last executing test programs: 8.007663229s ago: executing program 2 (id=1226): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fstatfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 7.201688725s ago: executing program 2 (id=1228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003b00)=@delchain={0x6c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 7.069672955s ago: executing program 2 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00180800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 6.021326701s ago: executing program 2 (id=1232): socket$inet(0x2, 0xa, 0x200) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000000000200000000080000000000000e0300000000000000000000000000000b01000000000000000000000061"], 0x0, 0x4a}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x826004, 0x0, 0x5, 0x0, &(0x7f0000000000)) 5.968697165s ago: executing program 4 (id=1233): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000000201005) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x208e24b) 4.511886994s ago: executing program 4 (id=1235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.322506369s ago: executing program 0 (id=1237): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000010000000850000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.142990774s ago: executing program 1 (id=1238): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fstatfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 4.080066239s ago: executing program 0 (id=1239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003b00)=@delchain={0x6c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.005217055s ago: executing program 0 (id=1240): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) 3.808557481s ago: executing program 3 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00180800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3.261042215s ago: executing program 0 (id=1243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a40)=@delchain={0x1400, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1380, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0x518, 0x6, [@m_sample={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x25, 0x6, "4453215fe7d3ed1a5cfc209beb521637afb8a2f41b0066cb72cd8daa1b4583dfa8"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d62413a6dc0d74cb84e5c9b384f0f4a3"}]}, {0x91, 0x6, "73ddd55ebd851d2bc2a80464fe930bcd671b9b5ec0f728ce92db7f5a3c71a82c30a0d8cd97ebbd39edfb3d25e331a3ef5c2919793122724b74293352f8e68d6a9c929e0075773666937c17b164290875848c2b08a9b2d3c3415ee488ef65c26e09fae090eb1b6977cb4e6373be8ed738822afcae7710da8185d9b2a95122ff2c52db06756feffda720b6864ed2"}, {0xc}, {0xc}}}, @m_ct={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev}, @TCA_CT_ZONE={0x6}, @TCA_CT_ZONE={0x6}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "0f6987aead6b7e73b09cef7cda402930"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "792c762a11d2c461f4a9907caa538368"}]}, {0xf9, 0x6, "6caf8b6a5f815b199b0107623311a95c1065acaf53b199de9a0fb591e79e1a5d0e1e1958c4ca5c625f9f949943ab2679f4a95b0c930195be0a94e9d7d3f8b233bd12b98a1ddd7158d928fcb86ad36cf29cff5fd824e0c9f7655319e7cc2e6c701db2055338365c4cca947572844083aa102582ca1499a1cab248f224e08c1803bfff0c533c5f942b460267ebaf5e2583351575f57b4df29e8245c4643dbe0dc4dbed01bc175c77e062821eaff9d6f685030b5e2535c82737e9ac6d1969940c63e75087a181dd2473b81506c4de041b304517d82824f6830f152ddc3c1b01b5705ece020e899d370c775398001bc6760faab5e47908"}, {0xc}, {0xc}}}, @m_mpls={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c}]}, {0x9d, 0x6, "abdb7c777d8de38bbf8a91d9bd13426d3437d82d87377422ce29f813f135c20c5d759313ae815a39a098ad24057c5eead9e8a7b357ef64923caa40af784ef5e6a8bdc78520453d7bc2070eca4046e1b1b5b0e93451dd1e909a56eed438c1f9269b8981113312726b0c04998e3bfa57bff112de79b4eb45d5cd93563b680ba8571675c4cf3df82f4920db1f6e9f6c3cb7232dfad55378d0e644"}, {0xc}, {0xc}}}, @m_pedit={0xdc, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0xad, 0x6, "bed59f6df42ded27f775db18fe27eacc81ad7d76608f5fda24098e4bd645b82068ebb66cf1587ece54e4ef95c95b832fef9929a1281d1d7b04a041af05f597a5a6db50523750d39edcce5055366e52a70dc7832845b0a94d9e1baf760c414ea6b4cdb893d245f8410ff62a749a47a9294a3b4c18398fa231177445cd360fb50f33ef3e2f87ee2f34a0a832664e5b85137c565815e77393d8bdb9b6b37ee103a93000483c08f9be3974"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ife={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x2b, 0x6, "304530e2049d030516e6b6a87888850c6698f96161a861acc41200ac626439f0f30f52067244e4"}, {0xc}, {0xc}}}]}]}}]}, 0x1400}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.123903647s ago: executing program 1 (id=1244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2f8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x18c, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x130, 0x9, 0x0, 0x1, [@m_tunnel_key={0xfc, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xc1, 0x6, "212075267d41096a1fc15134f9432bf5efcef3b1c2cf335a49b348db76559712ce3e56101d72f227b3bd8773ac113f0e895520d3977ac8f9144d499f442ddf219eb51723c93eaa393fac86b837bbb646a14cf1062661010aa85f1efadd83b1e2c37725087b457f00869497c21354573275e08da73d9b111081f460a5b8c1cd7e72264d66bb3ff4740545b16112ce5dcb26f1b1383bb63da56963d7a787789125104d8f5ad3de2eef5b8ab9fbe6b033faf8deb6562c7d34ca92fa0aaea1"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0xf0, 0x2, [@TCA_ROUTE4_ACT={0xec, 0x6, [@m_sample={0xe8, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x89, 0x6, "845cd14d6348c08dbdb762af165861ac63450de3ca8bd1f96b5b407bdcb4fdced35852772201c97fc343450c2b56a0286066f66cd86e88f15d935cf6c6e761e61290b542f1d1a21e525d65a90ed3284d57b3308b8f5f59a6f9b0f4137df97227a15c832aed55601b691a04e094a316684ac6dee2c597ea8298b1834235773f275c9b2653bc"}, {0xc}, {0xc}}}]}]}}]}, 0x2f8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.994943597s ago: executing program 0 (id=1245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1dc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x18c, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x130, 0x9, 0x0, 0x1, [@m_tunnel_key={0xfc, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xc1, 0x6, "212075267d41096a1fc15134f9432bf5efcef3b1c2cf335a49b348db76559712ce3e56101d72f227b3bd8773ac113f0e895520d3977ac8f9144d499f442ddf219eb51723c93eaa393fac86b837bbb646a14cf1062661010aa85f1efadd83b1e2c37725087b457f00869497c21354573275e08da73d9b111081f460a5b8c1cd7e72264d66bb3ff4740545b16112ce5dcb26f1b1383bb63da56963d7a787789125104d8f5ad3de2eef5b8ab9fbe6b033faf8deb6562c7d34ca92fa0aaea1"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1dc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.968740779s ago: executing program 1 (id=1246): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x2007ffd) sendfile(r4, r5, 0x0, 0x1000000201005) 2.793081033s ago: executing program 0 (id=1247): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',usrquota,integrity,iocharset=iso8859-3,iocharset=cp949,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x60bd, &(0x7f0000006580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103a42, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001240)=ANY=[], 0x640) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 2.433559782s ago: executing program 3 (id=1248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 1.85182895s ago: executing program 4 (id=1249): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000010000000850000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.663161525s ago: executing program 3 (id=1250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003b00)=@delchain={0x6c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.662144875s ago: executing program 1 (id=1251): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003b00)=@delchain={0xe98, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0xe18, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x144, 0x6, [@m_ctinfo={0x98, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x62, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f"}, {0xc}, {0xc}}}, @m_nat={0x74, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x23, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe98}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x12c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.551623004s ago: executing program 4 (id=1252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.47989722s ago: executing program 3 (id=1253): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) 1.322990223s ago: executing program 3 (id=1254): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fstatfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.251682829s ago: executing program 1 (id=1255): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7ff, 0x121000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=@target={'target ', {'PCI:', '4', ':', '5', ':', '17', '.', '15'}}, 0x15) syz_genetlink_get_family_id$nl80211(0x0, r0) 1.179726824s ago: executing program 2 (id=1256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a40)=@delchain={0x1400, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1380, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0x518, 0x6, [@m_sample={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x25, 0x6, "4453215fe7d3ed1a5cfc209beb521637afb8a2f41b0066cb72cd8daa1b4583dfa8"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d62413a6dc0d74cb84e5c9b384f0f4a3"}]}, {0x91, 0x6, "73ddd55ebd851d2bc2a80464fe930bcd671b9b5ec0f728ce92db7f5a3c71a82c30a0d8cd97ebbd39edfb3d25e331a3ef5c2919793122724b74293352f8e68d6a9c929e0075773666937c17b164290875848c2b08a9b2d3c3415ee488ef65c26e09fae090eb1b6977cb4e6373be8ed738822afcae7710da8185d9b2a95122ff2c52db06756feffda720b6864ed2"}, {0xc}, {0xc}}}, @m_ct={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev}, @TCA_CT_ZONE={0x6}, @TCA_CT_ZONE={0x6}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "0f6987aead6b7e73b09cef7cda402930"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "792c762a11d2c461f4a9907caa538368"}]}, {0xf9, 0x6, "6caf8b6a5f815b199b0107623311a95c1065acaf53b199de9a0fb591e79e1a5d0e1e1958c4ca5c625f9f949943ab2679f4a95b0c930195be0a94e9d7d3f8b233bd12b98a1ddd7158d928fcb86ad36cf29cff5fd824e0c9f7655319e7cc2e6c701db2055338365c4cca947572844083aa102582ca1499a1cab248f224e08c1803bfff0c533c5f942b460267ebaf5e2583351575f57b4df29e8245c4643dbe0dc4dbed01bc175c77e062821eaff9d6f685030b5e2535c82737e9ac6d1969940c63e75087a181dd2473b81506c4de041b304517d82824f6830f152ddc3c1b01b5705ece020e899d370c775398001bc6760faab5e47908"}, {0xc}, {0xc}}}, @m_mpls={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c}]}, {0x9d, 0x6, "abdb7c777d8de38bbf8a91d9bd13426d3437d82d87377422ce29f813f135c20c5d759313ae815a39a098ad24057c5eead9e8a7b357ef64923caa40af784ef5e6a8bdc78520453d7bc2070eca4046e1b1b5b0e93451dd1e909a56eed438c1f9269b8981113312726b0c04998e3bfa57bff112de79b4eb45d5cd93563b680ba8571675c4cf3df82f4920db1f6e9f6c3cb7232dfad55378d0e644"}, {0xc}, {0xc}}}, @m_pedit={0xdc, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0xad, 0x6, "bed59f6df42ded27f775db18fe27eacc81ad7d76608f5fda24098e4bd645b82068ebb66cf1587ece54e4ef95c95b832fef9929a1281d1d7b04a041af05f597a5a6db50523750d39edcce5055366e52a70dc7832845b0a94d9e1baf760c414ea6b4cdb893d245f8410ff62a749a47a9294a3b4c18398fa231177445cd360fb50f33ef3e2f87ee2f34a0a832664e5b85137c565815e77393d8bdb9b6b37ee103a93000483c08f9be3974"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ife={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x2b, 0x6, "304530e2049d030516e6b6a87888850c6698f96161a861acc41200ac626439f0f30f52067244e4"}, {0xc}, {0xc}}}]}]}}]}, 0x1400}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.129160208s ago: executing program 4 (id=1257): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1dc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x18c, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x130, 0x9, 0x0, 0x1, [@m_tunnel_key={0xfc, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xc1, 0x6, "212075267d41096a1fc15134f9432bf5efcef3b1c2cf335a49b348db76559712ce3e56101d72f227b3bd8773ac113f0e895520d3977ac8f9144d499f442ddf219eb51723c93eaa393fac86b837bbb646a14cf1062661010aa85f1efadd83b1e2c37725087b457f00869497c21354573275e08da73d9b111081f460a5b8c1cd7e72264d66bb3ff4740545b16112ce5dcb26f1b1383bb63da56963d7a787789125104d8f5ad3de2eef5b8ab9fbe6b033faf8deb6562c7d34ca92fa0aaea1"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1dc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 103.854652ms ago: executing program 4 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00180800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 103.490612ms ago: executing program 3 (id=1259): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000200)=@abs={0x1}, 0x6e) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x2007ffd) sendfile(r4, r5, 0x0, 0x1000000201005) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) 97.688043ms ago: executing program 2 (id=1260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 0s ago: executing program 1 (id=1261): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x2007ffd) sendfile(r4, r5, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): evsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.181616][ T8039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.030660][ T3551] Bluetooth: hci3: command 0x1009 tx timeout [ 413.224164][ T8153] loop3: detected capacity change from 0 to 2048 [ 413.244853][ T4902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.296416][ T4902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.310213][ T8153] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 413.328347][ T4637] Bluetooth: hci7: command 0x0409 tx timeout [ 413.369460][ T8153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.384659][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 413.406336][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.425958][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.433408][ T26] audit: type=1800 audit(1720610260.429:223): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.905" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 413.534273][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.595878][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 413.943950][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.998236][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.006450][ T8138] device bridge_slave_0 entered promiscuous mode [ 414.086545][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.114528][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.148621][ T8138] device bridge_slave_1 entered promiscuous mode [ 414.249622][ T8169] loop3: detected capacity change from 0 to 512 [ 414.259431][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.280964][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.421784][ T8169] EXT4-fs (loop3): 1 orphan inode deleted [ 414.427564][ T8169] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 414.430516][ T8138] team0: Port device team_slave_0 added [ 414.492002][ T8169] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff) [ 414.500562][ T8138] team0: Port device team_slave_1 added [ 414.655935][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.677914][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.747918][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.780325][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.787301][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.886772][ T8165] loop2: detected capacity change from 0 to 40427 [ 414.893485][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.994690][ T8165] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 415.015243][ T8138] device hsr_slave_0 entered promiscuous mode [ 415.048963][ T8165] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 415.059801][ T8138] device hsr_slave_1 entered promiscuous mode [ 415.068867][ T8138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.076442][ T8138] Cannot create hsr debugfs directory [ 415.103664][ T8165] F2FS-fs (loop2): invalid crc value [ 415.167663][ T8165] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.304633][ T8165] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 415.331794][ T8165] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 415.360282][ T26] audit: type=1804 audit(1720610262.369:224): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.908" name="/newroot/41/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 415.444483][ T8138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.462046][ T7616] Bluetooth: hci7: command 0x041b tx timeout [ 416.437659][ T8138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.549482][ T8138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.728698][ T8138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.972976][ T8138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 417.050721][ T8138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 417.094377][ T8138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.133560][ T8138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.283101][ T5492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.488492][ T4637] Bluetooth: hci7: command 0x040f tx timeout [ 417.502281][ T5492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.577072][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.633376][ T5492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.717550][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.726500][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.771151][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.817252][ T5492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.838507][ T8191] loop3: detected capacity change from 0 to 1024 [ 417.869889][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.888622][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.911617][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.918802][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.968806][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.978434][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.987585][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.996311][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.003455][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.011878][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.020851][ T8191] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 418.028667][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.049506][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.059730][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.080069][ T26] audit: type=1800 audit(1720610265.089:225): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 418.252498][ T26] audit: type=1800 audit(1720610265.089:226): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 418.276564][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.287725][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.297146][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.306547][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.323901][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.335230][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.386916][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.421337][ T8183] loop2: detected capacity change from 0 to 40427 [ 418.519236][ T8183] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 418.526922][ T8183] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 418.676329][ T8183] F2FS-fs (loop2): invalid crc value [ 418.754654][ T8183] F2FS-fs (loop2): Found nat_bits in checkpoint [ 418.842630][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 419.013626][ T8183] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 419.036755][ T8183] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 419.092667][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.118724][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.131087][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.248177][ T4637] Bluetooth: hci3: command 0x0409 tx timeout [ 419.986044][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.058722][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.122976][ T8185] device bridge_slave_0 entered promiscuous mode [ 420.179186][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.183689][ T7616] Bluetooth: hci7: command 0x0419 tx timeout [ 420.229040][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.237433][ T8185] device bridge_slave_1 entered promiscuous mode [ 420.482619][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.512401][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.636251][ T8185] team0: Port device team_slave_0 added [ 420.709885][ T8185] team0: Port device team_slave_1 added [ 420.823026][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.842777][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.921339][ T8243] loop2: detected capacity change from 0 to 16 [ 420.977640][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.024358][ T8243] erofs: (device loop2): mounted with root inode @ nid 36. [ 421.058965][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.068887][ T8243] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 421.088627][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.109243][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.116232][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.143816][ T8243] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 421.192669][ T8243] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 421.222372][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.328494][ T4637] Bluetooth: hci3: command 0x041b tx timeout [ 421.373122][ T8138] device veth0_vlan entered promiscuous mode [ 421.399221][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.418556][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.486986][ T8138] device veth1_vlan entered promiscuous mode [ 421.515568][ T8251] device pim6reg1 entered promiscuous mode [ 421.523210][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.530968][ T3552] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 421.548789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.578691][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.601215][ T8185] device hsr_slave_0 entered promiscuous mode [ 421.625565][ T8185] device hsr_slave_1 entered promiscuous mode [ 421.650718][ T8185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.670498][ T8185] Cannot create hsr debugfs directory [ 421.809661][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.826214][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.845933][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.872616][ T8138] device veth0_macvtap entered promiscuous mode [ 421.908858][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.929123][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 421.948274][ T3552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 421.967959][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 422.018181][ T3552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 422.157160][ T5492] device hsr_slave_0 left promiscuous mode [ 422.177522][ T5492] device hsr_slave_1 left promiscuous mode [ 422.197897][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.230228][ T3552] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 422.277899][ T3552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.310393][ T3552] usb 3-1: Product: syz [ 422.423402][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.437105][ T3552] usb 3-1: Manufacturer: syz [ 422.456746][ T3552] usb 3-1: SerialNumber: syz [ 422.510364][ T3552] usb 3-1: config 0 descriptor?? [ 422.546699][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.565041][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.579950][ T3552] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 422.628164][ T5492] device bridge_slave_1 left promiscuous mode [ 422.664701][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.673597][ T5492] device bridge_slave_0 left promiscuous mode [ 422.680716][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.704480][ T5492] device veth1_macvtap left promiscuous mode [ 422.738146][ T5492] device veth0_macvtap left promiscuous mode [ 422.744283][ T5492] device veth1_vlan left promiscuous mode [ 422.797979][ T5492] device veth0_vlan left promiscuous mode [ 423.345588][ T8270] loop3: detected capacity change from 0 to 40427 [ 423.392048][ T8270] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 423.408223][ T4635] Bluetooth: hci3: command 0x040f tx timeout [ 423.418186][ T8270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 423.435842][ T8270] F2FS-fs (loop3): invalid crc value [ 423.462652][ T8270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 423.492084][ T5492] team0 (unregistering): Port device team_slave_1 removed [ 423.548673][ T5492] team0 (unregistering): Port device team_slave_0 removed [ 423.581416][ T5492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.593094][ T8270] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 423.617753][ T8270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 423.625945][ T5492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.670132][ T5492] bond0 (unregistering): Released all slaves [ 424.841111][ T8138] device veth1_macvtap entered promiscuous mode [ 424.946637][ T3552] scsi host1: usb-storage 3-1:0.0 [ 424.968525][ T3552] usb 3-1: USB disconnect, device number 12 [ 425.004882][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.047896][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.057754][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.127962][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.199505][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.250793][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.278001][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.298555][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.347322][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.394487][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.421178][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.477262][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.508730][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.533508][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.565190][ T3551] Bluetooth: hci3: command 0x0419 tx timeout [ 425.576760][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.627455][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.657947][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.707924][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.758078][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.797999][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.837933][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.847788][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.877940][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.903183][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.997314][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.019893][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.048605][ T8138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.070433][ T8138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.087967][ T8138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.096700][ T8138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.485030][ T8319] loop3: detected capacity change from 0 to 512 [ 426.583272][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.618128][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.631272][ T8319] EXT4-fs (loop3): 1 orphan inode deleted [ 426.637050][ T8319] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 426.688436][ T8319] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 427.012748][ T26] audit: type=1804 audit(1720610274.019:227): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.929" name="/newroot/50/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 427.093712][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.129079][ T26] audit: type=1804 audit(1720610274.049:228): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.929" name="/newroot/50/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 427.593800][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.664609][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.736286][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.751594][ T8339] loop3: detected capacity change from 0 to 256 [ 427.829113][ T8339] FAT-fs (loop3): Unrecognized mount option "uni_xlate=1shortname=winnt" or missing value [ 427.853587][ T8185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.863938][ T8313] loop2: detected capacity change from 0 to 40427 [ 427.898068][ T8185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.936458][ T8313] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 428.012452][ T8313] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 428.088497][ T8185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.099424][ T8313] F2FS-fs (loop2): invalid crc value [ 428.480364][ T8313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 428.936943][ T8339] loop3: detected capacity change from 0 to 8192 [ 428.988128][ T8185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.065288][ T8339] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "hashed_relocationacl" for option "block-allocator" [ 429.065288][ T8339] [ 429.354445][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.464677][ T8185] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.538319][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.546711][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.609468][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.638576][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.679281][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.686403][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.757449][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.798763][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.807266][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.814415][ T4633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.878026][ T8370] loop2: detected capacity change from 0 to 16 [ 429.888435][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.978861][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.990155][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.021889][ T8370] erofs: (device loop2): mounted with root inode @ nid 36. [ 430.050095][ T8370] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 430.063282][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.079840][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.098347][ T8370] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 430.153629][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.173785][ T8370] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 430.194235][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.247545][ T8185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.339336][ T8185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.411264][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.436961][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.482245][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.521840][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.561757][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.610375][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.673584][ T8370] device pim6reg1 entered promiscuous mode [ 431.575466][ T7616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 431.818143][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 431.878765][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.886749][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.908169][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.948193][ T7616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 431.970581][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.978046][ T7616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 432.001647][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.040494][ T8402] loop3: detected capacity change from 0 to 2048 [ 432.044305][ T7616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 432.070075][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.079096][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.087996][ T7616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 432.102404][ T8185] device veth0_vlan entered promiscuous mode [ 432.111988][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.153254][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.178772][ T8402] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 432.203052][ T8185] device veth1_vlan entered promiscuous mode [ 432.241973][ T8402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.278119][ T7616] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 432.290870][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.299899][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.327948][ T7616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.330093][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.351687][ T26] audit: type=1800 audit(1720610279.359:229): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.940" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 432.386518][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.416574][ T7616] usb 3-1: Product: syz [ 432.421334][ T7616] usb 3-1: Manufacturer: syz [ 432.425981][ T7616] usb 3-1: SerialNumber: syz [ 432.430295][ T8185] device veth0_macvtap entered promiscuous mode [ 432.440800][ T8185] device veth1_macvtap entered promiscuous mode [ 432.492742][ T7616] usb 3-1: config 0 descriptor?? [ 432.541147][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.549217][ T7616] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 432.577856][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.620366][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.677980][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.728085][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.808554][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.867931][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.897170][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.937913][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.976967][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.995768][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.048029][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.068921][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.150032][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.167231][ T7616] scsi host1: usb-storage 3-1:0.0 [ 433.168115][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.213722][ T7616] usb 3-1: USB disconnect, device number 13 [ 433.221535][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.267605][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.745653][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.818100][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.949997][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.004808][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.014845][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.025767][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.035649][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.046128][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.058234][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.114360][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.286609][ T8185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.569710][ T8185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.708681][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.839534][ T8185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.909926][ T8185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.116171][ T8185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.466056][ T8185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.721437][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.753716][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.032696][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.075686][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.153201][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.207148][ T481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.248070][ T481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.353627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.179263][ T3551] Bluetooth: hci4: command 0x1003 tx timeout [ 437.268150][ T3521] Bluetooth: hci4: sending frame failed (-49) [ 437.363605][ T8482] loop3: detected capacity change from 0 to 1024 [ 437.436409][ T8482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.018816][ T8496] loop1: detected capacity change from 0 to 16 [ 438.095608][ T8496] erofs: (device loop1): mounted with root inode @ nid 36. [ 438.124197][ T8496] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 438.189917][ T8496] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 438.344342][ T8496] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 439.789844][ T4637] Bluetooth: hci4: command 0x1001 tx timeout [ 439.797438][ T3521] Bluetooth: hci4: sending frame failed (-49) [ 439.847965][ T3551] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 439.969941][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.976418][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.208226][ T3551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 440.237873][ T3551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 440.274798][ T8531] loop3: detected capacity change from 0 to 8192 [ 440.277994][ T3551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 440.317881][ T3551] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 440.425958][ T8531] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 440.497618][ T8531] REISERFS (device loop3): using ordered data mode [ 440.509667][ T8531] reiserfs: using flush barriers [ 440.518031][ T3551] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 440.526758][ T8531] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 440.527086][ T3551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.551412][ T3551] usb 2-1: Product: syz [ 440.555594][ T3551] usb 2-1: Manufacturer: syz [ 440.560305][ T3551] usb 2-1: SerialNumber: syz [ 440.567447][ T3551] usb 2-1: config 0 descriptor?? [ 440.573666][ T8531] REISERFS (device loop3): checking transaction log (loop3) [ 440.610186][ T3551] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 440.733675][ T8531] REISERFS (device loop3): Using tea hash to sort names [ 440.782145][ T8531] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 440.888127][ T3551] scsi host1: usb-storage 2-1:0.0 [ 440.915176][ T3551] usb 2-1: USB disconnect, device number 9 [ 442.448770][ T4633] Bluetooth: hci4: command 0x1009 tx timeout [ 442.844749][ T8573] loop2: detected capacity change from 0 to 1024 [ 443.223202][ T8573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.911624][ T8571] loop1: detected capacity change from 0 to 512 [ 444.266236][ T8571] EXT4-fs (loop1): 1 orphan inode deleted [ 444.299242][ T8571] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 444.428044][ T8571] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 444.493869][ T8587] loop3: detected capacity change from 0 to 2048 [ 444.691237][ T8587] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 444.805608][ T26] audit: type=1804 audit(1720610291.779:230): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.968" name="/newroot/5/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 444.846965][ T8587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.055423][ T26] audit: type=1804 audit(1720610291.799:231): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.968" name="/newroot/5/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 445.247911][ T26] audit: type=1800 audit(1720610292.049:232): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.971" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 445.679445][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 445.691311][ T8602] loop3: detected capacity change from 0 to 16 [ 445.872634][ T8602] erofs: (device loop3): mounted with root inode @ nid 36. [ 445.909586][ T8602] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 445.979057][ T8602] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 446.017652][ T8602] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 446.538076][ T21] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 446.609880][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.616977][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.656023][ T8589] device bridge_slave_0 entered promiscuous mode [ 446.938286][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 446.978056][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 447.007917][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 447.041625][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 447.089058][ T4519] Bluetooth: hci8: command 0x0409 tx timeout [ 447.098875][ T5525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.258873][ T21] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 447.309279][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.333462][ T21] usb 4-1: Product: syz [ 447.337672][ T21] usb 4-1: Manufacturer: syz [ 447.353719][ T21] usb 4-1: SerialNumber: syz [ 448.230291][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.237398][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.245823][ T21] usb 4-1: config 0 descriptor?? [ 448.252966][ T8589] device bridge_slave_1 entered promiscuous mode [ 448.290429][ T21] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 448.331627][ T5525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.452191][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.472621][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.558611][ T5525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.620807][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 448.758272][ T5525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.858602][ T21] scsi host1: usb-storage 4-1:0.0 [ 448.878010][ T21] usb 4-1: USB disconnect, device number 22 [ 448.886169][ T8589] team0: Port device team_slave_0 added [ 448.937395][ T8589] team0: Port device team_slave_1 added [ 448.962615][ T8629] loop1: detected capacity change from 0 to 512 [ 449.116390][ T8629] EXT4-fs (loop1): 1 orphan inode deleted [ 449.165481][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.168132][ T4953] Bluetooth: hci8: command 0x041b tx timeout [ 449.180039][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.219215][ T8629] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 449.316742][ T8629] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 449.337916][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.354416][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.379565][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.510130][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.740673][ T26] audit: type=1804 audit(1720610296.729:233): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.979" name="/newroot/7/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 449.780659][ T8645] loop3: detected capacity change from 0 to 512 [ 449.854004][ T26] audit: type=1804 audit(1720610296.739:234): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.979" name="/newroot/7/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 449.875447][ T4637] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 449.941967][ T8645] EXT4-fs (loop3): 1 orphan inode deleted [ 449.967313][ T8645] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 450.120595][ T8645] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038 (0x7fffffff) [ 450.257435][ T8589] device hsr_slave_0 entered promiscuous mode [ 450.264543][ T8589] device hsr_slave_1 entered promiscuous mode [ 450.288092][ T4637] usb 3-1: Using ep0 maxpacket: 8 [ 450.420130][ T4637] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 450.443221][ T26] audit: type=1804 audit(1720610297.449:235): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.983" name="/newroot/67/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 450.486051][ T4637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.522021][ T4637] usb 3-1: config 0 descriptor?? [ 450.547547][ T26] audit: type=1804 audit(1720610297.489:236): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.983" name="/newroot/67/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 450.611432][ T8655] loop1: detected capacity change from 0 to 1024 [ 450.820164][ T8655] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 451.019282][ T26] audit: type=1800 audit(1720610298.029:237): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.985" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 451.100131][ T26] audit: type=1800 audit(1720610298.029:238): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.985" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 451.248075][ T7616] Bluetooth: hci8: command 0x040f tx timeout [ 452.758030][ T4637] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 452.785281][ T4637] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 452.837013][ T4637] asix: probe of 3-1:0.0 failed with error -71 [ 452.883139][ T4637] usb 3-1: USB disconnect, device number 14 [ 453.078723][ T8589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.128803][ T8688] loop3: detected capacity change from 0 to 16 [ 453.142653][ T8589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.245988][ T8589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.266965][ T8688] erofs: (device loop3): mounted with root inode @ nid 36. [ 453.308852][ T8589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.327964][ T7616] Bluetooth: hci8: command 0x0419 tx timeout [ 453.349169][ T8688] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 453.644833][ T8688] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 454.156826][ T8688] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 454.453632][ T8709] loop3: detected capacity change from 0 to 512 [ 454.494734][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.622219][ T5525] device hsr_slave_0 left promiscuous mode [ 454.622592][ T8709] EXT4-fs (loop3): 1 orphan inode deleted [ 454.634302][ T5525] device hsr_slave_1 left promiscuous mode [ 454.648872][ T5525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.656410][ T5525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.676130][ T5525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.686210][ T8709] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 454.739253][ T5525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.778860][ T5525] device bridge_slave_1 left promiscuous mode [ 454.788347][ T8709] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 454.823558][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.872145][ T5525] device bridge_slave_0 left promiscuous mode [ 454.903624][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.972357][ T5525] device veth1_macvtap left promiscuous mode [ 454.992034][ T5525] device veth0_macvtap left promiscuous mode [ 455.026130][ T5525] device veth1_vlan left promiscuous mode [ 455.061695][ T5525] device veth0_vlan left promiscuous mode [ 455.127371][ T26] audit: type=1804 audit(1720610302.129:239): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.994" name="/newroot/73/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 455.236692][ T8726] loop1: detected capacity change from 0 to 512 [ 455.250368][ T26] audit: type=1804 audit(1720610302.169:240): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.994" name="/newroot/73/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 455.392033][ T8726] EXT4-fs (loop1): 1 orphan inode deleted [ 455.413385][ T8726] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 455.531486][ T8726] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 455.578564][ T8730] loop3: detected capacity change from 0 to 764 [ 455.852320][ T26] audit: type=1804 audit(1720610302.839:241): pid=8731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.996" name="/newroot/11/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 455.887306][ T26] audit: type=1804 audit(1720610302.849:242): pid=8731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.996" name="/newroot/11/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 457.059821][ T5525] team0 (unregistering): Port device team_slave_1 removed [ 457.134465][ T5525] team0 (unregistering): Port device team_slave_0 removed [ 457.190493][ T5525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.246276][ T5525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.536108][ T5525] bond0 (unregistering): Released all slaves [ 457.667388][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.678324][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.705972][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.770913][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.788672][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.815260][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.822462][ T4637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.838675][ T8743] loop2: detected capacity change from 0 to 1024 [ 457.908153][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.917709][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.921547][ T8737] loop3: detected capacity change from 0 to 40427 [ 457.949722][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.979378][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.986487][ T4953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.020507][ T8743] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 458.028663][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.048965][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.087571][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.099005][ T8737] F2FS-fs (loop3): Found nat_bits in checkpoint [ 458.126920][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.204449][ T26] audit: type=1800 audit(1720610305.209:243): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1001" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 458.231589][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.261185][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.317313][ T26] audit: type=1800 audit(1720610305.209:244): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1001" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 458.349998][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.408519][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.437301][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.478299][ T8737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 458.511447][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.578762][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.613669][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.906944][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 459.111882][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.129587][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.163689][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.355002][ T8763] loop3: detected capacity change from 0 to 16 [ 459.487129][ T8763] erofs: (device loop3): mounted with root inode @ nid 36. [ 459.507382][ T8763] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 459.557452][ T8763] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 459.633763][ T8767] device pim6reg1 entered promiscuous mode [ 459.664846][ T8763] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 459.821445][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.867710][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.948070][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 459.967099][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.003772][ T8589] device veth0_vlan entered promiscuous mode [ 460.010189][ T4953] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 460.032474][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.051345][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.078439][ T8589] device veth1_vlan entered promiscuous mode [ 460.166746][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.180826][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.217629][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.255221][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.437359][ T8589] device veth0_macvtap entered promiscuous mode [ 460.464292][ T8589] device veth1_macvtap entered promiscuous mode [ 460.501515][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.513267][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.549109][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 460.590645][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.611206][ T4953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 460.684788][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.701117][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 460.776796][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.801288][ T4953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 460.981065][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.318067][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.328178][ T4953] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 461.337641][ T4953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.347853][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.357694][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.386734][ T4953] usb 4-1: Product: syz [ 461.389212][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.400844][ T4953] usb 4-1: Manufacturer: syz [ 461.400867][ T4953] usb 4-1: SerialNumber: syz [ 461.403882][ T4953] usb 4-1: config 0 descriptor?? [ 461.468105][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.489891][ T4953] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 461.498404][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.547128][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.590485][ T8780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.598323][ T8780] IPv6: NLM_F_CREATE should be set when creating new route [ 461.691280][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.711367][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.731496][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.740096][ T8782] loop1: detected capacity change from 0 to 8192 [ 461.744652][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.758726][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.785600][ T8786] loop2: detected capacity change from 0 to 764 [ 461.797551][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.818046][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.854217][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.894914][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.916071][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.936375][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.957168][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.987621][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.020822][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.051245][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.092494][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.113787][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.140988][ T8589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.158838][ T8589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.167746][ T8589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.193374][ T8782] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 462.238009][ T8589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.247220][ T8782] REISERFS (device loop1): using ordered data mode [ 462.299948][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.308250][ T8782] reiserfs: using flush barriers [ 462.320075][ T4953] scsi host1: usb-storage 4-1:0.0 [ 462.328750][ T8782] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 462.455751][ T8782] REISERFS (device loop1): checking transaction log (loop1) [ 462.941228][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.949901][ T4953] usb 4-1: USB disconnect, device number 23 [ 463.209651][ T8782] REISERFS (device loop1): Using tea hash to sort names [ 464.400724][ T8782] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 464.523713][ T3754] Bluetooth: hci7: Frame reassembly failed (-84) [ 464.584580][ T4902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.636981][ T4902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.831625][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.842975][ T4902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.898793][ T4902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.981062][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.000370][ T8808] loop1: detected capacity change from 0 to 40427 [ 466.057396][ T8808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 466.188012][ T8808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 466.529392][ T4633] Bluetooth: hci7: command 0x1003 tx timeout [ 466.535643][ T3517] Bluetooth: hci7: sending frame failed (-49) [ 466.564523][ T4633] Bluetooth: hci4: command 0x1003 tx timeout [ 466.578340][ T3517] Bluetooth: hci4: sending frame failed (-49) [ 468.681627][ T7616] Bluetooth: hci4: command 0x1001 tx timeout [ 468.687754][ T3517] Bluetooth: hci4: sending frame failed (-49) [ 468.708009][ T7616] Bluetooth: hci7: command 0x1001 tx timeout [ 468.714131][ T3517] Bluetooth: hci7: sending frame failed (-49) [ 468.891566][ T8832] loop1: detected capacity change from 0 to 1024 [ 469.010365][ T8832] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 469.071156][ T26] audit: type=1800 audit(1720610316.079:245): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1019" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 469.638029][ T26] audit: type=1800 audit(1720610316.099:246): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1019" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 471.069217][ T7616] Bluetooth: hci7: command 0x1009 tx timeout [ 471.075349][ T7616] Bluetooth: hci4: command 0x1009 tx timeout [ 472.455400][ T8866] loop1: detected capacity change from 0 to 8192 [ 472.621268][ T8866] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 472.637978][ T8866] REISERFS (device loop1): using ordered data mode [ 472.644520][ T8866] reiserfs: using flush barriers [ 472.686474][ T8866] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 473.719786][ T8866] REISERFS (device loop1): checking transaction log (loop1) [ 474.038899][ T8866] REISERFS (device loop1): Using tea hash to sort names [ 474.046620][ T8866] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 474.256674][ T8866] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 474.270855][ T8866] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 474.288094][ T8866] REISERFS warning: vs-16090 direntry_bytes_number: bytes number is asked for direntry [ 475.546241][ T3620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.678432][ T3620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.739217][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 475.790793][ T3620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.868859][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 475.938899][ T3620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.048293][ T4637] Bluetooth: hci0: command 0x0409 tx timeout [ 476.128033][ T1280] Bluetooth: hci9: command 0x0409 tx timeout [ 476.260345][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.316488][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.326093][ T8877] device bridge_slave_0 entered promiscuous mode [ 476.397759][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.408993][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.428805][ T8877] device bridge_slave_1 entered promiscuous mode [ 476.546383][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.567959][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.590632][ T8876] device bridge_slave_0 entered promiscuous mode [ 476.633104][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.660068][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.667319][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.702311][ T8876] device bridge_slave_1 entered promiscuous mode [ 476.752244][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.881763][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.008791][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.195859][ T8877] team0: Port device team_slave_0 added [ 477.284155][ T8876] team0: Port device team_slave_0 added [ 477.321801][ T8877] team0: Port device team_slave_1 added [ 477.662671][ T8876] team0: Port device team_slave_1 added [ 477.743782][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.767487][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.849706][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.915742][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.933912][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.987607][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.036729][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.057926][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.143113][ T4637] Bluetooth: hci0: command 0x041b tx timeout [ 478.198838][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.209730][ T4637] Bluetooth: hci9: command 0x041b tx timeout [ 479.352754][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.404151][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.587871][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.911674][ T8877] device hsr_slave_0 entered promiscuous mode [ 479.929405][ T8877] device hsr_slave_1 entered promiscuous mode [ 479.958319][ T8877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.965929][ T8877] Cannot create hsr debugfs directory [ 480.092334][ T8876] device hsr_slave_0 entered promiscuous mode [ 480.141072][ T8876] device hsr_slave_1 entered promiscuous mode [ 480.176778][ T8876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.220788][ T8876] Cannot create hsr debugfs directory [ 480.271522][ T4637] Bluetooth: hci0: command 0x040f tx timeout [ 480.288500][ T4637] Bluetooth: hci9: command 0x040f tx timeout [ 480.984726][ T3620] device hsr_slave_0 left promiscuous mode [ 481.018248][ T3620] device hsr_slave_1 left promiscuous mode [ 481.028494][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.062471][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.083660][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.094745][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.124020][ T3620] device bridge_slave_1 left promiscuous mode [ 481.143664][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.174565][ T3620] device bridge_slave_0 left promiscuous mode [ 481.191742][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.239929][ T3620] device veth1_macvtap left promiscuous mode [ 481.258881][ T3620] device veth0_macvtap left promiscuous mode [ 481.279634][ T3620] device veth1_vlan left promiscuous mode [ 481.299889][ T3620] device veth0_vlan left promiscuous mode [ 481.973501][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 482.019660][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 482.067781][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.118214][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.288221][ T4634] Bluetooth: hci0: command 0x0419 tx timeout [ 482.326167][ T3620] bond0 (unregistering): Released all slaves [ 482.367956][ T4634] Bluetooth: hci9: command 0x0419 tx timeout [ 483.226680][ T8876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.455558][ T8876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.617097][ T8876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.692005][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 483.782481][ T8876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.070757][ T8877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.149089][ T8877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.179111][ T8877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.225996][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.238002][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.268096][ T8973] device bridge_slave_0 entered promiscuous mode [ 484.308983][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.316184][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.428882][ T8973] device bridge_slave_1 entered promiscuous mode [ 484.481601][ T8877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.297030][ T4635] Bluetooth: hci4: command 0x0409 tx timeout [ 485.331510][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.401867][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.660797][ T8876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.701606][ T8973] team0: Port device team_slave_0 added [ 486.133847][ T8973] team0: Port device team_slave_1 added [ 486.140410][ T8876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.297302][ T8876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.312944][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.387863][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.461666][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.518261][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.549594][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.660450][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.699148][ T8876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.023436][ T8973] device hsr_slave_0 entered promiscuous mode [ 487.070839][ T8973] device hsr_slave_1 entered promiscuous mode [ 487.098759][ T8973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.106369][ T8973] Cannot create hsr debugfs directory [ 487.176188][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.328457][ T3551] Bluetooth: hci4: command 0x041b tx timeout [ 487.360361][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.404006][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.432932][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.564783][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.588270][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.596869][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.603998][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.688304][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.732799][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.768535][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.775632][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.817041][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.844132][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.924908][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.949010][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.989123][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.008674][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.038837][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.056231][ T8877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.108319][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.156289][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.178530][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.212877][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.268860][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.277459][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.414818][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.456967][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.587670][ T8973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.638468][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.646443][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.692518][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.775578][ T8973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.847360][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.867514][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.903596][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.923181][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.942583][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.962634][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.969780][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.008369][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.037168][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.058646][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.065841][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.098328][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.215490][ T8973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.280912][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.291608][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 489.319926][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.346614][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.404877][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.489278][ T8876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.557960][ T8876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.574113][ T3567] Bluetooth: hci4: command 0x040f tx timeout [ 490.191169][ T8877] device veth0_vlan entered promiscuous mode [ 490.260494][ T8877] device veth1_vlan entered promiscuous mode [ 490.375823][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.385258][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.399183][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.418140][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.426949][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.435626][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.470196][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.488699][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.497498][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.535329][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.559808][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.585586][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.604625][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 490.627498][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.655084][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.764436][ T8973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.824910][ T8877] device veth0_macvtap entered promiscuous mode [ 490.859587][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.888618][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.929612][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 490.962348][ T8877] device veth1_macvtap entered promiscuous mode [ 491.041479][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.088294][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.158242][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.197945][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.278033][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.327949][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.377982][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.513553][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.531142][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.554507][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.591020][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.659769][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.742098][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.751532][ T4635] Bluetooth: hci4: command 0x0419 tx timeout [ 491.770991][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.781063][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.790308][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.813000][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.948036][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.998360][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.037851][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.047718][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.098376][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.121243][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.157863][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.167720][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.207833][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.227843][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.267842][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.290473][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.332780][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.348813][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.378965][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.386502][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.446975][ T8877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.473581][ T8877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.502454][ T8877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.519541][ T8877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.554284][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.670070][ T8973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.698187][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.707704][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.754932][ T8973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 492.809836][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.825905][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.841437][ T8876] device veth0_vlan entered promiscuous mode [ 492.870931][ T8973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 492.904096][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.916599][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.105597][ T8876] device veth1_vlan entered promiscuous mode [ 493.117338][ T8973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.235474][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.248290][ T3567] Bluetooth: hci6: command 0x0406 tx timeout [ 493.271555][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.321461][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.331959][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.363960][ T8876] device veth0_macvtap entered promiscuous mode [ 493.411084][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.431784][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 493.460774][ T8576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.472000][ T8876] device veth1_macvtap entered promiscuous mode [ 493.481532][ T8576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.556296][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.740048][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 493.780771][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.821080][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.842710][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.051773][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.127992][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.183728][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.237418][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.273697][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.311561][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.374507][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.385101][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.394995][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.405715][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.415758][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.426412][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.450206][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.491007][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.510376][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.562532][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.587901][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.632309][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.657505][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.721259][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.740393][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.819315][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.865784][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.923425][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.936001][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.945905][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.956572][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.966451][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.979696][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.007758][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.539306][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.547322][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.607663][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.617622][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.521729][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.606616][ T8876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.626657][ T9105] loop3: detected capacity change from 0 to 512 [ 496.647920][ T8876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.870957][ T8876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.949239][ T8876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.029552][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.068763][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.077533][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.084782][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.112102][ T9105] EXT4-fs (loop3): 1 orphan inode deleted [ 497.118042][ T9105] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 497.139911][ T9105] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 497.198314][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.244315][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.293055][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.300229][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.400268][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.422001][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.455159][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.948715][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.959484][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.994970][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.430632][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.443738][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.452618][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.579669][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.654450][ T8973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.699984][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.718929][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.736551][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.770370][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.852117][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.888991][ T9132] loop3: detected capacity change from 0 to 764 [ 498.912564][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.925034][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.062635][ T3620] device hsr_slave_0 left promiscuous mode [ 499.121706][ T3620] device hsr_slave_1 left promiscuous mode [ 499.419388][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.621719][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.758779][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.827328][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.898687][ T3620] device bridge_slave_1 left promiscuous mode [ 499.904947][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.008407][ T3620] device bridge_slave_0 left promiscuous mode [ 500.014761][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.023943][ T9140] loop3: detected capacity change from 0 to 512 [ 500.130748][ T9140] EXT4-fs (loop3): 1 orphan inode deleted [ 500.136526][ T9140] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 500.199409][ T3620] device veth1_macvtap left promiscuous mode [ 500.205573][ T3620] device veth0_macvtap left promiscuous mode [ 500.228110][ T3620] device veth1_vlan left promiscuous mode [ 500.233952][ T3620] device veth0_vlan left promiscuous mode [ 500.308014][ T9140] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 500.611217][ T26] audit: type=1804 audit(1720610347.619:247): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1080" name="/newroot/6/file1/bus" dev="loop3" ino=16 res=1 errno=0 [ 500.710592][ T26] audit: type=1804 audit(1720610347.649:248): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1080" name="/newroot/6/file1/bus" dev="loop3" ino=16 res=1 errno=0 [ 501.075683][ T9149] loop3: detected capacity change from 0 to 512 [ 501.132285][ T9149] EXT4-fs (loop3): 1 orphan inode deleted [ 501.192253][ T9149] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 501.368014][ T9149] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 501.409819][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.416164][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.535695][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 501.597069][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 501.773878][ T9159] Bluetooth: hci5: Frame reassembly failed (-84) [ 501.785949][ T9159] Bluetooth: hci5: Frame reassembly failed (-84) [ 501.854406][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 502.097603][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.558334][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.802083][ T3620] bond0 (unregistering): Released all slaves [ 502.918459][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 503.164270][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.193201][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.234432][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.683193][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.705057][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.824661][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.846172][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.901400][ T8973] device veth0_vlan entered promiscuous mode [ 503.920142][ T4635] Bluetooth: hci5: command 0x1003 tx timeout [ 503.935043][ T3520] Bluetooth: hci5: sending frame failed (-49) [ 503.948698][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.992180][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.212847][ T8973] device veth1_vlan entered promiscuous mode [ 504.282053][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.308795][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.347203][ T9177] loop2: detected capacity change from 0 to 764 [ 504.356600][ T8973] device veth0_macvtap entered promiscuous mode [ 504.410661][ T8973] device veth1_macvtap entered promiscuous mode [ 504.683408][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.039832][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.227839][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.307835][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.370809][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.446714][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.497262][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.537838][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.547695][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.608352][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.647854][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.686796][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.717259][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.757828][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.789732][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.799649][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.818572][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.827375][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.918831][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.930283][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.965873][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.967998][ T4637] Bluetooth: hci5: command 0x1001 tx timeout [ 506.005121][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.018773][ T3520] Bluetooth: hci5: sending frame failed (-49) [ 506.071661][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.123036][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.172477][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.213489][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.245248][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.278229][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.317890][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.372335][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.399327][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.432292][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.478019][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.519601][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.606573][ T8973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.657674][ T8973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.693381][ T8973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.719023][ T8973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.790308][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.809094][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.235186][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.270870][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.337160][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.344288][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.358178][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.530113][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.048211][ T4635] Bluetooth: hci5: command 0x1009 tx timeout [ 508.389721][ T9208] loop2: detected capacity change from 0 to 512 [ 508.574649][ T9208] EXT4-fs (loop2): 1 orphan inode deleted [ 508.607911][ T9208] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 508.746745][ T9208] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 509.101484][ T26] audit: type=1804 audit(1720610356.109:249): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1097" name="/newroot/8/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 509.198121][ T26] audit: type=1804 audit(1720610356.149:250): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1097" name="/newroot/8/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 509.566495][ T9217] loop2: detected capacity change from 0 to 764 [ 510.809815][ T9223] loop2: detected capacity change from 0 to 512 [ 510.955265][ T9223] EXT4-fs (loop2): 1 orphan inode deleted [ 510.963973][ T9223] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 510.998163][ T9223] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 511.088873][ T26] audit: type=1804 audit(1720610358.099:251): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1100" name="/newroot/10/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 511.127627][ T26] audit: type=1804 audit(1720610358.129:252): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1100" name="/newroot/10/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 512.735409][ T9249] loop2: detected capacity change from 0 to 512 [ 513.616471][ T9266] syz.4.1112[9266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.616590][ T9266] syz.4.1112[9266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.679858][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.925724][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.050806][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.119705][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 514.198108][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.377994][ T23] Bluetooth: hci7: command 0x0409 tx timeout [ 514.682890][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.729683][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.773128][ T9243] device bridge_slave_0 entered promiscuous mode [ 514.884683][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.895385][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.954619][ T9243] device bridge_slave_1 entered promiscuous mode [ 515.118266][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.164394][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.284608][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 515.494476][ T9243] team0: Port device team_slave_0 added [ 515.666705][ T9243] team0: Port device team_slave_1 added [ 515.812420][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.847948][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.928929][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.938190][ T4634] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 515.952537][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.959590][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.520771][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.764307][ T3551] Bluetooth: hci7: command 0x041b tx timeout [ 516.967971][ T4634] usb 3-1: Using ep0 maxpacket: 8 [ 517.356245][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'. [ 517.475622][ T9243] device hsr_slave_0 entered promiscuous mode [ 517.513411][ T9243] device hsr_slave_1 entered promiscuous mode [ 517.573859][ T9243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.616411][ T9243] Cannot create hsr debugfs directory [ 517.629042][ T4634] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 517.637347][ T4634] usb 3-1: config 179 has no interface number 0 [ 517.645686][ T4634] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.657871][ T4634] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 517.669621][ T4634] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.680875][ T4634] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 517.692331][ T4634] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.739065][ T4634] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 517.757862][ T4634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.858285][ T9341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 518.829368][ T4634] usb 3-1: USB disconnect, device number 15 [ 518.837907][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 518.846816][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 518.902709][ T3551] Bluetooth: hci7: command 0x040f tx timeout [ 519.730737][ T9390] loop2: detected capacity change from 0 to 512 [ 520.101401][ T9390] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 520.113417][ T9390] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 520.123903][ T9390] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1145: Corrupt directory, running e2fsck is recommended [ 520.293037][ T9390] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 520.310240][ T9390] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1145: corrupted in-inode xattr [ 520.324477][ T9390] EXT4-fs (loop2): Remounting filesystem read-only [ 520.331325][ T9390] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1145: couldn't read orphan inode 15 (err -117) [ 520.344187][ T9390] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 520.375919][ T9389] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 520.390223][ T9389] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 520.400401][ T9389] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1145: Corrupt directory, running e2fsck is recommended [ 520.436008][ T9389] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 520.447579][ T9389] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 520.457722][ T9389] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1145: Corrupt directory, running e2fsck is recommended [ 520.470675][ T9389] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 3: comm syz.2.1145: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 520.498612][ T9389] EXT4-fs (loop2): Remounting filesystem read-only [ 520.898931][ T4633] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 520.927988][ T4634] Bluetooth: hci7: command 0x0419 tx timeout [ 521.261008][ T144] device hsr_slave_0 left promiscuous mode [ 521.277746][ T144] device hsr_slave_1 left promiscuous mode [ 521.285367][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.298209][ T4633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.339371][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.346631][ T4633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.378854][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.381878][ T4633] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 521.386350][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.454693][ T4633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.498540][ T4633] usb 5-1: config 0 descriptor?? [ 521.504621][ T144] device bridge_slave_1 left promiscuous mode [ 521.530691][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.589856][ T144] device bridge_slave_0 left promiscuous mode [ 521.596166][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.691986][ T144] device veth1_macvtap left promiscuous mode [ 521.701643][ T144] device veth0_macvtap left promiscuous mode [ 521.707828][ T144] device veth1_vlan left promiscuous mode [ 521.768027][ T144] device veth0_vlan left promiscuous mode [ 522.228090][ T4633] usb 5-1: language id specifier not provided by device, defaulting to English [ 522.368141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 522.377609][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 522.417729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 523.077548][ T9436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 523.167445][ T144] team0 (unregistering): Port device team_slave_1 removed [ 523.230280][ T144] team0 (unregistering): Port device team_slave_0 removed [ 523.268153][ T4633] uclogic 0003:256C:006D.0001: v1 buttonpad probing failed: -71 [ 523.276264][ T4633] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 523.279459][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.307998][ T4633] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 523.346261][ T4633] usb 5-1: USB disconnect, device number 17 [ 523.352713][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.620183][ T144] bond0 (unregistering): Released all slaves [ 523.873758][ T9434] netlink: 'syz.2.1153': attribute type 16 has an invalid length. [ 523.968108][ T4637] Bluetooth: hci2: command 0x0406 tx timeout [ 524.496458][ T9243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 524.510967][ T9243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.649896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 524.771729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 524.780744][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 524.789713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 524.798719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 524.807831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 524.817816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 525.038341][ T9243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.135299][ T9243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 525.595246][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.656840][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.671958][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.708143][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.751463][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.767171][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.803574][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.810733][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.886809][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.901414][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.934537][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.970901][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.978180][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.027664][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.088189][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.106514][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.150464][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.219024][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.268751][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.306668][ T9243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.420913][ T9243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.542813][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.551591][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.561279][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.570299][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.619285][ T9514] syz.1.1171[9514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.619403][ T9514] syz.1.1171[9514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.631798][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.728086][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.879617][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.898821][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.948623][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.019220][ T21] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 527.064644][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 527.084928][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.143685][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.155005][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.182216][ T9243] device veth0_vlan entered promiscuous mode [ 527.213473][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.229429][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.262257][ T9243] device veth1_vlan entered promiscuous mode [ 527.318041][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 527.410888][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.439423][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.448143][ T21] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.473402][ T9243] device veth0_macvtap entered promiscuous mode [ 527.479693][ T21] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.479763][ T21] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 527.562563][ T21] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.580053][ T9243] device veth1_macvtap entered promiscuous mode [ 527.584559][ T3517] Bluetooth: hci8: unknown advertising packet type: 0x65 [ 527.586343][ T3517] Bluetooth: hci8: unknown advertising packet type: 0x2f [ 527.594067][ T3517] Bluetooth: hci8: Dropping invalid advertising data [ 527.610999][ T3517] Bluetooth: hci8: Malicious advertising data. [ 527.633016][ T21] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 527.648547][ T21] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 527.659201][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.675220][ T9533] process 'syz.4.1173' launched '/dev/fd/-1/./mnt' with NULL argv: empty string added [ 527.708883][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.795843][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.825284][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.866521][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.887188][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.952848][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.973217][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.015401][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.059827][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.088022][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.118114][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.150879][ T21] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 528.170666][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.181543][ T21] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 528.209278][ T21] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 528.216559][ T21] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 528.238024][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.277836][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.289711][ T21] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 528.329427][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.339329][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.368135][ T21] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 528.368518][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.420458][ T9506] ntrig 0003:1B96:000A.0002: pid 9506 passed too short report [ 528.434782][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.473770][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.662941][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.715004][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.760608][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.798066][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.811160][ T21] usb 3-1: USB disconnect, device number 16 [ 528.831641][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875183][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.875214][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875234][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.875256][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875272][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.875295][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875311][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.875333][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875349][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.877598][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.895977][ T9243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.896019][ T9243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.896052][ T9243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.896083][ T9243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.903316][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.904040][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.133435][ T8576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.133519][ T8576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.180480][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.288332][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.297930][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.304510][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.669117][ T9571] syz.4.1177[9571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.672706][ T9571] syz.4.1177[9571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.682322][ T9571] syz.4.1177[9571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.682424][ T9571] syz.4.1177[9571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.796380][ T9603] loop2: detected capacity change from 0 to 128 [ 531.078011][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 531.337881][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 531.342259][ T9620] device hsr0 entered promiscuous mode [ 531.368808][ T9620] device hsr0 left promiscuous mode [ 531.458191][ T23] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.487903][ T23] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.548231][ T23] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 531.577900][ T23] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.587686][ T23] usb 5-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 531.627940][ T23] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 531.648200][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.718907][ T9628] netlink: 'syz.2.1193': attribute type 24 has an invalid length. [ 532.150834][ T23] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 532.179411][ T23] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 532.186344][ T23] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 532.245232][ T23] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 532.251776][ T9650] syz.2.1202 (9650) used obsolete PPPIOCDETACH ioctl [ 532.307702][ T23] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 532.340254][ T23] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 532.418720][ T9597] ntrig 0003:1B96:000A.0003: pid 9597 passed too short report [ 532.832119][ T23] usb 5-1: USB disconnect, device number 18 [ 532.950687][ T9665] device hsr0 entered promiscuous mode [ 533.006416][ T9665] device hsr0 left promiscuous mode [ 536.593013][ T9723] loop3: detected capacity change from 0 to 2048 [ 536.715390][ T9723] loop3: p1 < > p4 [ 536.777260][ T9723] loop3: p4 size 8388608 extends beyond EOD, truncated [ 537.204918][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 537.293846][ T9739] 9pnet: Insufficient options for proto=fd [ 537.494136][ T9738] loop3: detected capacity change from 0 to 512 [ 537.506390][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 537.911513][ T9738] EXT4-fs (loop3): 1 orphan inode deleted [ 537.917392][ T9738] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 538.102458][ T9746] loop2: detected capacity change from 0 to 16 [ 538.168129][ T9738] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 538.418094][ T9746] erofs: (device loop2): mounted with root inode @ nid 36. [ 539.202360][ T26] audit: type=1804 audit(1720610386.189:253): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1230" name="/newroot/20/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 539.852515][ T9755] overlayfs: failed to get redirect (-117) [ 540.829258][ T9775] 9pnet: Insufficient options for proto=fd [ 540.991518][ T9783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 544.006333][ T9823] loop3: detected capacity change from 0 to 512 [ 544.105713][ T9823] EXT4-fs (loop3): 1 orphan inode deleted [ 544.145617][ T9823] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 544.206677][ T9823] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 544.431317][ T9835] 9pnet: Insufficient options for proto=fd [ 544.470716][ T27] INFO: task kworker/0:15:4639 blocked for more than 143 seconds. [ 544.497577][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 544.730442][ T26] audit: type=1804 audit(1720610391.549:254): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1259" name="/newroot/28/file1/bus" dev="loop3" ino=16 res=1 errno=0 [ 544.931310][ T27] Not tainted 5.15.162-syzkaller #0 [ 545.069441][ T26] audit: type=1804 audit(1720610391.669:255): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1259" name="/newroot/28/file1/bus" dev="loop3" ino=16 res=1 errno=0 [ 545.079904][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.099390][ T27] task:kworker/0:15 state:D stack:24632 pid: 4639 ppid: 2 flags:0x00004000 [ 545.108781][ T27] Workqueue: events_long flush_old_commits [ 545.114654][ T27] Call Trace: [ 545.118354][ T27] [ 545.121327][ T27] __schedule+0x12c4/0x45b0 [ 545.125881][ T27] ? mark_lock+0x98/0x340 [ 545.156248][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 545.225916][ T27] ? release_firmware_map_entry+0x190/0x190 [ 545.274222][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 545.315741][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 545.342673][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 545.348165][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 545.353892][ T27] schedule+0x11b/0x1f0 [ 545.358948][ T27] schedule_preempt_disabled+0xf/0x20 [ 545.364361][ T27] __mutex_lock_common+0xe34/0x25a0 [ 545.369665][ T27] ? reiserfs_write_lock+0x76/0xd0 [ 545.374810][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 545.380121][ T27] ? dquot_writeback_dquots+0x979/0xa50 [ 545.385701][ T27] ? dqput+0x440/0x440 [ 545.389875][ T27] mutex_lock_nested+0x17/0x20 [ 545.394666][ T27] reiserfs_write_lock+0x76/0xd0 [ 545.399842][ T27] flush_old_commits+0x1df/0x2e0 [ 545.404855][ T27] ? reiserfs_fill_super+0x2690/0x2690 [ 545.444925][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 545.853214][ T27] process_one_work+0x8a1/0x10c0 [ 545.863999][ T27] ? worker_detach_from_pool+0x260/0x260 [ 545.878611][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 545.899015][ T27] ? kthread_data+0x4e/0xc0 [ 545.914786][ T27] ? wq_worker_running+0x97/0x170 [ 545.938372][ T27] worker_thread+0xaca/0x1280 [ 545.960237][ T27] kthread+0x3f6/0x4f0 [ 545.977946][ T27] ? rcu_lock_release+0x20/0x20 [ 546.004144][ T27] ? kthread_blkcg+0xd0/0xd0 [ 546.030288][ T27] ret_from_fork+0x1f/0x30 [ 546.054056][ T27] [ 546.073473][ T27] [ 546.073473][ T27] Showing all locks held in the system: [ 546.126140][ T27] 3 locks held by kworker/1:0/21: [ 546.167069][ T27] #0: ffff8880b9b3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 546.187272][ T27] #1: ffff8880b9b27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 546.222794][ T27] #2: ffffffff8c91fb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 546.257850][ T27] 3 locks held by kworker/1:1/23: [ 546.263032][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.289093][ T27] #1: ffffc90000ddfd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.327910][ T27] #2: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 546.378075][ T27] 1 lock held by khungtaskd/27: [ 546.395825][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 546.427880][ T27] 2 locks held by getty/3265: [ 546.432693][ T27] #0: ffff88814b55f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 546.480581][ T27] #1: ffffc900024b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 546.507886][ T27] 2 locks held by kworker/0:5/3551: [ 546.513219][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.537828][ T27] #1: ffffc90003267d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.557838][ T27] 4 locks held by kworker/1:6/3552: [ 546.563093][ T27] #0: ffff888011c71138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.607895][ T27] #1: ffffc90003277d20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.628224][ T27] #2: ffff88807e7400e0 (&type->s_umount_key#77){++++}-{3:3}, at: flush_old_commits+0xc7/0x2e0 [ 546.649980][ T27] #3: ffff88807a9d3090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 546.669675][ T27] 4 locks held by kworker/0:15/4639: [ 546.682017][ T27] #0: ffff888011c71138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.707886][ T27] #1: ffffc90002ed7d20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.736829][ T27] #2: ffff8881419ee0e0 (&type->s_umount_key#77){++++}-{3:3}, at: flush_old_commits+0xc7/0x2e0 [ 546.757863][ T27] #3: ffff8880199d9090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 546.794972][ T27] 3 locks held by kworker/1:18/4843: [ 546.812879][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.857899][ T27] #1: ffffc90002e17d20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.888100][ T27] #2: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 546.917898][ T27] 4 locks held by kworker/1:19/6331: [ 546.923236][ T27] #0: ffff888011c71138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 546.958037][ T27] #1: ffffc90003a27d20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 546.977986][ T27] #2: ffff8880153a60e0 (&type->s_umount_key#77){++++}-{3:3}, at: flush_old_commits+0xc7/0x2e0 [ 547.012657][ T27] #3: ffff888065a4c090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 547.043340][ T27] 4 locks held by syz.0.843/7924: [ 547.059816][ T27] 4 locks held by syz.4.875/8024: [ 547.077588][ T27] 4 locks held by syz.1.1029/8866: [ 547.095450][ T27] 1 lock held by syz-executor/9243: [ 547.108705][ T27] #0: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 547.132319][ T27] [ 547.137072][ T27] ============================================= [ 547.137072][ T27] [ 547.185746][ T27] NMI backtrace for cpu 1 [ 547.190222][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.162-syzkaller #0 [ 547.198222][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 547.208290][ T27] Call Trace: [ 547.211577][ T27] [ 547.214509][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 547.219208][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 547.224866][ T27] ? panic+0x860/0x860 [ 547.228953][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 547.234079][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 547.239025][ T27] ? __wake_up_klogd+0xd5/0x100 [ 547.243892][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 547.250060][ T27] ? _printk+0xd1/0x120 [ 547.254244][ T27] ? panic+0x860/0x860 [ 547.258339][ T27] ? __wake_up_klogd+0xcc/0x100 [ 547.263211][ T27] ? panic+0x860/0x860 [ 547.267307][ T27] ? __rcu_read_unlock+0x92/0x100 [ 547.272356][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 547.278446][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 547.284441][ T27] watchdog+0xe72/0xeb0 [ 547.288622][ T27] kthread+0x3f6/0x4f0 [ 547.292702][ T27] ? hungtask_pm_notify+0x50/0x50 [ 547.297736][ T27] ? kthread_blkcg+0xd0/0xd0 [ 547.302343][ T27] ret_from_fork+0x1f/0x30 [ 547.306787][ T27] [ 547.310707][ T27] Sending NMI from CPU 1 to CPUs 0: [ 547.315927][ C0] NMI backtrace for cpu 0 [ 547.315938][ C0] CPU: 0 PID: 8866 Comm: syz.1.1029 Not tainted 5.15.162-syzkaller #0 [ 547.315956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 547.315978][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 547.316002][ C0] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 547.316016][ C0] RSP: 0018:ffffc900037769a0 EFLAGS: 00000246 [ 547.316032][ C0] RAX: ffffffff82135e50 RBX: 0000000000000003 RCX: ffff88801dad3b80 [ 547.316045][ C0] RDX: ffffc9000e634000 RSI: 000000000003ffff RDI: 0000000000000003 [ 547.316056][ C0] RBP: ffff8880192380d5 R08: ffffffff82135e46 R09: 00000000ffffffff [ 547.316068][ C0] R10: 0000000000000004 R11: ffff88801dad3b80 R12: 0000000000000fe8 [ 547.316080][ C0] R13: ffff8880192380d0 R14: 0000000000000002 R15: dffffc0000000000 [ 547.316092][ C0] FS: 00007fb058ac86c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 547.316106][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.316118][ C0] CR2: 00007ffc2a046f58 CR3: 000000006714d000 CR4: 00000000003506f0 [ 547.316134][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.316143][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.316153][ C0] Call Trace: [ 547.316159][ C0] [ 547.316165][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 547.316185][ C0] ? read_lock_is_recursive+0x10/0x10 [ 547.316204][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 547.316222][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 547.316247][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 547.316265][ C0] ? nmi_handle+0xf7/0x370 [ 547.316283][ C0] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 547.316300][ C0] ? default_do_nmi+0x62/0x150 [ 547.316320][ C0] ? exc_nmi+0xa8/0x100 [ 547.316337][ C0] ? end_repeat_nmi+0x16/0x31 [ 547.316357][ C0] ? direntry_part_size+0xa6/0x1a0 [ 547.316376][ C0] ? direntry_part_size+0xb0/0x1a0 [ 547.316396][ C0] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 547.316415][ C0] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 547.316434][ C0] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 547.316453][ C0] [ 547.316457][ C0] [ 547.316462][ C0] direntry_part_size+0xb0/0x1a0 [ 547.316482][ C0] get_num_ver+0x4ed/0x1150 [ 547.316509][ C0] ? is_leaf_removable+0x8c0/0x8c0 [ 547.316534][ C0] fix_nodes+0x2967/0x8c70 [ 547.316553][ C0] ? __might_sleep+0xc0/0xc0 [ 547.316594][ C0] ? make_empty_dir_item+0x790/0x790 [ 547.316620][ C0] ? reiserfs_paste_into_item+0x3ef/0x880 [ 547.316639][ C0] reiserfs_paste_into_item+0x65d/0x880 [ 547.316663][ C0] ? reiserfs_cut_from_item+0x2560/0x2560 [ 547.316721][ C0] ? __kmalloc+0x168/0x300 [ 547.316742][ C0] reiserfs_get_block+0x226a/0x5390 [ 547.316788][ C0] ? make_le_item_head+0x5c0/0x5c0 [ 547.316807][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 547.316828][ C0] ? mark_lock+0x98/0x340 [ 547.316846][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 547.316883][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 547.316897][ C0] ? alloc_buffer_head+0xd3/0xf0 [ 547.316916][ C0] ? alloc_page_buffers+0x54a/0x660 [ 547.316942][ C0] ? create_page_buffers+0x24b/0x330 [ 547.316962][ C0] __block_write_begin_int+0x60b/0x1650 [ 547.316991][ C0] ? make_le_item_head+0x5c0/0x5c0 [ 547.317009][ C0] ? page_zero_new_buffers+0x510/0x510 [ 547.317028][ C0] ? fault_in_readable+0x206/0x2e0 [ 547.317048][ C0] ? fix_tail_page_for_writing+0x97/0x220 [ 547.317069][ C0] reiserfs_write_begin+0x346/0x810 [ 547.317092][ C0] generic_perform_write+0x2bf/0x5b0 [ 547.317119][ C0] ? grab_cache_page_write_begin+0x90/0x90 [ 547.317138][ C0] ? file_remove_privs+0x610/0x610 [ 547.317156][ C0] ? rwsem_write_trylock+0x166/0x210 [ 547.317180][ C0] __generic_file_write_iter+0x243/0x4f0 [ 547.317202][ C0] generic_file_write_iter+0xa7/0x1b0 [ 547.317222][ C0] vfs_write+0xacf/0xe50 [ 547.317245][ C0] ? file_end_write+0x250/0x250 [ 547.317265][ C0] ? __fget_files+0x413/0x480 [ 547.317287][ C0] ? mutex_lock_nested+0x17/0x20 [ 547.317305][ C0] ? __fdget_pos+0x2cb/0x380 [ 547.317323][ C0] ? ksys_write+0x77/0x2c0 [ 547.317341][ C0] ksys_write+0x1a2/0x2c0 [ 547.317358][ C0] ? print_irqtrace_events+0x210/0x210 [ 547.317376][ C0] ? __ia32_sys_read+0x80/0x80 [ 547.317393][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 547.317413][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 547.317432][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 547.317453][ C0] do_syscall_64+0x3b/0xb0 [ 547.317469][ C0] ? clear_bhb_loop+0x15/0x70 [ 547.317485][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.317503][ C0] RIP: 0033:0x7fb05a047bd9 [ 547.317518][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.317531][ C0] RSP: 002b:00007fb058ac8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.317547][ C0] RAX: ffffffffffffffda RBX: 00007fb05a1d5f60 RCX: 00007fb05a047bd9 [ 547.317560][ C0] RDX: 0000000000000018 RSI: 00000000200002c0 RDI: 0000000000000005 [ 547.317575][ C0] RBP: 00007fb05a0b6e60 R08: 0000000000000000 R09: 0000000000000000 [ 547.317585][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.317595][ C0] R13: 000000000000000b R14: 00007fb05a1d5f60 R15: 00007ffc108a5478 [ 547.317615][ C0] [ 547.537593][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 547.857018][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.162-syzkaller #0 [ 547.865007][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 547.875073][ T27] Call Trace: [ 547.878362][ T27] [ 547.881303][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 547.886004][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 547.891652][ T27] ? panic+0x860/0x860 [ 547.895747][ T27] panic+0x318/0x860 [ 547.899663][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 547.905318][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 547.911493][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 547.916712][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 547.922802][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 547.928967][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 547.935135][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 547.941306][ T27] watchdog+0xeb0/0xeb0 [ 547.945492][ T27] kthread+0x3f6/0x4f0 [ 547.949573][ T27] ? hungtask_pm_notify+0x50/0x50 [ 547.954607][ T27] ? kthread_blkcg+0xd0/0xd0 [ 547.959207][ T27] ret_from_fork+0x1f/0x30 [ 547.963657][ T27] [ 547.967053][ T27] Kernel Offset: disabled [ 547.971379][ T27] Rebooting in 86400 seconds..