] netlink_dump+0x4a8/0xad0 [ 100.637017][ T5984] __netlink_dump_start+0x474/0x6d4 [ 100.638035][ T5984] inet_diag_rcv_msg_compat+0x1c8/0x434 [ 100.639262][ T5984] sock_diag_rcv_msg+0x174/0x39c [ 100.640345][ T5984] netlink_rcv_skb+0x20c/0x3b8 [ 100.641399][ T5984] sock_diag_rcv+0x3c/0x54 [ 100.642378][ T5984] netlink_unicast+0x664/0x938 [ 100.643384][ T5984] netlink_sendmsg+0x844/0xb38 [ 100.644407][ T5984] ____sys_sendmsg+0x584/0x870 [ 100.645422][ T5984] ___sys_sendmsg+0x214/0x294 [ 100.646409][ T5984] __arm64_sys_sendmsg+0x1ac/0x25c [ 100.647419][ T5984] invoke_syscall+0x98/0x2b8 [ 100.648401][ T5984] el0_svc_common+0x138/0x258 [ 100.649402][ T5984] do_el0_svc+0x58/0x14c [ 100.650354][ T5984] el0_svc+0x7c/0x1f0 [ 100.651137][ T5984] el0t_64_sync_handler+0x84/0xe4 [ 100.652162][ T5984] el0t_64_sync+0x1a0/0x1a4 [ 100.653864][ T5984] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 100.656262][ T5984] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5984, name: syz.3.756 [ 100.657977][ T5984] INFO: lockdep is turned off. [ 100.658972][ T5984] Preemption disabled at: [ 100.658982][ T5984] [] mptcp_diag_dump+0x7b0/0x10dc [ 100.661299][ T5984] CPU: 0 PID: 5984 Comm: syz.3.756 Not tainted 5.15.170-syzkaller #0 [ 100.662799][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.664843][ T5984] Call trace: [ 100.665467][ T5984] dump_backtrace+0x0/0x530 [ 100.666372][ T5984] show_stack+0x2c/0x3c [ 100.667215][ T5984] dump_stack_lvl+0x108/0x170 [ 100.668273][ T5984] dump_stack+0x1c/0x58 [ 100.669085][ T5984] ___might_sleep+0x380/0x4dc [ 100.670131][ T5984] __might_sleep+0x98/0xf0 [ 100.670997][ T5984] __lock_sock_fast+0x3c/0xf0 [ 100.671939][ T5984] mptcp_diag_get_info+0x210/0x8a0 [ 100.673044][ T5984] inet_sk_diag_fill+0xcb8/0x17b4 [ 100.674203][ T5984] mptcp_diag_dump+0xb4c/0x10dc [ 100.675195][ T5984] __inet_diag_dump+0x1e8/0x33c [ 100.676251][ T5984] inet_diag_dump_compat+0x17c/0x288 [ 100.677397][ T5984] netlink_dump+0x4a8/0xad0 [ 100.678406][ T5984] __netlink_dump_start+0x474/0x6d4 [ 100.679495][ T5984] inet_diag_rcv_msg_compat+0x1c8/0x434 [ 100.680626][ T5984] sock_diag_rcv_msg+0x174/0x39c [ 100.681659][ T5984] netlink_rcv_skb+0x20c/0x3b8 [ 100.682659][ T5984] sock_diag_rcv+0x3c/0x54 [ 100.683587][ T5984] netlink_unicast+0x664/0x938 [ 100.684620][ T5984] netlink_sendmsg+0x844/0xb38 [ 100.685690][ T5984] ____sys_sendmsg+0x584/0x870 [ 100.686753][ T5984] ___sys_sendmsg+0x214/0x294 [ 100.687808][ T5984] __arm64_sys_sendmsg+0x1ac/0x25c [ 100.688892][ T5984] invoke_syscall+0x98/0x2b8 [ 100.689872][ T5984] el0_svc_common+0x138/0x258 [ 100.690911][ T5984] do_el0_svc+0x58/0x14c [ 100.691650][ T5984] el0_svc+0x7c/0x1f0 [ 100.692597][ T5984] el0t_64_sync_handler+0x84/0xe4 [ 100.693669][ T5984] el0t_64_sync+0x1a0/0x1a4