last executing test programs: 6.524116722s ago: executing program 3 (id=652): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit$UBLK(r2, r3, 0x0, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0xc3a, 0xc86, 0x0}}) syz_io_uring_submit$UBLK(r2, r3, 0x0, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, 0x0) 5.974778775s ago: executing program 0 (id=658): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r0) r1 = socket(0x23, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x1b}, @val={0x5, 0x0, 0x5, 0x0, 0x16c5, 0x1000}, @eth={@remote, @local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x805, "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"}}}}, 0x1010) 4.40012797s ago: executing program 0 (id=661): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.39966834s ago: executing program 3 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.380024431s ago: executing program 2 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendto$packet(r7, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, 0x0, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.234835384s ago: executing program 3 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x1, 0x0, 0x400}, 0x10) recvfrom(r4, &(0x7f0000000280)=""/196, 0xc4, 0x0, &(0x7f0000000380)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x49, &(0x7f0000000000), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 4.097448897s ago: executing program 0 (id=668): io_uring_setup(0x7bdb, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x2e, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x153042, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) symlinkat(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 3.682793377s ago: executing program 2 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff7, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x86, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.632774368s ago: executing program 4 (id=672): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080080}, 0x20000810) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)}}], 0x4, 0x4040000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 2.354026407s ago: executing program 3 (id=674): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 2.23296893s ago: executing program 4 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.22059658s ago: executing program 2 (id=677): r0 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x808, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2.053698084s ago: executing program 4 (id=679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.046239424s ago: executing program 1 (id=680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[], 0x90) 2.004225145s ago: executing program 1 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r8, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.870989568s ago: executing program 0 (id=682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x4, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20400, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x6, @loopback, 0x2}]}, &(0x7f0000000140)=0x10) 1.78300422s ago: executing program 4 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.449309437s ago: executing program 3 (id=684): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[0x0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.344262219s ago: executing program 1 (id=685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x28000600) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x69a3b0a0, 0x0, 0x0, 0x0, 0x0, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 1.194622043s ago: executing program 4 (id=686): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080080}, 0x20000810) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)}}], 0x4, 0x4040000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 1.164259484s ago: executing program 2 (id=687): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xfffffffe, @empty, 0xca70}}, 0x0, 0x0, 0x40000002, 0x4, 0xa17433da3c5d69a1, 0x2, 0x81}, 0x9c) 1.143284484s ago: executing program 1 (id=688): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r0) r1 = socket(0x23, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x1b}, @val={0x5, 0x0, 0x5, 0x0, 0x16c5, 0x1000}, @eth={@remote, @local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x805, "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"}}}}, 0x1010) 1.102978225s ago: executing program 3 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 348.410082ms ago: executing program 0 (id=690): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 345.369733ms ago: executing program 2 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)=ANY=[], 0x90) 328.553282ms ago: executing program 1 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 44.82264ms ago: executing program 2 (id=693): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 43.475649ms ago: executing program 1 (id=694): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 43.116389ms ago: executing program 0 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r8, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 0s ago: executing program 4 (id=696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 27.965993][ T4314] cgroup: Unknown subsys name 'net' [ 28.253459][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.520150][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.693839][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.701004][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.702494][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.704176][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.705214][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.705828][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.706825][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.707757][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.708733][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.709752][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.711589][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.716077][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.717692][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.719403][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.721445][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.722451][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.724200][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.724596][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.725816][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.726821][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.728013][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.729806][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.731970][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.733309][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.767681][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.769407][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.772799][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.774418][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.775741][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.776998][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.872039][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 29.894537][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.912391][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 29.916846][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 29.937087][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 29.952355][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.953577][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.955154][ T4339] device bridge_slave_0 entered promiscuous mode [ 29.969221][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.970813][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.972370][ T4331] device bridge_slave_0 entered promiscuous mode [ 29.975899][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.977199][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.978728][ T4339] device bridge_slave_1 entered promiscuous mode [ 29.980332][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.981675][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.983115][ T4327] device bridge_slave_0 entered promiscuous mode [ 29.986526][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.987742][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.989161][ T4327] device bridge_slave_1 entered promiscuous mode [ 29.990689][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.991894][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.993436][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.014840][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.018303][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.023214][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.024885][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.026132][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.027637][ T4342] device bridge_slave_0 entered promiscuous mode [ 30.030942][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.037530][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.039155][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.040308][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.042186][ T4342] device bridge_slave_1 entered promiscuous mode [ 30.044473][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.059699][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.061025][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.062438][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.065187][ T4331] team0: Port device team_slave_0 added [ 30.067748][ T4331] team0: Port device team_slave_1 added [ 30.069634][ T4339] team0: Port device team_slave_0 added [ 30.076821][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.078030][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.079396][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.081598][ T4339] team0: Port device team_slave_1 added [ 30.087234][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.089465][ T4327] team0: Port device team_slave_0 added [ 30.097124][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.098287][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.102335][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.107160][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.108867][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.110075][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.114559][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.117348][ T4327] team0: Port device team_slave_1 added [ 30.121680][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.122812][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.126988][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.131173][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.132295][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.136798][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.144023][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.149680][ T4342] team0: Port device team_slave_0 added [ 30.155326][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.164005][ T4342] team0: Port device team_slave_1 added [ 30.167494][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.168697][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.173006][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.176472][ T4326] team0: Port device team_slave_0 added [ 30.178290][ T4326] team0: Port device team_slave_1 added [ 30.183991][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.185085][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.189147][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.241658][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.290652][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.346106][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347281][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.353730][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.356954][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.358098][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.362802][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.401643][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.440727][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.480566][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.481885][ T4339] Cannot create hsr debugfs directory [ 30.483472][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.484534][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.488507][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.493185][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.494392][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.498456][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.561570][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.600819][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.640512][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.641887][ T4327] Cannot create hsr debugfs directory [ 30.713042][ T4342] device hsr_slave_0 entered promiscuous mode [ 30.750740][ T4342] device hsr_slave_1 entered promiscuous mode [ 30.790588][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.791696][ T4342] Cannot create hsr debugfs directory [ 30.861722][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.910747][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.950504][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.951724][ T4326] Cannot create hsr debugfs directory [ 31.069890][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.111622][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.153648][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.191548][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.245757][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.281656][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.324187][ T4342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.361521][ T4342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.401557][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.446681][ T4342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.483918][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.513317][ T4342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.565161][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.592216][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.630171][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.671597][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.723047][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.770672][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 31.770700][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 31.771790][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 31.780945][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 31.785455][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.831162][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.850864][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 31.862147][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.916422][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.918841][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.938027][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.940101][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.943846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.945341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.947771][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.949581][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.956514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.958205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.959762][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.961035][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.963469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.965084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.966691][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.967880][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.969484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.975917][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.990802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.992512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.993999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.995570][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.996730][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.998387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.003062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.004472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.008481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.013832][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.017177][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.019272][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.021488][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.028443][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.030189][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.031499][ T1582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.034173][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.043694][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.045364][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.046831][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.048406][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.049883][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.051039][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.053447][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.055451][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.056956][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.058394][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.059837][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.063915][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.070291][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.072278][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.073871][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.075330][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.076427][ T1582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.077872][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.079384][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.084037][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.087645][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.089203][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.097109][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.098769][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.107830][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.109681][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.113448][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.115037][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.116943][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.118407][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.119868][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.121632][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.126738][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.129789][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.132519][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.141570][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.148285][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.155610][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.157340][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.162655][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.164225][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.168333][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.171661][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.173231][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.177330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.179062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.182646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.184045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.197346][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.198833][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.200390][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.203479][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.204554][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.205840][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.207305][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.209461][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.210572][ T1582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.212308][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.214063][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.219432][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.224565][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.226159][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.228155][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.238345][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.239905][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.243827][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.245437][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.246988][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.248598][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.249796][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.252364][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.254030][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.255494][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.256990][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.259520][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.267534][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.269375][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.274275][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.275638][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.276863][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.278090][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.283652][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.306183][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.308116][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.309688][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.311680][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.321853][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.323071][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.324692][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.326402][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.328053][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.329975][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.335756][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.337960][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.339459][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.341319][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.342843][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.344236][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.346028][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.348677][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.355611][ T4339] device veth0_vlan entered promiscuous mode [ 32.360035][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.362127][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.364415][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.365839][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.374817][ T4339] device veth1_vlan entered promiscuous mode [ 32.377299][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.378820][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.380166][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.386847][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.388128][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.389809][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.408851][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.410733][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.412714][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.414513][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.415897][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.425952][ T4331] device veth0_vlan entered promiscuous mode [ 32.427652][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.429170][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.436188][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.438544][ T4339] device veth0_macvtap entered promiscuous mode [ 32.443200][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.444895][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.446196][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.447441][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.449040][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.458055][ T4331] device veth1_vlan entered promiscuous mode [ 32.463700][ T4339] device veth1_macvtap entered promiscuous mode [ 32.468340][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.469865][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.473409][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.474854][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.476066][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.483218][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.484627][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.486196][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.487678][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.489215][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.492017][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.493539][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.495040][ T4342] device veth0_vlan entered promiscuous mode [ 32.505708][ T4331] device veth0_macvtap entered promiscuous mode [ 32.508166][ T4331] device veth1_macvtap entered promiscuous mode [ 32.516388][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.518081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.519495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.521653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.525946][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.533284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.534974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.536439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.537839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.541274][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.556578][ T4342] device veth1_vlan entered promiscuous mode [ 32.558039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.559481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.561652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.563112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.564749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.566358][ T4327] device veth0_vlan entered promiscuous mode [ 32.568989][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.571915][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.574843][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.576837][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578305][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.579692][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.581706][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.587433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.592135][ T4327] device veth1_vlan entered promiscuous mode [ 32.600303][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.602624][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.604771][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.607689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.609169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.612180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.613618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.622095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.623719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.625399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.629499][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.633845][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635198][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.636608][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.647123][ T4342] device veth0_macvtap entered promiscuous mode [ 32.649413][ T4342] device veth1_macvtap entered promiscuous mode [ 32.657893][ T4327] device veth0_macvtap entered promiscuous mode [ 32.659272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.661113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.662619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.663983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.665592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.678656][ T4327] device veth1_macvtap entered promiscuous mode [ 32.686364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.687910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.689530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.706743][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.708456][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.710115][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.714489][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.716928][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.718300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.719911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.721983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.723606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.725164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.726587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.735337][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.737101][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.738510][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.739946][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.742338][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.743860][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.745980][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.748209][ T4326] device veth0_vlan entered promiscuous mode [ 32.749722][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.751701][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.757123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.758719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.760250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.764534][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.766301][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.767932][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.769533][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.774484][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.779477][ T4326] device veth1_vlan entered promiscuous mode [ 32.786789][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.788551][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.790270][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.796038][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.797817][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.799306][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.801850][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.803567][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.805145][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.807380][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.809834][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.811756][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.817736][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.818460][ T4342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.818980][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.820359][ T4342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.823652][ T4342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.824966][ T4342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.827172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.828735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.830197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.832469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.836302][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837652][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839074][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.840430][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.855490][ T4326] device veth0_macvtap entered promiscuous mode [ 32.860245][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.861999][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.863453][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.865445][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.872648][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.873970][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.878809][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.890143][ T4326] device veth1_macvtap entered promiscuous mode [ 32.910058][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.911645][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.918204][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.919811][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.960021][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.962862][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.964441][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.966073][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.967526][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.969413][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.971993][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.973703][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.976562][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.984458][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.986083][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.987911][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.989086][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.992332][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.002100][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.003819][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.004668][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.005354][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.006599][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.008171][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.011500][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.013042][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.014551][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.016210][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.018534][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.019889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.024155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.025707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.032052][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.034105][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035686][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.037238][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.382117][ T4412] fuse: Bad value for 'rootmode' [ 33.414463][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.415933][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.417279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.426709][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.428034][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.436402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.483479][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.484757][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.486058][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.911098][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 34.911124][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.913449][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 34.914779][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 34.916168][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 35.045918][ T4432] fuse: Unknown parameter 'user_i00000000000000000000' [ 35.069131][ T4433] device syzkaller0 entered promiscuous mode [ 35.171373][ T4437] loop0: detected capacity change from 0 to 4096 [ 35.173209][ T4437] EXT4-fs: inline encryption not supported [ 35.195085][ T4437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.196517][ T4437] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.254255][ T4437] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 35.259053][ T4437] System zones: 0-5 [ 35.262255][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.267768][ T4437] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 35.272719][ T4437] overlayfs: missing 'workdir' [ 35.295708][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 35.596818][ T4450] fuse: Bad value for 'rootmode' [ 35.686049][ T4454] loop1: detected capacity change from 0 to 8 [ 35.832841][ T4470] fuse: Unknown parameter 'user_id00000000000000000000' [ 36.026482][ T4482] loop1: detected capacity change from 0 to 8 [ 36.970569][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 36.970584][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 36.971589][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 36.972548][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.973533][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 38.370304][ T4500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25'. [ 39.051150][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 39.052178][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 39.053208][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 39.054276][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.055243][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 39.614905][ T4510] fuse: Unknown parameter 'use00000000000000000000' [ 39.675608][ T4514] loop1: detected capacity change from 0 to 4096 [ 39.677968][ T4514] EXT4-fs: inline encryption not supported [ 39.679809][ T4514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.681810][ T4514] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.684266][ T4514] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 39.685607][ T4514] System zones: 0-5 [ 39.687375][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.695320][ T4514] overlayfs: missing 'workdir' [ 39.707552][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 39.788896][ T4521] fuse: Unknown parameter 'user_id00000000000000000000' [ 39.869066][ T4523] loop1: detected capacity change from 0 to 8 [ 42.152127][ T4538] loop1: detected capacity change from 0 to 8 [ 43.034023][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 45.068991][ T4549] fuse: Unknown parameter 'use00000000000000000000' [ 45.254514][ T4559] fuse: Unknown parameter 'user_id00000000000000000000' [ 45.285214][ T4561] loop1: detected capacity change from 0 to 4096 [ 45.286627][ T4561] EXT4-fs: inline encryption not supported [ 45.297715][ T4561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.299228][ T4561] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.304128][ T4561] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 45.305517][ T4561] System zones: 0-5 [ 45.310937][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.318939][ T4561] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 45.347707][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 47.167185][ T4577] loop2: detected capacity change from 0 to 8 [ 47.282953][ T4583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'. [ 47.565576][ T4587] fuse: Unknown parameter 'use00000000000000000000' [ 47.646396][ T4594] fuse: Bad value for 'fd' [ 47.736340][ T4601] loop1: detected capacity change from 0 to 8 [ 48.309682][ T4614] device syzkaller0 entered promiscuous mode [ 48.811739][ T4620] loop3: detected capacity change from 0 to 8 [ 48.950445][ C0] sched: RT throttling activated [ 49.136860][ T4627] loop0: detected capacity change from 0 to 8 [ 49.198283][ T4632] fuse: Unknown parameter 'user_i00000000000000000000' [ 49.249404][ T4638] fuse: Bad value for 'fd' [ 49.800961][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 51.459701][ T4679] loop3: detected capacity change from 0 to 8 [ 51.509426][ T4682] fuse: Unknown parameter 'user_i00000000000000000000' [ 51.543232][ T4684] loop3: detected capacity change from 0 to 1024 [ 51.566090][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.750145][ T4689] ======================================================= [ 51.750145][ T4689] WARNING: The mand mount option has been deprecated and [ 51.750145][ T4689] and is ignored by this kernel. Remove the mand [ 51.750145][ T4689] option from the mount to silence this warning. [ 51.750145][ T4689] ======================================================= [ 52.405067][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 52.420254][ T4693] fuse: Bad value for 'fd' [ 52.636237][ T4700] loop3: detected capacity change from 0 to 8 [ 55.230501][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 57.335038][ T4725] fuse: Unknown parameter 'user_i00000000000000000000' [ 57.418424][ T4727] loop3: detected capacity change from 0 to 8 [ 57.468713][ T4730] fuse: Unknown parameter '0x0000000000000003' [ 59.461654][ T4748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 61.347898][ T4768] fuse: Unknown parameter '0x0000000000000003' [ 62.622944][ T4800] device syzkaller0 entered promiscuous mode [ 62.695887][ T4814] fuse: Unknown parameter '0x0000000000000003' [ 62.708054][ T4812] loop1: detected capacity change from 0 to 4096 [ 62.712985][ T4812] EXT4-fs: inline encryption not supported [ 62.719836][ T4812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.724117][ T4812] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.736280][ T4812] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 62.739042][ T4812] System zones: 0-5 [ 62.744787][ T4817] overlayfs: missing 'lowerdir' [ 62.753566][ T4812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.854235][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 62.963535][ T4831] Zero length message leads to an empty skb [ 64.083700][ T4843] fuse: Unknown parameter '0x0000000000000003' [ 64.117791][ T4845] overlayfs: missing 'lowerdir' [ 64.501704][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502964][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.693537][ T4871] overlayfs: failed to resolve './file0': -2 [ 64.756773][ T4877] fuse: Unknown parameter '0x0000000000000003' [ 65.728295][ T4888] overlayfs: missing 'lowerdir' [ 66.048731][ T4901] loop1: detected capacity change from 0 to 1024 [ 66.086147][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.271632][ T4906] overlayfs: conflicting lowerdir path [ 66.909083][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 66.975327][ T4911] overlayfs: failed to resolve './file0': -2 [ 67.279789][ T4922] overlayfs: missing 'lowerdir' [ 68.324992][ T4936] loop1: detected capacity change from 0 to 1024 [ 68.357383][ T4936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.561151][ T4943] overlayfs: conflicting lowerdir path [ 69.189088][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 69.351226][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 69.621450][ T22] cfg80211: failed to load regulatory.db [ 70.205822][ T4972] 0x000000000010-0x000000000020 : "" [ 70.211369][ T4972] ftl_cs: FTL header corrupt! [ 70.232270][ T4972] loop4: detected capacity change from 0 to 512 [ 70.235801][ T4972] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 70.238588][ T4972] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 70.242999][ T4972] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 70.422678][ T4975] syz.4.157: attempt to access beyond end of device [ 70.422678][ T4975] loop4: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 76.645515][ T4999] overlayfs: missing 'lowerdir' [ 76.667246][ T5002] loop4: detected capacity change from 0 to 1024 [ 76.692811][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.788463][ T5013] loop0: detected capacity change from 0 to 2048 [ 76.895843][ T5018] overlayfs: conflicting lowerdir path [ 77.143627][ T5013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.201873][ T5013] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.169: reserved inode found cleared - inode=1 [ 77.522469][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 78.089729][ T5043] loop4: detected capacity change from 0 to 8 [ 78.330037][ T5050] loop2: detected capacity change from 0 to 8 [ 78.465336][ T5054] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.470244][ T5054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.943945][ T5062] device syzkaller0 entered promiscuous mode [ 78.949546][ T5062] TC_ACT_REPEAT abuse ? [ 79.116558][ T5069] loop4: detected capacity change from 0 to 1024 [ 79.150408][ T5069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.399568][ T5077] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.847915][ T47] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 80.160814][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 80.180677][ T5007] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 80.186895][ T5090] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.188436][ T5090] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.274671][ T5094] loop4: detected capacity change from 0 to 8 [ 81.085596][ T5123] loop3: detected capacity change from 0 to 512 [ 81.174608][ T5123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.257013][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 81.315196][ T5133] loop3: detected capacity change from 0 to 1024 [ 81.346370][ T5133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.541360][ T5138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.816830][ T5141] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.819698][ T5141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.897974][ T5143] loop1: detected capacity change from 0 to 8 [ 82.407743][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 82.659565][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 82.959469][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 82.973804][ T5175] overlayfs: missing 'lowerdir' [ 83.047402][ T5177] loop3: detected capacity change from 0 to 8 [ 83.141133][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 83.266324][ T5193] loop3: detected capacity change from 0 to 1024 [ 83.296782][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.489324][ T5199] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.785319][ T5204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 83.943407][ T5212] overlayfs: missing 'lowerdir' [ 84.306994][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 84.393312][ T5218] loop3: detected capacity change from 0 to 8 [ 84.617579][ T5228] overlayfs: failed to resolve './file0': -2 [ 84.733824][ T5233] autofs4:pid:5233:autofs_fill_super: called with bogus options [ 84.737283][ T5233] __vm_enough_memory: pid: 5233, comm: syz.2.235, no enough memory for the allocation [ 85.128158][ T5239] loop2: detected capacity change from 0 to 1024 [ 85.134852][ T5241] overlayfs: missing 'lowerdir' [ 85.160176][ T5239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.556669][ T5246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.607622][ T5252] loop1: detected capacity change from 0 to 1024 [ 85.613221][ T5252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.635637][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.768543][ T5252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 85.801194][ T5252] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.842392][ T5252] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 85.850145][ T5252] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.850145][ T5252] [ 85.852010][ T5252] EXT4-fs (loop1): Total free blocks count 0 [ 85.853058][ T5252] EXT4-fs (loop1): Free/Dirty block details [ 85.854024][ T5252] EXT4-fs (loop1): free_blocks=20480 [ 85.859706][ T5252] EXT4-fs (loop1): dirty_blocks=80 [ 85.863124][ T5252] EXT4-fs (loop1): Block reservation details [ 85.864315][ T5252] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 85.931338][ T5270] loop3: detected capacity change from 0 to 512 [ 85.984908][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 86.002774][ T5270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.009803][ T5276] overlayfs: failed to resolve './file0': -2 [ 86.029153][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 86.089184][ T5278] loop2: detected capacity change from 0 to 512 [ 86.097128][ T5278] EXT4-fs: Ignoring removed nobh option [ 86.116623][ T5283] overlayfs: missing 'workdir' [ 86.144076][ T5278] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.148140][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 86.206750][ T5288] binder: 5286:5288 tried to acquire reference to desc 0, got 1 instead [ 86.210406][ T22] binder: undelivered TRANSACTION_COMPLETE [ 86.241136][ T22] binder: undelivered transaction 5, process died. [ 86.252210][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 86.569344][ T5298] loop2: detected capacity change from 0 to 512 [ 86.578936][ T5298] EXT4-fs (loop2): 1 truncate cleaned up [ 86.580068][ T5298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.590306][ T5298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.257: bg 0: block 465: padding at end of block bitmap is not set [ 86.599394][ T5298] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 86.601818][ T5298] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.601818][ T5298] [ 86.603316][ T5298] EXT4-fs (loop2): Total free blocks count 0 [ 86.604885][ T5298] EXT4-fs (loop2): Free/Dirty block details [ 86.605820][ T5298] EXT4-fs (loop2): free_blocks=0 [ 86.606610][ T5298] EXT4-fs (loop2): dirty_blocks=2 [ 86.607410][ T5298] EXT4-fs (loop2): Block reservation details [ 86.608366][ T5298] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 86.648677][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 86.674151][ T5306] loop4: detected capacity change from 0 to 1024 [ 86.691830][ T5308] overlayfs: failed to resolve './file0': -2 [ 86.698334][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.775607][ T5313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.798593][ T5313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.889342][ T5316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.118526][ T5313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 87.143603][ T5313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 87.146061][ T5313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.146061][ T5313] [ 87.162562][ T5313] EXT4-fs (loop2): Total free blocks count 0 [ 87.163608][ T5313] EXT4-fs (loop2): Free/Dirty block details [ 87.164568][ T5313] EXT4-fs (loop2): free_blocks=20480 [ 87.165417][ T5313] EXT4-fs (loop2): dirty_blocks=80 [ 87.166202][ T5313] EXT4-fs (loop2): Block reservation details [ 87.167154][ T5313] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 87.200736][ T5321] overlayfs: missing 'workdir' [ 87.241211][ T5323] binder: 5322:5323 tried to acquire reference to desc 0, got 1 instead [ 87.243450][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 87.252128][ T4373] binder: undelivered transaction 10, process died. [ 87.274412][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 88.490149][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 89.176735][ T5359] overlayfs: missing 'workdir' [ 89.514546][ T5363] set_capacity_and_notify: 1 callbacks suppressed [ 89.514555][ T5363] loop2: detected capacity change from 0 to 1024 [ 89.533983][ T5363] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.583184][ T5363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.602932][ T5363] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.627423][ T5368] Bluetooth: hci5: Frame reassembly failed (-90) [ 89.634986][ T5363] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 89.640721][ T5363] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.640721][ T5363] [ 89.642307][ T5363] EXT4-fs (loop2): Total free blocks count 0 [ 89.643182][ T5363] EXT4-fs (loop2): Free/Dirty block details [ 89.644242][ T5363] EXT4-fs (loop2): free_blocks=20480 [ 89.645033][ T5363] EXT4-fs (loop2): dirty_blocks=80 [ 89.645839][ T5363] EXT4-fs (loop2): Block reservation details [ 89.646102][ T5372] loop3: detected capacity change from 0 to 1024 [ 89.646767][ T5363] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 89.666740][ T5372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.760973][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 90.033176][ T5375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.048519][ T5380] loop2: detected capacity change from 0 to 8 [ 90.669135][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 91.707523][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 93.034496][ T5449] loop1: detected capacity change from 0 to 128 [ 93.049827][ T5449] EXT4-fs: Ignoring removed nobh option [ 93.117386][ T5449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.132217][ T5449] EXT4-fs (loop1): shut down requested (1) [ 93.161760][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 93.526840][ T5462] device syzkaller0 entered promiscuous mode [ 93.790760][ T5468] loop1: detected capacity change from 0 to 8 [ 94.372505][ T5479] loop1: detected capacity change from 0 to 8 [ 96.323736][ T5506] loop1: detected capacity change from 0 to 8 [ 96.519483][ T5510] loop2: detected capacity change from 0 to 1024 [ 96.566159][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.765498][ T5520] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.161253][ T5523] device syzkaller0 entered promiscuous mode [ 97.476199][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 98.028145][ T5548] autofs4:pid:5548:autofs_fill_super: called with bogus options [ 98.045553][ T5548] __vm_enough_memory: pid: 5548, comm: syz.4.330, no enough memory for the allocation [ 98.575110][ T5561] loop4: detected capacity change from 0 to 8 [ 98.605647][ T5563] loop2: detected capacity change from 0 to 1024 [ 98.658998][ T5563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.278309][ T5580] loop1: detected capacity change from 0 to 512 [ 99.357663][ T5582] can0: slcan on ttyS3. [ 99.601119][ T5582] can0 (unregistered): slcan off ttyS3. [ 99.778781][ T5580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.781683][ T5580] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.336: inode has both inline data and extents flags [ 99.784646][ T5580] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.336: couldn't read orphan inode 15 (err -117) [ 99.786597][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.721912][ T5605] device syzkaller0 entered promiscuous mode [ 100.805095][ T5610] loop3: detected capacity change from 0 to 512 [ 100.953437][ T5610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.105641][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 101.175407][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 101.509890][ T5626] loop3: detected capacity change from 0 to 8 [ 101.860119][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 102.091994][ T5637] loop2: detected capacity change from 0 to 8 [ 102.130963][ T5640] device syzkaller0 entered promiscuous mode [ 102.181356][ T5637] SQUASHFS error: Failed to read block 0x60: -5 [ 102.851749][ T5660] device syzkaller0 entered promiscuous mode [ 103.001404][ T5672] loop3: detected capacity change from 0 to 512 [ 103.102468][ T5672] EXT4-fs (loop3): 1 truncate cleaned up [ 103.103558][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.139963][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 103.150692][ T5676] loop2: detected capacity change from 0 to 8 [ 103.498947][ T5687] 9pnet_fd: Insufficient options for proto=fd [ 103.548511][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.365'. [ 104.924195][ T5716] device syzkaller0 entered promiscuous mode [ 105.165549][ T5727] device syzkaller0 entered promiscuous mode [ 105.375155][ T5733] loop2: detected capacity change from 0 to 8 [ 106.349319][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 106.616090][ T5745] loop4: detected capacity change from 0 to 512 [ 106.632193][ T5745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.649202][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 107.426656][ T5758] autofs4:pid:5758:autofs_fill_super: called with bogus options [ 107.430120][ T5758] __vm_enough_memory: pid: 5758, comm: syz.1.386, no enough memory for the allocation [ 119.563676][ T5809] overlayfs: missing 'lowerdir' [ 119.978099][ T4330] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 120.379741][ T5829] loop2: detected capacity change from 0 to 128 [ 120.394008][ T5829] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.397675][ T5829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.463211][ T5833] loop4: detected capacity change from 0 to 128 [ 120.611656][ T5837] xt_connbytes: Forcing CT accounting to be enabled [ 120.613178][ T5837] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.615453][ T5837] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 121.159263][ T5843] loop1: detected capacity change from 0 to 8 [ 121.162130][ T5843] SQUASHFS error: zlib decompression failed, data probably corrupt [ 121.164044][ T5843] SQUASHFS error: Failed to read block 0x9b: -5 [ 121.165082][ T5843] SQUASHFS error: Unable to read metadata cache entry [99] [ 121.166294][ T5843] SQUASHFS error: Unable to read inode 0x127 [ 121.198103][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 121.272460][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 121.299125][ T5847] loop1: detected capacity change from 0 to 128 [ 121.304492][ T5847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.316841][ T5850] overlayfs: missing 'lowerdir' [ 121.345603][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 121.406834][ T4330] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 122.356442][ T5883] loop1: detected capacity change from 0 to 128 [ 122.389709][ T5883] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.392451][ T5883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.743368][ T5889] xt_connbytes: Forcing CT accounting to be enabled [ 122.744625][ T5889] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 122.798747][ T5891] overlayfs: missing 'lowerdir' [ 122.837692][ T5895] loop4: detected capacity change from 0 to 128 [ 122.863820][ T5895] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.907163][ T5895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.319783][ T5899] xt_connbytes: Forcing CT accounting to be enabled [ 123.319824][ T5899] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 123.616469][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 123.709479][ T4330] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 123.732939][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 123.772100][ T5912] loop1: detected capacity change from 0 to 128 [ 123.817127][ T5912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.854519][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 123.857996][ T5924] overlayfs: missing 'lowerdir' [ 124.743065][ T4330] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 124.825395][ T5956] overlayfs: missing 'lowerdir' [ 124.922103][ T5965] autofs4:pid:5965:autofs_fill_super: called with bogus options [ 124.927426][ T5965] __vm_enough_memory: pid: 5965, comm: syz.0.450, no enough memory for the allocation [ 125.300210][ T4330] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 125.335764][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 125.412898][ T5986] overlayfs: missing 'lowerdir' [ 125.437434][ T5989] autofs4:pid:5989:autofs_fill_super: called with bogus options [ 125.440248][ T5989] __vm_enough_memory: pid: 5989, comm: syz.3.461, no enough memory for the allocation [ 125.625122][ T4330] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 125.931007][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932254][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.936879][ T6010] loop3: detected capacity change from 0 to 8 [ 125.949209][ T6010] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.953039][ T6010] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.956143][ T6010] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.957446][ T6010] SQUASHFS error: Unable to read inode 0x127 [ 125.968827][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 125.978550][ T6012] autofs4:pid:6012:autofs_fill_super: called with bogus options [ 125.983992][ T6014] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.986431][ T6014] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.990213][ T6012] __vm_enough_memory: pid: 6012, comm: syz.2.472, no enough memory for the allocation [ 126.044962][ T6020] loop4: detected capacity change from 0 to 128 [ 126.050936][ T6020] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.056942][ T6020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.232197][ T6029] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 126.494024][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.495589][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.497179][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.499108][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.500830][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.502610][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.504141][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.505682][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.507201][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.508763][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.554968][ T4330] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 127.058212][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 127.061688][ T6047] loop2: detected capacity change from 0 to 8 [ 127.080927][ T6047] SQUASHFS error: zlib decompression failed, data probably corrupt [ 127.082325][ T6047] SQUASHFS error: Failed to read block 0x9b: -5 [ 127.083585][ T6047] SQUASHFS error: Unable to read metadata cache entry [99] [ 127.091634][ T6047] SQUASHFS error: Unable to read inode 0x127 [ 127.094802][ T6049] autofs4:pid:6049:autofs_fill_super: called with bogus options [ 127.098069][ T6049] __vm_enough_memory: pid: 6049, comm: syz.4.485, no enough memory for the allocation [ 127.125497][ T6051] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.127120][ T6051] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.133074][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.619605][ T4330] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 127.691393][ T6074] loop3: detected capacity change from 0 to 128 [ 127.705225][ T6074] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.733280][ T6079] autofs4:pid:6079:autofs_fill_super: called with bogus options [ 127.735084][ T6074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.747173][ T6079] __vm_enough_memory: pid: 6079, comm: syz.4.497, no enough memory for the allocation [ 127.809718][ T6082] loop1: detected capacity change from 0 to 8 [ 127.814374][ T6082] SQUASHFS error: zlib decompression failed, data probably corrupt [ 127.815788][ T6082] SQUASHFS error: Failed to read block 0x9b: -5 [ 127.816907][ T6082] SQUASHFS error: Unable to read metadata cache entry [99] [ 127.818146][ T6082] SQUASHFS error: Unable to read inode 0x127 [ 127.829886][ T6084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.838791][ T6084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.903120][ T6085] xt_connbytes: Forcing CT accounting to be enabled [ 127.904662][ T6085] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 128.146617][ T6087] loop1: detected capacity change from 0 to 512 [ 128.167041][ T6087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.245508][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 128.688936][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 128.738888][ T6106] loop1: detected capacity change from 0 to 128 [ 128.747524][ T4330] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 128.750397][ T6106] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.766251][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.950665][ T6120] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 129.600357][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 129.732793][ T6142] xt_connbytes: Forcing CT accounting to be enabled [ 129.734282][ T6142] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 129.819086][ T6144] syz.0.518 uses obsolete (PF_INET,SOCK_PACKET) [ 130.041234][ T4330] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 130.064799][ T6152] loop2: detected capacity change from 0 to 512 [ 130.119315][ T6152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.220121][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 130.641473][ T6163] device syzkaller0 entered promiscuous mode [ 130.811846][ T6173] loop4: detected capacity change from 0 to 128 [ 130.819731][ T6173] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.827426][ T6173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.850299][ T6176] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 131.001969][ T6181] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 131.248055][ T6184] device syzkaller0 entered promiscuous mode [ 131.326142][ T4330] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 131.679177][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 131.803052][ T6198] __vm_enough_memory: pid: 6198, comm: syz.1.536, no enough memory for the allocation [ 131.942281][ T6205] device syzkaller0 entered promiscuous mode [ 132.004615][ T6210] loop1: detected capacity change from 0 to 8 [ 132.029833][ T6210] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.032492][ T6210] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.033586][ T6210] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.047450][ T6210] SQUASHFS error: Unable to read inode 0x127 [ 132.177117][ T6216] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 132.230663][ T4330] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 132.613913][ T6225] loop1: detected capacity change from 0 to 128 [ 132.626855][ T6225] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.632054][ T6225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.715917][ T6230] device syzkaller1 entered promiscuous mode [ 132.725223][ T6231] loop2: detected capacity change from 0 to 8 [ 132.986986][ T6232] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 133.101800][ T6236] __vm_enough_memory: pid: 6236, comm: syz.0.547, no enough memory for the allocation [ 133.477617][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 133.581268][ T4330] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 133.612531][ T6260] device syzkaller0 entered promiscuous mode [ 134.493191][ T6279] autofs4:pid:6279:autofs_fill_super: called with bogus options [ 134.496169][ T6279] __vm_enough_memory: pid: 6279, comm: syz.2.560, no enough memory for the allocation [ 134.724105][ T6291] loop2: detected capacity change from 0 to 512 [ 134.817565][ T6291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.831942][ T6297] loop1: detected capacity change from 0 to 128 [ 134.836364][ T6297] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.865845][ T6297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.000272][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 135.023261][ T4330] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 135.077975][ T6306] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 135.450767][ T6312] device syzkaller0 entered promiscuous mode [ 135.784633][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 136.130065][ T6322] autofs4:pid:6322:autofs_fill_super: called with bogus options [ 136.133277][ T6322] __vm_enough_memory: pid: 6322, comm: syz.4.571, no enough memory for the allocation [ 136.725281][ T6342] loop1: detected capacity change from 0 to 8 [ 136.729893][ T6342] SQUASHFS error: zlib decompression failed, data probably corrupt [ 136.740353][ T6342] SQUASHFS error: Failed to read block 0x9b: -5 [ 136.752986][ T6342] SQUASHFS error: Unable to read metadata cache entry [99] [ 136.754303][ T6342] SQUASHFS error: Unable to read inode 0x127 [ 136.891330][ T6349] device syzkaller0 entered promiscuous mode [ 136.893457][ T6352] autofs4:pid:6352:autofs_fill_super: called with bogus options [ 136.897586][ T6352] __vm_enough_memory: pid: 6352, comm: syz.2.582, no enough memory for the allocation [ 136.923508][ T6354] loop2: detected capacity change from 0 to 128 [ 136.925637][ T6354] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.931176][ T6354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.945747][ T6358] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 138.036612][ T6362] loop4: detected capacity change from 0 to 128 [ 138.100046][ T6362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.133689][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 138.454183][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 138.502001][ T6378] loop1: detected capacity change from 0 to 8 [ 138.522707][ T6378] SQUASHFS error: zlib decompression failed, data probably corrupt [ 138.526416][ T6378] SQUASHFS error: Failed to read block 0x9b: -5 [ 138.527507][ T6378] SQUASHFS error: Unable to read metadata cache entry [99] [ 138.530187][ T6378] SQUASHFS error: Unable to read inode 0x127 [ 138.693956][ T6387] device syzkaller0 entered promiscuous mode [ 140.453513][ T6409] device syzkaller0 entered promiscuous mode [ 140.618204][ T6426] device syzkaller0 entered promiscuous mode [ 140.628160][ T6419] device syzkaller0 entered promiscuous mode [ 143.751287][ T6471] device syzkaller0 entered promiscuous mode [ 143.806504][ T6475] __nla_validate_parse: 47 callbacks suppressed [ 143.806514][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 143.835325][ T6477] device syzkaller0 entered promiscuous mode [ 144.952808][ T6499] loop3: detected capacity change from 0 to 512 [ 145.351515][ T6502] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.629'. [ 145.393467][ T6505] loop2: detected capacity change from 0 to 128 [ 145.397086][ T6505] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.447642][ T6505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.449544][ T6499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.632620][ T6515] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 145.820946][ T6518] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 145.862563][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.976362][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 146.404987][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 146.450802][ T6531] device syzkaller0 entered promiscuous mode [ 146.512704][ T6533] loop2: detected capacity change from 0 to 128 [ 146.528601][ T6533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.565949][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 146.597805][ T6536] device syzkaller0 entered promiscuous mode [ 146.662242][ T6538] binder: 6537:6538 ioctl 4018620d 0 returned -22 [ 146.663816][ T6538] binder: 6537:6538 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 146.666562][ T6538] binder: 6537:6538 got transaction to invalid handle, 1 [ 146.667959][ T6538] binder: 6538:6537 cannot find target node [ 146.669079][ T6538] binder: 6537:6538 transaction async to 0:0 failed 13/29201/-22, size 0-0 line 3045 [ 146.672218][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.411967][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 149.413733][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.287632][ T6562] loop3: detected capacity change from 0 to 8 [ 150.527788][ T6570] binder: BINDER_SET_CONTEXT_MGR already set [ 150.529900][ T6570] binder: 6568:6570 ioctl 4018620d 20000300 returned -16 [ 150.552195][ T6567] device syzkaller0 entered promiscuous mode [ 150.553870][ T6570] binder: 6568:6570 got transaction to invalid handle, 1 [ 150.555143][ T6570] binder: 6570:6568 cannot find target node [ 150.564053][ T6570] binder: 6568:6570 transaction async to 0:0 failed 15/29201/-22, size 0-0 line 3045 [ 150.569891][ T4413] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.023139][ T6582] fuse: Unknown parameter 'ext4' [ 151.028828][ T6584] loop4: detected capacity change from 0 to 128 [ 151.056092][ T6584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.139064][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 152.826334][ T6615] device syzkaller0 entered promiscuous mode [ 152.975009][ T6622] loop1: detected capacity change from 0 to 1024 [ 153.016492][ T6622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.387523][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 153.474571][ T6641] device syzkaller0 entered promiscuous mode [ 153.554509][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 154.721642][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 154.722713][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 154.723692][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 154.724679][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 154.725726][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 155.097455][ T6665] device syzkaller0 entered promiscuous mode [ 155.236533][ T6668] device syzkaller0 entered promiscuous mode [ 155.401025][ T6673] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 155.656007][ T6678] loop3: detected capacity change from 0 to 1024 [ 155.658209][ T6678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.685167][ T6678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.695972][ T6678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.711052][ T6678] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 155.716375][ T6678] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.716375][ T6678] [ 155.719065][ T6678] EXT4-fs (loop3): Total free blocks count 0 [ 155.724420][ T6678] EXT4-fs (loop3): Free/Dirty block details [ 155.726557][ T6678] EXT4-fs (loop3): free_blocks=20480 [ 155.727441][ T6678] EXT4-fs (loop3): dirty_blocks=80 [ 155.736928][ T6678] EXT4-fs (loop3): Block reservation details [ 155.739095][ T6678] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 155.782542][ T6678] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 156.877445][ T6705] loop2: detected capacity change from 0 to 512 [ 156.971512][ T6705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.987844][ T6705] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 157.135107][ T6715] ================================================================== [ 157.136598][ T6715] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x210/0x214 [ 157.138181][ T6715] Read of size 2 at addr ffff0000d9e76dfb by task syz.0.695/6715 [ 157.139542][ T6715] [ 157.139963][ T6715] CPU: 1 PID: 6715 Comm: syz.0.695 Not tainted syzkaller #0 [ 157.141189][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 157.142957][ T6715] Call trace: [ 157.143497][ T6715] dump_backtrace+0x1c4/0x1f0 [ 157.144316][ T6715] show_stack+0x2c/0x3c [ 157.145049][ T6715] __dump_stack+0x30/0x40 [ 157.145794][ T6715] dump_stack_lvl+0xf4/0x15c [ 157.146584][ T6715] print_address_description+0x88/0x218 [ 157.147641][ T6715] print_report+0x50/0x68 [ 157.148413][ T6715] kasan_report+0xa8/0xfc [ 157.149191][ T6715] __asan_report_load2_noabort+0x2c/0x38 [ 157.150156][ T6715] ieee80211_monitor_select_queue+0x210/0x214 [ 157.151298][ T6715] netdev_core_pick_tx+0x130/0x320 [ 157.152197][ T6715] __dev_queue_xmit+0x730/0x3154 [ 157.153088][ T6715] dev_queue_xmit+0x24/0x34 [ 157.153882][ T6715] packet_sendmsg+0x3034/0x40ac [ 157.154793][ T6715] ____sys_sendmsg+0x588/0x90c [ 157.155706][ T6715] __sys_sendmsg+0x288/0x374 [ 157.156588][ T6715] __arm64_sys_sendmsg+0x80/0x94 [ 157.157500][ T6715] invoke_syscall+0x98/0x290 [ 157.158349][ T6715] el0_svc_common+0x13c/0x258 [ 157.159158][ T6715] do_el0_svc+0x5c/0x134 [ 157.159874][ T6715] el0_svc+0x58/0x128 [ 157.160575][ T6715] el0t_64_sync_handler+0x84/0xf0 [ 157.161514][ T6715] el0t_64_sync+0x18c/0x190 [ 157.162317][ T6715] [ 157.162711][ T6715] Allocated by task 4342: [ 157.163443][ T6715] kasan_set_track+0x4c/0x80 [ 157.164237][ T6715] kasan_save_alloc_info+0x24/0x30 [ 157.165043][ T6715] __kasan_kmalloc+0xa0/0xb8 [ 157.165858][ T6715] kmalloc_trace+0x7c/0x94 [ 157.166556][ T6715] macvlan_common_newlink+0x410/0x1374 [ 157.167466][ T6715] macvtap_newlink+0x15c/0x1dc [ 157.168255][ T6715] rtnl_newlink+0x10b4/0x1af0 [ 157.169051][ T6715] rtnetlink_rcv_msg+0x694/0xcc4 [ 157.169873][ T6715] netlink_rcv_skb+0x220/0x3ec [ 157.170654][ T6715] rtnetlink_rcv+0x28/0x38 [ 157.171380][ T6715] netlink_unicast+0x5fc/0x80c [ 157.172172][ T6715] netlink_sendmsg+0x6f0/0x9d8 [ 157.173017][ T6715] __sys_sendto+0x324/0x440 [ 157.173780][ T6715] __arm64_sys_sendto+0xe4/0x104 [ 157.174592][ T6715] invoke_syscall+0x98/0x290 [ 157.175356][ T6715] el0_svc_common+0x13c/0x258 [ 157.176143][ T6715] do_el0_svc+0x5c/0x134 [ 157.176846][ T6715] el0_svc+0x58/0x128 [ 157.177576][ T6715] el0t_64_sync_handler+0x84/0xf0 [ 157.178424][ T6715] el0t_64_sync+0x18c/0x190 [ 157.179218][ T6715] [ 157.179620][ T6715] Last potentially related work creation: [ 157.180560][ T6715] kasan_save_stack+0x40/0x70 [ 157.181363][ T6715] __kasan_record_aux_stack+0xc0/0xdc [ 157.182255][ T6715] kasan_record_aux_stack_noalloc+0x14/0x20 [ 157.183194][ T6715] insert_work+0x64/0x37c [ 157.183908][ T6715] __queue_work+0xd00/0x1280 [ 157.184679][ T6715] queue_work_on+0xc0/0x164 [ 157.185444][ T6715] macvlan_handle_frame+0xb44/0xeb8 [ 157.186358][ T6715] __netif_receive_skb_core+0xd34/0x31a0 [ 157.187311][ T6715] __netif_receive_skb+0x78/0x2b0 [ 157.188172][ T6715] process_backlog+0x42c/0x748 [ 157.188914][ T6715] __napi_poll+0xb8/0x3f4 [ 157.189672][ T6715] net_rx_action+0x52c/0xb5c [ 157.190496][ T6715] handle_softirqs+0x318/0xc90 [ 157.191277][ T6715] run_ksoftirqd+0x7c/0x2ac [ 157.192114][ T6715] smpboot_thread_fn+0x4e8/0x960 [ 157.193030][ T6715] kthread+0x254/0x2e0 [ 157.193725][ T6715] ret_from_fork+0x10/0x20 [ 157.194400][ T6715] [ 157.194785][ T6715] Second to last potentially related work creation: [ 157.195916][ T6715] kasan_save_stack+0x40/0x70 [ 157.196705][ T6715] __kasan_record_aux_stack+0xc0/0xdc [ 157.197541][ T6715] kasan_record_aux_stack_noalloc+0x14/0x20 [ 157.198502][ T6715] insert_work+0x64/0x37c [ 157.199213][ T6715] __queue_work+0xd00/0x1280 [ 157.199993][ T6715] queue_work_on+0xc0/0x164 [ 157.200760][ T6715] macvlan_handle_frame+0xb44/0xeb8 [ 157.201638][ T6715] __netif_receive_skb_core+0xd34/0x31a0 [ 157.202584][ T6715] __netif_receive_skb+0x78/0x2b0 [ 157.203397][ T6715] process_backlog+0x42c/0x748 [ 157.204174][ T6715] __napi_poll+0xb8/0x3f4 [ 157.204876][ T6715] net_rx_action+0x52c/0xb5c [ 157.205688][ T6715] handle_softirqs+0x318/0xc90 [ 157.206520][ T6715] run_ksoftirqd+0x7c/0x2ac [ 157.207230][ T6715] smpboot_thread_fn+0x4e8/0x960 [ 157.208089][ T6715] kthread+0x254/0x2e0 [ 157.208756][ T6715] ret_from_fork+0x10/0x20 [ 157.209529][ T6715] [ 157.209916][ T6715] The buggy address belongs to the object at ffff0000d9e74000 [ 157.209916][ T6715] which belongs to the cache kmalloc-8k of size 8192 [ 157.212277][ T6715] The buggy address is located 3579 bytes to the right of [ 157.212277][ T6715] 8192-byte region [ffff0000d9e74000, ffff0000d9e76000) [ 157.214666][ T6715] [ 157.215041][ T6715] The buggy address belongs to the physical page: [ 157.216136][ T6715] page:00000000aef1c7b9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119e70 [ 157.217863][ T6715] head:00000000aef1c7b9 order:3 compound_mapcount:0 compound_pincount:0 [ 157.219265][ T6715] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 157.220732][ T6715] raw: 05ffc00000010200 fffffc0003ddfa00 dead000000000004 ffff0000c0002c00 [ 157.222287][ T6715] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 157.223840][ T6715] page dumped because: kasan: bad access detected [ 157.224870][ T6715] [ 157.225267][ T6715] Memory state around the buggy address: [ 157.226213][ T6715] ffff0000d9e76c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.227596][ T6715] ffff0000d9e76d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.228971][ T6715] >ffff0000d9e76d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.230255][ T6715] ^ [ 157.231642][ T6715] ffff0000d9e76e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.233007][ T6715] ffff0000d9e76e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.234322][ T6715] ================================================================== [ 157.235774][ T6715] Disabling lock debugging due to kernel taint [ 157.247992][ T4339] EXT4-fs (loop2): unmounting filesystem.