last executing test programs: 16.756302964s ago: executing program 3 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15.14623026s ago: executing program 3 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12.817148597s ago: executing program 0 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0xa00000, &(0x7f0000000680)={[{@rootdir={'rootdir', 0x3d, 0x3}}, {@anchor={'anchor', 0x3d, 0x6}}, {@undelete}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@longad}, {@shortad}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc49, &(0x7f0000001d40)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) r3 = openat(0xffffffffffffff9c, &(0x7f000009de80)='./file1\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) 12.816939757s ago: executing program 3 (id=1309): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030392c626172726965722c6465636f6d706f73652c6465636f6d706f73652c63726561746f723da88b2f632c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=koi8-\x00\x00\x00'], 0x45, 0x710, &(0x7f00000020c0)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa08800, &(0x7f00000002c0)=ANY=[], 0x1, 0x698, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000000)) 12.789859767s ago: executing program 1 (id=1310): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x46795000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x955d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 12.131135508s ago: executing program 2 (id=1312): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 11.828970442s ago: executing program 1 (id=1313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0x1, 0x553, &(0x7f0000000180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11, 0x0, 0x4c840}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749b71bd7663be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98dcb6f2abd71e7b9f470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee9889751cd7c86c3c9b8ff31043965b56bea2dbee528678eb47efb7a3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff3698422f88ffed63c6dd64330f4c38ba86a3b50da03f4b1e4808aa5c9e9546d7190747c6abc5bc89da8bad11ca7f91c6ab28cec4ff7faa3fab49cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322263b2e6f4c9b81e7eddb26d7b5b003e874acdcc771516133b866a3303c9dc210ea014785547e0ba97dfb45b5775cc2c5e880d7da37de8afb5fda8f1d455e8f1455fb76d5bab21aea9d24f64a95b9ba6dde17af422930c8d8788f6a5b8ebb5f249bafbad1"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) 11.622169666s ago: executing program 2 (id=1315): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 11.620884496s ago: executing program 0 (id=1325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r3, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9.683304066s ago: executing program 1 (id=1316): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$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") openat(0xffffffffffffffff, 0x0, 0xa00, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) close(0x3) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9.681836827s ago: executing program 0 (id=1317): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet_sctp(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="99", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000000000000000200fc0100dfff20000000000000008400000008000000fc000000000000000000000f0000000020000000000000008400000002000000050041"], 0x58, 0x4855}, 0x8850) 9.633609887s ago: executing program 3 (id=1318): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.354144612s ago: executing program 4 (id=1319): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 8.575181274s ago: executing program 0 (id=1320): socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.445007726s ago: executing program 4 (id=1321): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101442, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 8.436061666s ago: executing program 1 (id=1322): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000140)={[{@debug}, {@errors_remount}, {@quota}, {@errors_remount}, {@minixdf}, {@sb={'sb', 0x3d, 0x9}}]}, 0x1, 0x520, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x100000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 7.521325421s ago: executing program 4 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) 7.520276261s ago: executing program 2 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$getflags(r1, 0x408) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) 7.291984114s ago: executing program 0 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, r3, 0x4, r3}, 0x10) 3.519825624s ago: executing program 2 (id=1328): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), 0x0}, 0x20) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 3.473721235s ago: executing program 1 (id=1329): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.305674457s ago: executing program 4 (id=1330): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.583499489s ago: executing program 2 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x29, 0x4000, @fd_index=0x5, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, r8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x1469, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47e9, 0xeb13, 0x6, 0x0, 0x0) 2.581137369s ago: executing program 3 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a800, 0x0) 1.362135528s ago: executing program 4 (id=1333): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) close(r0) 1.085528812s ago: executing program 4 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 34.87871ms ago: executing program 0 (id=1335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 26.68203ms ago: executing program 1 (id=1336): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) lseek(r3, 0x10001, 0x0) 0s ago: executing program 2 (id=1337): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ge0: port 1(bridge_slave_0) entered forwarding state [ 43.926128][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.953848][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.956655][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.964694][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.966700][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.981991][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.988422][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.004857][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.010498][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.013395][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.015883][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.025177][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.027595][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.029687][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.033251][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.036068][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.039807][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.042573][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.048245][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.055087][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.067638][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.070285][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.072830][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.074855][ T1644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.078232][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.080863][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.092663][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.095306][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.098568][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.101161][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.103631][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.108407][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.134435][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.136926][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.139848][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.143415][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.145377][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.149018][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.151854][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.154562][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.158145][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.172307][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.175744][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.194307][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.202731][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.205887][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.209786][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.211799][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.214833][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.224026][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.231350][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.233957][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.236630][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.244615][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.246552][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.249309][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.259808][ T4306] device veth0_vlan entered promiscuous mode [ 44.276097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.280027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.283302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.286444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.289475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.292115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.294551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.304024][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.311329][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.320001][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.322686][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.328411][ T4306] device veth1_vlan entered promiscuous mode [ 44.341136][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.343743][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.346640][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.351864][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.354586][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.356703][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.363903][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.366577][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.370858][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.373571][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.376246][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.391834][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.401890][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.407718][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.410398][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.423978][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.440087][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.442807][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.445914][ T4306] device veth0_macvtap entered promiscuous mode [ 44.465151][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.468222][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.470769][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.479042][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.482333][ T4306] device veth1_macvtap entered promiscuous mode [ 44.502603][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.505353][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.514800][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.526126][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.534110][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.539864][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.542487][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.557085][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.560181][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.563188][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.565156][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.569629][ T4313] device veth0_vlan entered promiscuous mode [ 44.573345][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.593328][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.596171][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.599441][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.601454][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.603838][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.606688][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.611363][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.613498][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.625142][ T4313] device veth1_vlan entered promiscuous mode [ 44.633731][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.636381][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.640678][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.643777][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.646614][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.662075][ T4314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.665046][ T4314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.683473][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.686040][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.689843][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.693076][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.695792][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.712813][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.715362][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.722816][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.725054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.728896][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.732988][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.736614][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.739833][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.764544][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.767902][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.770652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.773453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.786378][ T4306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.802629][ T4306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.805131][ T4306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.814844][ T4306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.832711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.835445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.847729][ T4313] device veth0_macvtap entered promiscuous mode [ 44.868495][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.871199][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.873421][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.881686][ T4313] device veth1_macvtap entered promiscuous mode [ 44.884647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.888480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.891241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.897402][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 44.899091][ T4308] Bluetooth: hci2: command 0x041b tx timeout [ 44.900794][ T4308] Bluetooth: hci0: command 0x041b tx timeout [ 44.902413][ T4308] Bluetooth: hci3: command 0x041b tx timeout [ 44.904177][ T4308] Bluetooth: hci4: command 0x041b tx timeout [ 44.945464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.948509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.951691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.954108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.961049][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.966267][ T4307] device veth0_vlan entered promiscuous mode [ 44.973514][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.976511][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.985572][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.002721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.005525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.012735][ T4307] device veth1_vlan entered promiscuous mode [ 45.023248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.041007][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.043881][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.049712][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.054207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.058299][ T1644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.060600][ T1644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.067163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.086147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.089028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.091774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.119789][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.122208][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.124525][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.128075][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.133733][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.135928][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.141988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.155203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.158731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.161698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.164606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.174343][ T4314] device veth0_vlan entered promiscuous mode [ 45.199919][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.202776][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.205632][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.208763][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.219838][ T4307] device veth0_macvtap entered promiscuous mode [ 45.225467][ T4314] device veth1_vlan entered promiscuous mode [ 45.263054][ T4307] device veth1_macvtap entered promiscuous mode [ 45.303904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.306655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.310483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.313240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.316256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.324530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.328880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.331450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.351830][ T4314] device veth0_macvtap entered promiscuous mode [ 45.356610][ T4314] device veth1_macvtap entered promiscuous mode [ 45.373053][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.376577][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.385346][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.390048][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.393999][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.404171][ T4316] device veth0_vlan entered promiscuous mode [ 45.413998][ T4316] device veth1_vlan entered promiscuous mode [ 45.441073][ T4316] device veth0_macvtap entered promiscuous mode [ 45.447797][ T4316] device veth1_macvtap entered promiscuous mode [ 45.475418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.479990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.483242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.486277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.489760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.492224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.494895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.498944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.501728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.504345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.511406][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.513728][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.534238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.550727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.790092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.205649][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.209082][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.212150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.248989][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.251858][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.254456][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.268315][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.271004][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.273784][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.281444][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.284171][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.288136][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.290758][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.295580][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.305223][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.313007][ T4314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.315576][ T4314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.318415][ T4314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.322217][ T4314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.334977][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.342510][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.345342][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.348700][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.351329][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.354152][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.356725][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.359939][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.363882][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.366399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.370027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.373488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.376740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.388929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.391731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.428850][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.431925][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.434512][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.438052][ T4427] binder: 4426:4427 ioctl c0306201 20000080 returned -14 [ 46.445223][ T4427] binder: 4426:4427 tried to acquire reference to desc 0, got 1 instead [ 46.455468][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.459345][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.462161][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.470187][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.476920][ T4374] binder: undelivered transaction 5, process died. [ 46.547249][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.550196][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.568141][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.570996][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.592454][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.602487][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.605309][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.608812][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.613324][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.649297][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.654172][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.660546][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.665710][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.671643][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.674136][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.676548][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.680761][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.067149][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 47.069606][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 47.071956][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 47.074189][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 47.078095][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 47.507995][ T4316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.510477][ T4316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.512820][ T4316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.515226][ T4316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.637495][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.639893][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.653589][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.779382][ T1644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.781698][ T1644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.783068][ T246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.784498][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.785927][ T246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.798161][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.814485][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.816709][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.828210][ T246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.877350][ T1644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.879685][ T1644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.912915][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.916743][ T1644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.932803][ T1644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.952935][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.384267][ T4461] loop1: detected capacity change from 0 to 16 [ 48.394929][ T4461] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 49.175629][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 49.177483][ T4308] Bluetooth: hci0: command 0x0419 tx timeout [ 49.178099][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 49.180904][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 50.041497][ T4472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.043955][ T4472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.158146][ T4472] bridge0: port 3(macvlan1) entered blocking state [ 50.160148][ T4472] bridge0: port 3(macvlan1) entered disabled state [ 50.162737][ T4472] device macvlan1 entered promiscuous mode [ 50.165052][ T4472] bridge0: port 3(macvlan1) entered blocking state [ 50.167019][ T4472] bridge0: port 3(macvlan1) entered forwarding state [ 50.250623][ T4472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.262384][ T4473] loop2: detected capacity change from 0 to 512 [ 50.321903][ T4300] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.545128][ T4491] loop4: detected capacity change from 0 to 128 [ 53.268408][ T4550] loop1: detected capacity change from 0 to 4096 [ 53.326446][ T4550] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 53.452670][ T4550] ntfs3: loop1: Failed to load $Secure. [ 53.546385][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.554480][ T4613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.568774][ T4613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.641513][ T4619] loop3: detected capacity change from 0 to 256 [ 55.612686][ T4613] loop4: detected capacity change from 0 to 4096 [ 55.948769][ T4628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.900235][ T4637] loop2: detected capacity change from 0 to 64 [ 57.082683][ T4644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.086053][ T4644] device batadv_slave_0 entered promiscuous mode [ 57.164014][ T4646] lo speed is unknown, defaulting to 1000 [ 57.165863][ T4646] lo speed is unknown, defaulting to 1000 [ 57.175383][ T4647] netlink: 6 bytes leftover after parsing attributes in process `syz.0.41'. [ 57.186545][ T4647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.199104][ T4646] lo speed is unknown, defaulting to 1000 [ 57.203331][ T4646] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.224293][ T4646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.299314][ T4646] lo speed is unknown, defaulting to 1000 [ 57.301641][ T4646] lo speed is unknown, defaulting to 1000 [ 57.318089][ T4646] lo speed is unknown, defaulting to 1000 [ 57.320383][ T4646] lo speed is unknown, defaulting to 1000 [ 57.337631][ T4646] lo speed is unknown, defaulting to 1000 [ 60.091069][ T4684] fuse: Bad value for 'fd' [ 60.236448][ T4688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.56'. [ 60.367173][ T4692] loop1: detected capacity change from 0 to 512 [ 61.560707][ T4692] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.594679][ T4701] Zero length message leads to an empty skb [ 61.598712][ T4701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.60'. [ 61.601185][ T4701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 61.648182][ T4692] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 61.652355][ T4692] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.58: invalid indirect mapped block 2683928664 (level 1) [ 61.663994][ T4692] EXT4-fs (loop1): Remounting filesystem read-only [ 61.667540][ T4692] EXT4-fs (loop1): 1 truncate cleaned up [ 61.670323][ T4692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.731508][ T4702] binder: 4699:4702 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 61.766676][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.782950][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 61.790110][ T4702] binder: 4699:4702 got transaction to invalid handle, 1 [ 61.794302][ T4702] binder: 4702:4699 cannot find target node [ 61.795921][ T4702] binder: 4699:4702 transaction call to 0:0 failed 14/29201/-22, size 0-0 line 3054 [ 61.803103][ T4624] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.730063][ T4719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 64.281697][ T4738] block device autoloading is deprecated and will be removed. [ 64.638178][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.640655][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.454737][ T4758] loop0: detected capacity change from 0 to 128 [ 66.623811][ T4758] FAT-fs (loop0): bogus number of FAT structure [ 66.633299][ T4758] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 66.636198][ T4758] FAT-fs (loop0): Can't find a valid FAT filesystem [ 66.641449][ T4762] loop1: detected capacity change from 0 to 128 [ 67.808313][ T4762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.006839][ T4300] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.090359][ T4778] netlink: 96 bytes leftover after parsing attributes in process `syz.2.83'. [ 68.114759][ T4780] xt_bpf: check failed: parse error [ 68.217846][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 69.864232][ T3429] cfg80211: failed to load regulatory.db [ 70.014701][ T4802] loop2: detected capacity change from 0 to 64 [ 70.018529][ T4802] ======================================================= [ 70.018529][ T4802] WARNING: The mand mount option has been deprecated and [ 70.018529][ T4802] and is ignored by this kernel. Remove the mand [ 70.018529][ T4802] option from the mount to silence this warning. [ 70.018529][ T4802] ======================================================= [ 72.090128][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 72.099176][ T4312] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.101691][ T4312] Bluetooth: hci2: Injecting HCI hardware error event [ 72.104357][ T4312] Bluetooth: hci2: hardware error 0x00 [ 72.114490][ T4825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.97'. [ 72.123380][ T4828] fuse: Bad value for 'fd' [ 72.133882][ T4823] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 72.504878][ T4837] dccp_close: ABORT with 32 bytes unread [ 72.813255][ T4849] loop2: detected capacity change from 0 to 64 [ 72.845865][ T4849] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 72.850904][ T4849] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2 [ 72.872685][ T4845] binder: 4831:4845 ioctl c0306201 200003c0 returned -14 [ 72.882280][ T4849] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 73.996720][ T4860] binder: 4857:4860 tried to acquire reference to desc 0, got 1 instead [ 74.026113][ T4860] binder: 4857:4860 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.036102][ T4860] binder: 4860 RLIMIT_NICE not set [ 74.560226][ T4312] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.248845][ T4860] binder: 4860 RLIMIT_NICE not set [ 75.297999][ T4866] binder: 4857:4866 got reply transaction with no transaction stack [ 75.300346][ T4866] binder: 4857:4866 transaction reply to 0:0 failed 22/29201/-71, size 0-240 line 2955 [ 75.391891][ T4855] loop4: detected capacity change from 0 to 8192 [ 75.420378][ T4855] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 75.434094][ T4698] binder: release 4857:4860 transaction 21 out, still active [ 75.438092][ T4698] binder: undelivered TRANSACTION_COMPLETE [ 75.441962][ T4698] binder: release 4857:4860 transaction 21 in, still active [ 75.450748][ T4698] binder: send failed reply for transaction 21, target dead [ 75.479202][ T4698] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.966651][ T4882] ptrace attach of "./syz-executor exec"[4314] was attempted by ""[4882] [ 78.468232][ T4903] loop4: detected capacity change from 0 to 512 [ 78.490571][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 78.494652][ T4903] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.525014][ T4903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.296774][ C0] sched: RT throttling activated [ 81.170002][ T4903] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.122: inline data xattr refers to an external xattr inode [ 81.234512][ T4903] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.122: couldn't read orphan inode 17 (err -117) [ 81.305010][ T4903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.593614][ T4932] loop2: detected capacity change from 0 to 64 [ 81.610600][ T4932] syz.2.127: attempt to access beyond end of device [ 81.610600][ T4932] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 81.614684][ T4932] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 81.633066][ T4932] Trying to free block not in datazone [ 81.662342][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 82.917976][ T4942] loop0: detected capacity change from 0 to 512 [ 82.960312][ T4942] EXT2-fs (loop0): nobh option not supported [ 83.012378][ T4942] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 83.921908][ T4942] syz.0.132: attempt to access beyond end of device [ 83.921908][ T4942] loop0: rw=2049, sector=3606377190, nr_sectors = 2 limit=512 [ 83.925881][ T4942] Buffer I/O error on dev loop0, logical block 1803188595, lost async page write [ 83.945781][ T4942] syz.0.132: attempt to access beyond end of device [ 83.945781][ T4942] loop0: rw=2049, sector=3403208898, nr_sectors = 2 limit=512 [ 83.955794][ T4942] Buffer I/O error on dev loop0, logical block 1701604449, lost async page write [ 83.965935][ T4942] syz.0.132: attempt to access beyond end of device [ 83.965935][ T4942] loop0: rw=2049, sector=59108, nr_sectors = 2 limit=512 [ 83.970029][ T4942] Buffer I/O error on dev loop0, logical block 29554, lost async page write [ 83.983187][ T4942] EXT2-fs (loop0): error: ext2_fsync: detected IO error when writing metadata buffers [ 84.390585][ T4971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 84.476600][ T4971] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 84.754651][ T4980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.757662][ T4980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.769158][ T4980] loop2: detected capacity change from 0 to 256 [ 84.775369][ T4980] exfat: Deprecated parameter 'utf8' [ 84.793743][ T4980] exfat: Bad value for 'dmask' [ 84.872488][ T4981] loop3: detected capacity change from 0 to 128 [ 85.555697][ T4985] loop1: detected capacity change from 0 to 512 [ 85.597071][ T4985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.615238][ T4985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c099, mo2=0082] [ 85.626551][ T4985] System zones: 1-12 [ 85.633583][ T27] audit: type=1326 audit(85.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4987 comm="syz.4.148" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x0 [ 85.650646][ T4985] EXT4-fs (loop1): 1 truncate cleaned up [ 85.652343][ T4985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.759580][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 85.915160][ T4998] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 85.962934][ T4998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.001685][ T4994] loop0: detected capacity change from 0 to 32768 [ 86.004117][ T4994] XFS: ikeep mount option is deprecated. [ 86.005777][ T4994] XFS: noikeep mount option is deprecated. [ 86.056171][ T4994] XFS (loop0): Mounting V5 Filesystem [ 86.121759][ T4998] bond1: (slave vlan2): Opening slave failed [ 86.166660][ T4994] XFS (loop0): Ending clean mount [ 86.181357][ T4994] XFS (loop0): Quotacheck needed: Please wait. [ 86.214953][ T4994] XFS (loop0): Quotacheck: Done. [ 87.382903][ T5025] binder: 5024:5025 tried to acquire reference to desc 0, got 1 instead [ 87.427222][ T3429] binder: release 5024:5025 transaction 27 out, still active [ 87.467046][ T3429] binder: undelivered TRANSACTION_COMPLETE [ 87.476627][ T4444] binder: send failed reply for transaction 27, target dead [ 87.545992][ T4314] XFS (loop0): Unmounting Filesystem [ 89.283203][ T5050] netlink: 104 bytes leftover after parsing attributes in process `syz.2.165'. [ 89.419608][ T5056] capability: warning: `syz.1.169' uses deprecated v2 capabilities in a way that may be insecure [ 89.452186][ T5058] loop3: detected capacity change from 0 to 2048 [ 89.503699][ T5058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.505588][ T5057] lo speed is unknown, defaulting to 1000 [ 91.033373][ T5080] device gtp0 entered promiscuous mode [ 93.562953][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b4d2c3d2: rx timeout, send abort [ 94.066163][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b4d2c3d2: abort rx timeout. Force session deactivation [ 95.469662][ T5119] syz.0.186 (5119): drop_caches: 2 [ 95.631145][ T5127] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 96.510501][ T5132] device bond1 entered promiscuous mode [ 96.530776][ T5132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.609987][ T5141] loop4: detected capacity change from 0 to 164 [ 96.621707][ T5134] device ip6gretap1 entered promiscuous mode [ 96.641262][ T5134] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 96.644156][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 96.646599][ T5139] netlink: 1 bytes leftover after parsing attributes in process `syz.0.193'. [ 96.726525][ T4471] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 96.755296][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 96.771697][ T5146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 96.869923][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 97.637889][ T5141] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.717253][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 97.749605][ T5155] netlink: 'syz.2.198': attribute type 11 has an invalid length. [ 98.539306][ T5164] loop2: detected capacity change from 0 to 131072 [ 99.144352][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.147213][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.189407][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 99.215057][ T5164] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.260803][ T5164] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.327030][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 99.411190][ T5176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.414806][ T5176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.706445][ T5162] bridge0: port 3(macvlan1) entered disabled state [ 99.849077][ T5162] device macvlan1 left promiscuous mode [ 99.850634][ T5162] bridge0: port 3(macvlan1) entered disabled state [ 99.915625][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 101.221430][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.324068][ T5208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.326203][ T5208] overlayfs: failed to set xattr on upper [ 101.345201][ T5208] overlayfs: ...falling back to index=off,metacopy=off. [ 103.468574][ T5240] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 103.565708][ T5240] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 103.722548][ T5217] loop1: detected capacity change from 0 to 32768 [ 103.770940][ T5217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.217 (5217) [ 103.801671][ T5248] syz.2.225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.829822][ T5217] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.832925][ T5217] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 103.835208][ T5217] BTRFS info (device loop1): using free space tree [ 103.837868][ T5248] loop2: detected capacity change from 0 to 1024 [ 104.829114][ T5217] BTRFS error (device loop1): open_ctree failed: -12 [ 104.831613][ T5267] process 'syz.4.228' launched '/dev/fd/3' with NULL argv: empty string added [ 104.965505][ T27] audit: type=1326 audit(104.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b5bbe8 code=0x7fc00000 [ 105.021556][ T4300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4300) [ 105.962014][ T5278] bridge0: port 3(vxlan0) entered blocking state [ 105.972182][ T5278] bridge0: port 3(vxlan0) entered disabled state [ 105.984415][ T5278] device vxlan0 entered promiscuous mode [ 106.956065][ T5296] loop4: detected capacity change from 0 to 512 [ 106.961246][ T5296] ext4: Unknown parameter 'smackfsfloor' [ 107.256076][ T5309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.540199][ T5338] binder: 5337:5338 got transaction to invalid handle, 1 [ 110.542220][ T5338] binder: 5338:5337 cannot find target node [ 110.543798][ T5338] binder: 5337:5338 transaction async to 0:0 failed 31/29201/-22, size 0-0 line 3054 [ 110.560723][ T5268] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.898211][ T5349] loop1: detected capacity change from 0 to 2048 [ 111.958113][ T5349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.120930][ T5361] loop4: detected capacity change from 0 to 512 [ 112.136367][ T5361] EXT4-fs: Ignoring removed nobh option [ 112.166737][ T5361] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 112.202000][ T5361] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 112.204956][ T5361] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.260: Corrupt directory, running e2fsck is recommended [ 112.236077][ T5361] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 112.236197][ T5361] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.260: corrupted in-inode xattr [ 112.240961][ T5361] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.260: couldn't read orphan inode 15 (err -117) [ 112.241331][ T5361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.376404][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 112.637833][ T4306] EXT4-fs (loop1): unmounting filesystem. [ 112.823122][ T5377] tipc: Started in network mode [ 112.825803][ T5377] tipc: Node identity 4, cluster identity 4711 [ 112.828058][ T5377] tipc: Node number set to 4 [ 113.604377][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.630622][ T5385] netlink: 'syz.3.269': attribute type 5 has an invalid length. [ 113.647894][ T5386] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.714047][ T4312] Bluetooth: hci4: Malformed Event: 0x48 [ 113.784302][ T5392] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 113.847520][ T4392] lo speed is unknown, defaulting to 1000 [ 113.853410][ T5393] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 114.691077][ T4698] lo speed is unknown, defaulting to 1000 [ 114.898739][ T5413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.949548][ T5413] device bond_slave_0 entered promiscuous mode [ 114.951781][ T5413] device bond_slave_1 entered promiscuous mode [ 114.954063][ T5413] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 114.958157][ T5413] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 114.992093][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 116.812740][ T5425] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 116.926385][ T5429] loop1: detected capacity change from 0 to 4096 [ 116.956333][ T5429] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 116.994836][ T5429] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 117.023619][ T5429] ntfs: (device loop1): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 117.026629][ T5429] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 117.029862][ T5429] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 117.033449][ T5429] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 117.070475][ T5429] ntfs: volume version 3.1. [ 117.071831][ T5429] ntfs: (device loop1): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 117.075793][ T5429] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 117.859342][ T5429] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 118.004248][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.014468][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.029466][ T5439] netlink: 'syz.4.286': attribute type 10 has an invalid length. [ 118.068525][ T5439] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.078498][ T5439] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.205190][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 120.445467][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.295'. [ 123.290649][ T5507] ptrace attach of "./syz-executor exec"[4306] was attempted by " [ 125.789540][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 126.598857][ T5519] device vlan2 entered promiscuous mode [ 126.600614][ T5519] device bridge0 entered promiscuous mode [ 126.606490][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.608419][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.306383][ T5541] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.314153][ T5541] CIFS mount error: No usable UNC path provided in device string! [ 127.314153][ T5541] [ 127.317265][ T5541] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.045040][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 128.092169][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.094676][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.255334][ T5557] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 129.244487][ T5557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.121609][ T5588] tipc: Enabled bearer , priority 10 [ 131.145429][ T27] audit: type=1326 audit(131.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7fc00000 [ 131.197206][ T27] audit: type=1326 audit(131.170:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7fc00000 [ 131.229772][ T5588] tipc: Enabled bearer , priority 10 [ 131.296748][ T27] audit: type=1326 audit(131.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5593 comm="syz.0.340" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b5bbe8 code=0x0 [ 131.337525][ T5592] netlink: 'syz.2.339': attribute type 4 has an invalid length. [ 131.408942][ T5592] netlink: 'syz.2.339': attribute type 4 has an invalid length. [ 131.733417][ T5606] netlink: 204 bytes leftover after parsing attributes in process `syz.1.343'. [ 132.988382][ T5610] fuse: Bad value for 'fd' [ 133.139293][ T5612] tipc: Started in network mode [ 133.140767][ T5612] tipc: Node identity ac1414aa, cluster identity 4711 [ 133.143005][ T5612] tipc: Enabled bearer , priority 10 [ 133.218389][ T5616] tipc: Enabled bearer , priority 0 [ 133.317352][ T5618] netlink: 165 bytes leftover after parsing attributes in process `syz.2.347'. [ 134.324602][ T4444] tipc: Node number set to 2886997162 [ 138.639325][ T5645] loop0: detected capacity change from 0 to 32768 [ 138.737023][ T5645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.356 (5645) [ 139.051703][ T5677] capability: warning: `syz.3.364' uses 32-bit capabilities (legacy support in use) [ 141.667170][ T5645] BTRFS error (device loop0): open_ctree failed: -4 [ 141.820006][ T4300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4300) [ 141.892677][ T5693] binder: 5692:5693 tried to acquire reference to desc 0, got 1 instead [ 141.913647][ T5693] binder: tried to use weak ref as strong ref [ 141.915502][ T5693] binder: 5692:5693 got transaction to invalid handle, 1 [ 141.953330][ T5693] binder: 5693:5692 cannot find target node [ 141.955049][ T5693] binder: 5692:5693 transaction call to 0:0 failed 43/29201/-22, size 0-0 line 3054 [ 141.961442][ T5696] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 142.058158][ T5696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.105919][ T4624] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.128775][ T4624] binder: undelivered transaction 36, process died. [ 142.130839][ T4624] binder: undelivered TRANSACTION_COMPLETE [ 142.155573][ T5702] syz.3.373 uses obsolete (PF_INET,SOCK_PACKET) [ 142.187862][ T5698] bond1: (slave ip6erspan0): making interface the new active one [ 142.191931][ T5698] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 142.235401][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 142.249037][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.328747][ T5706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.331572][ T5706] bond1: (slave bond2): Enslaving as an active interface with an up link [ 142.354459][ T5696] device gretap1 entered promiscuous mode [ 142.359034][ T5696] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 142.415895][ T5705] mmap: syz.4.375 (5705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.630479][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 142.636074][ T5703] bond1 (unregistering): (slave bond2): Releasing backup interface [ 143.508536][ T5703] bond1 (unregistering): Released all slaves [ 144.844237][ T5723] loop4: detected capacity change from 0 to 8192 [ 144.996318][ T5743] Set syz0 is full, maxelem 0 reached [ 145.433460][ T5753] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 145.542552][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.544865][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.905363][ T5774] binder: 5773:5774 ioctl c0306201 20000080 returned -14 [ 147.921153][ T5774] binder: 5773:5774 tried to acquire reference to desc 0, got 1 instead [ 147.943694][ T4361] binder: undelivered transaction 48, process died. [ 148.005588][ T5776] siw: device registration error -23 [ 148.536027][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.575536][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.062583][ T5744] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.065088][ T5744] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.068055][ T5744] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.070604][ T5744] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.399403][ T5772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.392'. [ 149.401902][ T5772] netlink: 152 bytes leftover after parsing attributes in process `syz.3.392'. [ 149.437478][ T5772] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 149.442218][ T5776] netlink: 6 bytes leftover after parsing attributes in process `syz.1.394'. [ 149.444519][ T5776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.452028][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 149.479925][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 152.780934][ T5830] overlayfs: failed to clone upperpath [ 152.799244][ T5830] overlayfs: failed to clone upperpath [ 153.768459][ T5843] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 153.849434][ T5843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.866198][ T5846] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.971637][ T5863] Invalid ELF header magic: != ELF [ 155.864589][ T5868] loop0: detected capacity change from 0 to 1024 [ 155.925033][ T5871] lo speed is unknown, defaulting to 1000 [ 155.945680][ T5871] lo speed is unknown, defaulting to 1000 [ 155.974957][ T5871] lo speed is unknown, defaulting to 1000 [ 155.987001][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 156.006395][ T5875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.428'. [ 156.089213][ T4444] lo speed is unknown, defaulting to 1000 [ 156.097533][ T5871] infiniband sz1: set down [ 156.099048][ T5871] infiniband sz1: added lo [ 156.156326][ T5881] tipc: Enabling of bearer rejected, already enabled [ 156.167676][ T5887] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 156.188718][ T5871] RDS/IB: sz1: added [ 156.190574][ T5871] smc: adding ib device sz1 with port count 1 [ 156.222738][ T5885] netlink: 'syz.4.433': attribute type 5 has an invalid length. [ 156.227800][ T5881] tipc: Enabled bearer , priority 0 [ 156.242252][ T5871] smc: ib device sz1 port 1 has pnetid [ 156.261907][ T4421] lo speed is unknown, defaulting to 1000 [ 156.275749][ T5871] lo speed is unknown, defaulting to 1000 [ 156.288702][ T5887] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 156.546950][ T5871] lo speed is unknown, defaulting to 1000 [ 158.815543][ T5871] lo speed is unknown, defaulting to 1000 [ 160.382396][ T5871] lo speed is unknown, defaulting to 1000 [ 160.539811][ T5925] dccp_close: ABORT with 32 bytes unread [ 160.628721][ T5871] lo speed is unknown, defaulting to 1000 [ 160.669077][ T5929] tipc: Started in network mode [ 160.670569][ T5929] tipc: Node identity ac1414aa, cluster identity 4711 [ 160.672680][ T5929] tipc: Enabled bearer , priority 10 [ 160.682079][ T5929] tipc: Enabled bearer , priority 0 [ 160.704549][ T5933] netlink: 'syz.1.447': attribute type 4 has an invalid length. [ 160.759963][ T5935] netlink: 'syz.1.447': attribute type 4 has an invalid length. [ 160.811999][ T5927] siw: device registration error -23 [ 160.840167][ T5936] netlink: 6 bytes leftover after parsing attributes in process `syz.4.445'. [ 160.842768][ T5936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.168120][ T5758] tipc: Node number set to 2886997162 [ 162.176545][ T5941] netlink: 'syz.2.448': attribute type 5 has an invalid length. [ 162.489236][ T5957] loop4: detected capacity change from 0 to 16 [ 162.496746][ T5957] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 164.875508][ T4312] Bluetooth: hci1: command 0x0406 tx timeout [ 164.877603][ T4312] Bluetooth: hci3: command 0x0406 tx timeout [ 164.887071][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 165.084860][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 167.181655][ T5989] Invalid ELF header magic: != ELF [ 168.261465][ T5986] device batadv_slave_0 entered promiscuous mode [ 169.504750][ T5998] siw: device registration error -23 [ 169.509068][ T5998] netlink: 6 bytes leftover after parsing attributes in process `syz.3.466'. [ 169.511733][ T5998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.600066][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 179.869610][ T6090] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 179.872759][ T6090] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 180.642453][ T6094] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.645684][ T6094] FAT-fs (loop9): unable to read boot sector [ 180.752023][ T27] audit: type=1326 audit(180.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 180.856548][ T27] audit: type=1326 audit(180.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 182.886047][ T27] audit: type=1326 audit(180.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 183.088170][ T27] audit: type=1326 audit(180.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa655a114 code=0x7ffc0000 [ 183.099208][ T27] audit: type=1326 audit(180.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa655d74c code=0x7ffc0000 [ 183.265643][ T27] audit: type=1326 audit(180.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 183.465295][ T27] audit: type=1326 audit(180.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa655d74c code=0x7ffc0000 [ 183.474123][ T27] audit: type=1326 audit(180.720:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa655a4ec code=0x7ffc0000 [ 183.571875][ T27] audit: type=1326 audit(180.720:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 183.577927][ T27] audit: type=1326 audit(180.820:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 183.981598][ T6111] loop0: detected capacity change from 0 to 16 [ 185.611054][ T6111] erofs: (device loop0): mounted with root inode @ nid 36. [ 187.054251][ T6130] loop0: detected capacity change from 0 to 16 [ 187.064556][ T6130] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 187.416909][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.418816][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.314925][ T6134] device veth0_vlan left promiscuous mode [ 188.336689][ T6134] device veth0_vlan entered promiscuous mode [ 189.599999][ T6144] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 189.622438][ T6144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.327244][ T6147] bond2: (slave veth3): Enslaving as an active interface with a down link [ 190.519767][ T6144] device veth1 entered promiscuous mode [ 190.522986][ T6144] device veth1 left promiscuous mode [ 190.526009][ T6144] bond2: (slave vlan2): making interface the new active one [ 190.548837][ T6144] device veth1 entered promiscuous mode [ 190.551302][ T6144] device vlan2 entered promiscuous mode [ 190.556222][ T6144] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 190.583650][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 193.636668][ T6192] loop4: detected capacity change from 0 to 256 [ 194.775502][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.823048][ T6168] tipc: Resetting bearer [ 196.567240][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.603232][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.039308][ T6168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.041879][ T6168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.044281][ T6168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.047967][ T6168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.099224][ T5758] lo speed is unknown, defaulting to 1000 [ 198.099266][ T6174] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 198.306985][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 198.312944][ T6213] lo speed is unknown, defaulting to 1000 [ 198.315921][ T6213] lo speed is unknown, defaulting to 1000 [ 200.845800][ T6240] loop0: detected capacity change from 0 to 256 [ 202.112663][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.168204][ T6252] 9pnet_fd: Insufficient options for proto=fd [ 202.181587][ T6257] loop4: detected capacity change from 0 to 512 [ 202.204490][ T6257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.206416][ T6257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.270021][ T6261] netlink: 'syz.3.541': attribute type 8 has an invalid length. [ 202.283599][ T6257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.395690][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 202.405497][ T6264] 9pnet_fd: Insufficient options for proto=fd [ 202.423793][ T6264] loop0: detected capacity change from 0 to 512 [ 202.445731][ T6264] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.486896][ T6264] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 203.627880][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 203.627892][ T27] audit: type=1326 audit(203.610:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 203.640125][ T27] audit: type=1326 audit(203.620:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 203.653333][ T27] audit: type=1326 audit(203.620:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 203.665197][ T27] audit: type=1326 audit(203.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 203.695919][ T27] audit: type=1326 audit(203.630:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 204.284204][ T27] audit: type=1326 audit(203.630:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 204.365798][ T27] audit: type=1326 audit(203.630:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 204.408007][ T27] audit: type=1326 audit(203.630:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 204.414402][ T27] audit: type=1326 audit(203.630:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 204.425997][ T27] audit: type=1326 audit(203.630:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa655bbe8 code=0x7ffc0000 [ 205.330260][ T6307] loop4: detected capacity change from 0 to 128 [ 205.345466][ T6308] syz.3.553 sent an empty control message without MSG_MORE. [ 206.889706][ T6307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.212810][ T6338] trusted_key: encrypted_key: insufficient parameters specified [ 208.426447][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 208.631775][ T6354] netlink: 'syz.0.567': attribute type 12 has an invalid length. [ 208.634276][ T6354] netlink: 'syz.0.567': attribute type 29 has an invalid length. [ 208.636521][ T6354] netlink: 148 bytes leftover after parsing attributes in process `syz.0.567'. [ 210.066041][ T6354] loop0: detected capacity change from 0 to 1024 [ 210.116623][ T6354] hfsplus: xattr searching failed [ 213.085195][ T47] Bluetooth: Wrong link type (-22) [ 217.864378][ T6489] device batadv0 entered promiscuous mode [ 217.866428][ T6489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.052922][ T6489] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 219.578958][ T6516] tipc: Failed to remove unknown binding: 66,1,1/0:2079073049/2079073051 [ 219.607955][ T6516] tipc: Failed to remove unknown binding: 66,1,1/0:2079073049/2079073051 [ 219.610694][ T6516] tipc: Failed to remove unknown binding: 66,1,1/0:2079073049/2079073051 [ 219.712610][ T6522] binder: 6521:6522 tried to acquire reference to desc 0, got 1 instead [ 219.715889][ T6522] binder: 6521:6522 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 219.719824][ T6522] binder: 6522 RLIMIT_NICE not set [ 219.721266][ T6522] binder: 6522 RLIMIT_NICE not set [ 219.722919][ T6522] binder: release 6521:6522 transaction 59 in, still active [ 219.725130][ T6522] binder: send failed reply for transaction 59 to 6521:6522 [ 219.728348][ T14] binder: undelivered TRANSACTION_COMPLETE [ 219.730029][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.605609][ T6540] netlink: 'syz.2.607': attribute type 3 has an invalid length. [ 221.608050][ T6540] netlink: 'syz.2.607': attribute type 3 has an invalid length. [ 225.771223][ T6570] device gtp0 entered promiscuous mode [ 226.044447][ T6575] loop4: detected capacity change from 0 to 1024 [ 227.128572][ T39] hfsplus: b-tree write err: -5, ino 4 [ 228.766555][ T6596] lo speed is unknown, defaulting to 1000 [ 228.769237][ T6596] lo speed is unknown, defaulting to 1000 [ 228.770971][ T6596] lo speed is unknown, defaulting to 1000 [ 228.771158][ T6585] delete_channel: no stack [ 228.912038][ T6596] infiniband syz0: set active [ 228.913413][ T6596] infiniband syz0: added lo [ 229.466842][ T6596] infiniband syz0: Couldn't open port 1 [ 229.528517][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.547800][ T4444] lo speed is unknown, defaulting to 1000 [ 229.591570][ T6596] RDS/IB: syz0: added [ 229.592782][ T6596] smc: adding ib device syz0 with port count 1 [ 229.594461][ T6596] smc: ib device syz0 port 1 has pnetid [ 229.598884][ T6596] lo speed is unknown, defaulting to 1000 [ 229.603634][ T5758] lo speed is unknown, defaulting to 1000 [ 229.706905][ T6596] lo speed is unknown, defaulting to 1000 [ 229.746269][ T6596] lo speed is unknown, defaulting to 1000 [ 229.780689][ T6596] lo speed is unknown, defaulting to 1000 [ 229.815225][ T6596] lo speed is unknown, defaulting to 1000 [ 230.670562][ T6614] tipc: Enabled bearer , priority 0 [ 230.692613][ T6614] device syzkaller0 entered promiscuous mode [ 230.700562][ T6616] tipc: Started in network mode [ 230.702038][ T6616] tipc: Node identity ac1414aa, cluster identity 4711 [ 230.709016][ T6616] tipc: Enabled bearer , priority 10 [ 230.717436][ T6614] tipc: Resetting bearer [ 230.723385][ T6612] tipc: Resetting bearer [ 231.372470][ T6612] tipc: Disabling bearer [ 231.439738][ T6626] tipc: Enabled bearer , priority 0 [ 231.443001][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 231.465132][ T6632] bridge1: port 1(ip6gretap1) entered blocking state [ 231.481592][ T6632] bridge1: port 1(ip6gretap1) entered disabled state [ 231.487731][ T6632] device ip6gretap1 entered promiscuous mode [ 231.548633][ T6625] device veth7 entered promiscuous mode [ 231.550572][ T6625] bridge1: port 2(veth7) entered blocking state [ 231.555720][ T6625] bridge1: port 2(veth7) entered disabled state [ 232.606439][ T4353] tipc: Node number set to 2886997162 [ 232.661271][ T6644] binder: 6641:6644 tried to acquire reference to desc 0, got 1 instead [ 232.696227][ T6644] binder: 6641:6644 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 232.717080][ T6644] binder: 6644 RLIMIT_NICE not set [ 232.718650][ T6644] binder: 6644 RLIMIT_NICE not set [ 232.727552][ T6644] binder: 6644 RLIMIT_NICE not set [ 232.736617][ T6644] binder: 6641:6644 got transaction with invalid data ptr [ 232.766397][ T6644] binder: 6641:6644 transaction reply to 6641:6644 failed 65/29201/-14, size 16384-0 line 3574 [ 232.776882][ T6644] binder: send failed reply for transaction 64 to 6641:6644 [ 232.812400][ T112] binder: undelivered TRANSACTION_ERROR: 29190 [ 232.814623][ T112] binder: undelivered TRANSACTION_COMPLETE [ 232.816495][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.763895][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 241.315376][ T6740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.115206][ T6748] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 243.117574][ T6748] device syz_tun entered promiscuous mode [ 243.145863][ T6748] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 246.338990][ T6767] loop0: detected capacity change from 0 to 128 [ 246.507722][ T6767] FAT-fs (loop0): bogus logical sector size 0 [ 246.509486][ T6767] FAT-fs (loop0): Can't find a valid FAT filesystem [ 248.648618][ T6680] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.759406][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 248.764177][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 248.787523][ T6792] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 248.789771][ T6792] bridge0: port 3(team0) entered blocking state [ 248.792134][ T6792] bridge0: port 3(team0) entered disabled state [ 248.819668][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.821541][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.975558][ T6792] device team0 entered promiscuous mode [ 248.977985][ T6792] device team_slave_0 entered promiscuous mode [ 248.980486][ T6792] device team_slave_1 entered promiscuous mode [ 248.983894][ T6792] bridge0: port 3(team0) entered blocking state [ 248.985651][ T6792] bridge0: port 3(team0) entered forwarding state [ 251.823936][ T6821] lo speed is unknown, defaulting to 1000 [ 251.826097][ T6821] lo speed is unknown, defaulting to 1000 [ 251.860478][ T6821] lo speed is unknown, defaulting to 1000 [ 251.973747][ T6821] loop0: detected capacity change from 0 to 512 [ 251.976088][ T6821] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.978642][ T6821] EXT4-fs: Ignoring removed bh option [ 251.992606][ T6821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.995761][ T6821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.039617][ T6821] EXT4-fs (loop0): 1 truncate cleaned up [ 252.041267][ T6821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.240895][ T4314] EXT4-fs (loop0): unmounting filesystem. [ 254.195820][ T6848] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 257.823868][ T6891] loop0: detected capacity change from 0 to 1024 [ 257.874641][ T6891] EXT4-fs: Ignoring removed oldalloc option [ 257.906547][ T6891] EXT4-fs: Ignoring removed nobh option [ 257.916637][ T6891] EXT4-fs: Ignoring removed bh option [ 257.946548][ T6891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.161915][ T6891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.776128][ T4314] EXT4-fs (loop0): unmounting filesystem. [ 259.887814][ T6919] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 259.941596][ T6919] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.944352][ T6919] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.947123][ T6919] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.949703][ T6919] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.953336][ T6919] bond2: (slave geneve2): making interface the new active one [ 259.956897][ T6919] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 259.966214][ T6922] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 260.034099][ T6922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 260.045661][ T6922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 260.055985][ T6922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 260.066455][ T6922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 260.082251][ T6922] bond3: (slave geneve2): making interface the new active one [ 260.090964][ T6922] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 260.095128][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 260.109791][ T6926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.467709][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 265.488399][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 267.517973][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 267.619251][ T6993] bridge0: port 3(syz_tun) entered blocking state [ 267.622125][ T6993] bridge0: port 3(syz_tun) entered disabled state [ 267.625357][ T6993] device syz_tun entered promiscuous mode [ 268.517978][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 268.665121][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 268.665134][ T27] audit: type=1326 audit(268.640:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 268.771547][ T27] audit: type=1326 audit(268.750:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 268.809027][ T27] audit: type=1326 audit(268.760:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 268.814882][ T27] audit: type=1326 audit(268.760:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.099332][ T27] audit: type=1326 audit(268.760:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.147518][ T27] audit: type=1326 audit(268.760:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.276408][ T27] audit: type=1326 audit(268.760:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.282417][ T27] audit: type=1326 audit(268.760:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.288144][ T27] audit: type=1326 audit(268.760:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.293731][ T27] audit: type=1326 audit(268.760:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 270.526628][ T7034] IPv6: sit1: Disabled Multicast RS [ 271.495345][ T7042] MPTCP: kernel_bind error, err=-99 [ 271.521933][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'. [ 271.598176][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.756'. [ 272.924245][ T7070] fuse: Bad value for 'fd' [ 273.973548][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.977818][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.688885][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.742946][ T7104] could not allocate digest TFM handle sha1-ssse3 [ 277.830053][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 277.830065][ T27] audit: type=1326 audit(277.810:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.780" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f5bbe8 code=0x0 [ 279.223071][ T7161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.789'. [ 281.856388][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 281.883185][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.798'. [ 282.345189][ T27] audit: type=1326 audit(282.300:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.0.807" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b5bbe8 code=0x0 [ 283.993617][ T7236] loop4: detected capacity change from 0 to 1024 [ 284.030088][ T7236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.148263][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.405513][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.477948][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.482369][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 288.203667][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.137232][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.258195][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.020464][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.260099][ T7306] loop4: detected capacity change from 0 to 4096 [ 290.267210][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.315393][ T7306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.419553][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.259699][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 292.289915][ T7324] netlink: 'syz.1.836': attribute type 4 has an invalid length. [ 292.724382][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.012250][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 293.044986][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 293.065622][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.274261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.317818][ T7340] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 295.479763][ T7347] xt_bpf: check failed: parse error [ 295.624337][ T7353] Cannot find set identified by id 0 to match [ 296.351155][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.367689][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.607478][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 296.881178][ T7375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.884108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.899332][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 296.903652][ T7375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.927784][ T7375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.930639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.943429][ T7375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.073118][ T7419] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 300.928533][ T4353] net_ratelimit: 19 callbacks suppressed [ 300.928548][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.952086][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.985397][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.062878][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.889360][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.892164][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.946211][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 301.956989][ T7434] 8021q: VLANs not supported on vcan0 [ 302.017005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.112908][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.056923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.232120][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.104922][ T27] audit: type=1326 audit(305.070:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.112259][ T27] audit: type=1326 audit(305.070:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.119037][ T27] audit: type=1326 audit(305.070:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.125078][ T27] audit: type=1326 audit(305.080:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8215a114 code=0x7ffc0000 [ 305.142425][ T27] audit: type=1326 audit(305.080:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.148251][ T27] audit: type=1326 audit(305.080:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.153693][ T27] audit: type=1326 audit(305.080:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.177168][ T27] audit: type=1326 audit(305.080:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.183511][ T27] audit: type=1326 audit(305.160:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 305.206115][ T27] audit: type=1326 audit(305.160:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 307.128489][ T4353] net_ratelimit: 6 callbacks suppressed [ 307.128504][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.139792][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.224734][ T7489] set match dimension is over the limit! [ 307.777002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.346938][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.362024][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.177199][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.198977][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.261259][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.263140][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.265711][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.569708][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 311.588526][ T7529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 312.342252][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.525035][ T7541] loop4: detected capacity change from 0 to 4096 [ 312.541474][ T7541] __ntfs_error: 18 callbacks suppressed [ 312.541488][ T7541] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 312.546754][ T7541] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 313.602022][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.604954][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.796902][ T7541] ntfs: (device loop4): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 313.799618][ T7541] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 313.801785][ T7541] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 313.805342][ T7541] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 313.834794][ T7541] ntfs: volume version 3.1. [ 313.836086][ T7541] ntfs: (device loop4): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 313.909963][ T7541] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 313.914027][ T7541] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 314.783511][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.844654][ T47] Bluetooth: hci1: Malformed Event: 0x48 [ 316.223501][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.225921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.348548][ T47] Bluetooth: hci1: hardware error 0x09 [ 317.271481][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.492548][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.723808][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.812722][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.579130][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.667652][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.670253][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.134678][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.921'. [ 322.328149][ T7624] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 322.496894][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 322.522438][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.596552][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.556550][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.661919][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.046337][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.597126][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.376273][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 328.211896][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.234385][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.247104][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.343381][ T7670] could not allocate digest TFM handle sha1-ssse3 [ 330.370819][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.439187][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.662068][ T7709] trusted_key: encrypted_key: insufficient parameters specified [ 331.508779][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.515718][ T4576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.520702][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.597033][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.017193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.620999][ T4392] net_ratelimit: 2 callbacks suppressed [ 333.621014][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.889749][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.786050][ T27] audit: type=1326 audit(335.760:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.955" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x0 [ 335.799046][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 335.816274][ T7758] bridge3: port 1(ip6gretap1) entered blocking state [ 335.818980][ T7758] bridge3: port 1(ip6gretap1) entered disabled state [ 335.821895][ T7758] device ip6gretap1 entered promiscuous mode [ 336.050825][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.501993][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.504831][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.575255][ T7758] device veth7 entered promiscuous mode [ 337.537182][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.585731][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 338.417512][ T4568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.420833][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.466656][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.605665][ T7788] lo speed is unknown, defaulting to 1000 [ 338.612030][ T7792] netlink: 'syz.1.983': attribute type 3 has an invalid length. [ 338.621738][ T7792] netlink: 'syz.1.983': attribute type 3 has an invalid length. [ 338.630386][ T7788] lo speed is unknown, defaulting to 1000 [ 338.642134][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.699897][ T7788] lo speed is unknown, defaulting to 1000 [ 339.552041][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.784367][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.610354][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.378000][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 344.383946][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.390020][ T4462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.667925][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.672005][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.676050][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.155204][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.198026][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 346.217396][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.096545][ T7857] rdma_rxe: rxe_register_device failed with error -23 [ 347.101344][ T7857] rdma_rxe: failed to add lo [ 347.823747][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.451681][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.461233][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.511644][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 350.545033][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.589800][ T7877] bridge2: port 1(ip6gretap1) entered blocking state [ 350.592269][ T7877] bridge2: port 1(ip6gretap1) entered disabled state [ 351.021322][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.082526][ T7877] device ip6gretap1 entered promiscuous mode [ 351.098423][ T7882] device veth7 entered promiscuous mode [ 351.100197][ T7882] bridge2: port 2(veth7) entered blocking state [ 351.102225][ T7882] bridge2: port 2(veth7) entered disabled state [ 353.779892][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.607095][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.673946][ T7931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.574035][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.285861][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 357.307656][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.310142][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.317897][ T7935] lo speed is unknown, defaulting to 1000 [ 357.342785][ T7935] lo speed is unknown, defaulting to 1000 [ 357.514986][ T7944] tipc: Failed to remove unknown binding: 66,1,1/4:242328538/242328540 [ 357.525769][ T7935] lo speed is unknown, defaulting to 1000 [ 357.531432][ T7937] bridge4: port 1(ip6gretap1) entered blocking state [ 357.535946][ T7937] bridge4: port 1(ip6gretap1) entered disabled state [ 357.575042][ T7944] tipc: Failed to remove unknown binding: 66,1,1/4:242328538/242328540 [ 357.578287][ T7944] tipc: Failed to remove unknown binding: 66,1,1/4:242328538/242328540 [ 358.004001][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.069145][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.088338][ T7937] device ip6gretap1 entered promiscuous mode [ 358.160993][ T7937] device veth3 entered promiscuous mode [ 358.163068][ T7937] bridge4: port 2(veth3) entered blocking state [ 358.164923][ T7937] bridge4: port 2(veth3) entered disabled state [ 358.513758][ T7957] fuse: Bad value for 'fd' [ 359.924246][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.483984][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.541802][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.736018][ T7967] netlink: 'syz.1.1022': attribute type 11 has an invalid length. [ 362.918589][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.145695][ T7999] tipc: Failed to remove unknown binding: 66,1,1/0:1255883061/1255883063 [ 363.861345][ T7999] tipc: Failed to remove unknown binding: 66,1,1/0:1255883061/1255883063 [ 363.863739][ T7999] tipc: Failed to remove unknown binding: 66,1,1/0:1255883061/1255883063 [ 363.925235][ T8005] MPTCP: kernel_bind error, err=-99 [ 364.017045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.098999][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 364.124424][ T8011] device veth7 entered promiscuous mode [ 364.126325][ T8011] bridge3: port 1(veth7) entered blocking state [ 364.129390][ T8011] bridge3: port 1(veth7) entered disabled state [ 365.665771][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.950165][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.964681][ T8023] device gtp0 entered promiscuous mode [ 365.980167][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 365.984026][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 367.496090][ T8033] overlayfs: failed to clone upperpath [ 367.509708][ T8033] overlayfs: failed to clone upperpath [ 367.765219][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.773590][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.979897][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.103962][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.288401][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.572729][ T8066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.594380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.792993][ T8066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.819146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.174559][ T8065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.411840][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.916673][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.924954][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.586928][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.595482][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.660975][ T8079] netlink: 'syz.1.1054': attribute type 10 has an invalid length. [ 372.663854][ T8079] device syz_tun entered promiscuous mode [ 372.675760][ T8079] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 373.026258][ T8086] overlayfs: failed to clone upperpath [ 374.283987][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.346732][ T8086] overlayfs: failed to clone upperpath [ 375.767094][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.254240][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.055919][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.128279][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.158570][ T4462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.163091][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.167401][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.389646][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.409735][ T4568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.580623][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.948112][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.226904][ T27] audit: type=1326 audit(381.170:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.232888][ T27] audit: type=1326 audit(381.170:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.276899][ T27] audit: type=1326 audit(381.170:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.335693][ T27] audit: type=1326 audit(381.170:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.472949][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.536863][ T27] audit: type=1326 audit(381.170:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.556839][ T27] audit: type=1326 audit(381.170:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 381.562802][ T27] audit: type=1326 audit(381.170:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 383.144566][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.148317][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.161332][ T27] audit: type=1326 audit(381.170:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 383.199372][ T27] audit: type=1326 audit(381.170:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 383.237992][ T27] audit: type=1326 audit(381.180:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffff90b5bbe8 code=0x7ffc0000 [ 384.607769][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.685119][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.696603][ T8187] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.719963][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.722509][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.725065][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.765486][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.769314][ T8187] FAT-fs (loop5): unable to read boot sector [ 385.771672][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.638407][ T8190] net_ratelimit: 106 callbacks suppressed [ 386.638423][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.190585][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.572490][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.575807][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.633467][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.636152][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.638863][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.641298][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.643800][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.646278][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.617222][ T4392] net_ratelimit: 61 callbacks suppressed [ 392.617238][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.837450][ T8254] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 393.757871][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.857046][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.832550][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.991502][ T8281] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 395.944888][ T8289] bond4 (unregistering): Released all slaves [ 396.040658][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.785670][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.790214][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.336899][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 398.359426][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 398.440188][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.492153][ T8325] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 398.556894][ T8328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.559521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.435067][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.567413][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.240769][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.495764][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.497248][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.706409][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.405340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.576014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.578491][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.933914][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.959409][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 410.045256][ T8422] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 410.058338][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.256234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.267660][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.601345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.639559][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 414.654674][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 414.676529][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 414.676541][ T27] audit: type=1326 audit(670.641:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 414.685080][ T27] audit: type=1326 audit(670.641:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 414.693105][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1155'. [ 414.736438][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 414.756617][ T27] audit: type=1326 audit(670.661:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 414.787063][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.788904][ T27] audit: type=1326 audit(670.671:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 414.796128][ T27] audit: type=1326 audit(670.671:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215bbe8 code=0x7ffc0000 [ 415.610559][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.628599][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.933837][ T8502] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 416.979289][ T8508] tipc: Enabling of bearer rejected, failed to enable media [ 418.623758][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.631089][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.650920][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 418.657278][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.606618][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.800967][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.872378][ T8561] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 422.668565][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.712985][ T8561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.754222][ T8561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.756700][ T8561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.780014][ T8561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.792781][ T8561] bond1: (slave geneve2): making interface the new active one [ 422.801029][ T8561] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 424.576976][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.718184][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.738326][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.346451][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.596568][ T8620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.600420][ T8620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.603077][ T8620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.606208][ T8620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.609622][ T8620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.017045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.719064][ T4421] net_ratelimit: 10 callbacks suppressed [ 429.719080][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.350480][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.121738][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.130185][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.137449][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.139321][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.767767][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 433.779259][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 433.823588][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1215'. [ 433.841824][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 434.270239][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.147686][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.727747][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.780314][ T8719] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 438.725879][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.728717][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.787303][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 438.791870][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 438.823921][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1232'. [ 438.855793][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 438.873111][ T8737] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1228'. [ 439.809594][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.928829][ T8758] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 440.302077][ T8763] bridge0: port 3(netdevsim0) entered blocking state [ 440.305327][ T8763] bridge0: port 3(netdevsim0) entered disabled state [ 440.339139][ T8763] device netdevsim0 entered promiscuous mode [ 441.527854][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.535901][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 441.679619][ T8758] device veth9 entered promiscuous mode [ 441.698254][ T8758] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 443.242137][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.567134][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.267218][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.292055][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1250'. [ 444.563421][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.617378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.713140][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.004565][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.007910][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.010460][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.738448][ T14] net_ratelimit: 10 callbacks suppressed [ 446.738463][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.846222][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.348503][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.607227][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.136954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.686989][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.909312][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.077952][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.257090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.099838][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.506356][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.230205][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.388179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.218982][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.244284][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.254937][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.269280][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.271799][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.476983][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.492754][ T8902] device batadv_slave_0 entered promiscuous mode [ 458.976947][ C1] net_ratelimit: 275 callbacks suppressed [ 458.976964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.138302][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.261469][ T8920] tipc: Enabling of bearer rejected, failed to enable media [ 459.279139][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 460.103000][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.308024][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.536959][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.139606][ T8948] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 462.589148][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.054484][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.057910][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.346953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.577107][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.579485][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.582385][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.591842][ T4544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.594884][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.598192][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.169666][ T8999] overlayfs: failed to clone upperpath [ 468.058660][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.117293][ T4392] net_ratelimit: 3 callbacks suppressed [ 471.117317][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.137974][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.492133][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.508612][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.511793][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.542878][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.587040][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.589566][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.732903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.273268][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.654042][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.679722][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.682638][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.741843][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.940054][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.975160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.465601][ T9110] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 483.468627][ T9110] Mem abort info: [ 483.469683][ T9110] ESR = 0x0000000086000006 [ 483.470867][ T9110] EC = 0x21: IABT (current EL), IL = 32 bits [ 483.472483][ T9110] SET = 0, FnV = 0 [ 483.473561][ T9110] EA = 0, S1PTW = 0 [ 483.474644][ T9110] FSC = 0x06: level 2 translation fault [ 483.476341][ T9110] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010d739000 [ 483.478461][ T9110] [0000000000000000] pgd=0800000120c41003, p4d=0800000120c41003, pud=080000011babf003, pmd=0000000000000000 [ 483.481675][ T9110] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 483.483568][ T9110] Modules linked in: [ 483.484553][ T9110] CPU: 0 PID: 9110 Comm: syz.4.1334 Not tainted 6.1.146-syzkaller #0 [ 483.486786][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.489598][ T9110] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 483.491750][ T9110] pc : 0x0 [ 483.492571][ T9110] lr : bond_xdp_xmit+0x27c/0x45c [ 483.494003][ T9110] sp : ffff800020ab7220 [ 483.495103][ T9110] x29: ffff800020ab72e0 x28: 000000000000000f x27: ffff800020ab7248 [ 483.497266][ T9110] x26: dfff800000000000 x25: ffff800012b4c5f8 x24: ffff0000f2748000 [ 483.499462][ T9110] x23: fffffbffeff3c068 x22: ffff0000f26f8000 x21: fffffbffeff3c068 [ 483.501689][ T9110] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 483.503861][ T9110] x17: 0000000000000000 x16: ffff8000082d0f50 x15: 0000000000000002 [ 483.506031][ T9110] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 483.508165][ T9110] x11: 0000000000002bbb x10: ffff80002582b000 x9 : ffff800020ab7280 [ 483.510395][ T9110] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 483.512593][ T9110] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 483.514861][ T9110] x2 : ffff800020ab72a0 x1 : 0000000000000001 x0 : ffff0000f2748000 [ 483.517130][ T9110] Call trace: [ 483.518049][ T9110] 0x0 [ 483.518865][ T9110] bq_xmit_all+0xab0/0xf10 [ 483.520106][ T9110] __dev_flush+0xc4/0x18c [ 483.521292][ T9110] xdp_do_flush+0x14/0x28 [ 483.522524][ T9110] bpf_test_run_xdp_live+0x10e0/0x1544 [ 483.523978][ T9110] bpf_prog_test_run_xdp+0x560/0xb88 [ 483.525425][ T9110] bpf_prog_test_run+0x2dc/0x364 [ 483.526866][ T9110] __sys_bpf+0x4ec/0x634 [ 483.528046][ T9110] __arm64_sys_bpf+0x80/0x98 [ 483.529289][ T9110] invoke_syscall+0x98/0x2bc [ 483.530576][ T9110] el0_svc_common+0x138/0x258 [ 483.531884][ T9110] do_el0_svc+0x58/0x13c [ 483.533026][ T9110] el0_svc+0x58/0x138 [ 483.534138][ T9110] el0t_64_sync_handler+0x84/0xf0 [ 483.535503][ T9110] el0t_64_sync+0x18c/0x190 [ 483.536703][ T9110] Code: bad PC value [ 483.537761][ T9110] ---[ end trace 0000000000000000 ]--- [ 483.586718][ T9119] device batadv_slave_0 entered promiscuous mode [ 484.040359][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.168881][ T9110] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 484.171396][ T9110] SMP: stopping secondary CPUs [ 484.172777][ T9110] Kernel Offset: disabled [ 484.173944][ T9110] CPU features: 0x080000,02070084,26017203 [ 484.175596][ T9110] Memory Limit: none [ 484.792454][ T9110] Rebooting in 86400 seconds..