last executing test programs: 7.187590288s ago: executing program 4 (id=762): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESOCT], 0x8, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20042, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.970216307s ago: executing program 4 (id=765): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) quotactl$Q_SETINFO(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0x5, 0x7, 0x0, 0x0, 0xe, "95048b612695220b5627cb32c9fc95a6ae6f01"}) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2000402, &(0x7f0000001440)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x54, 0x1f8, &(0x7f00000002c0)="$eJzs3Etu00AAxvHPSdqUgigP8VgiISE2NEArVdnRA3ABdlFrqgoXEGXTCqn0EuzZsuII3IQLNAt2XTFoPEaxHYPHDnFC8/9JrUf2fJ5xpfGMayUCsLCexb8DBVqJS8aYk3uSXjyX1Jlx5wBMlUm2Pw2AxdOuMfS7bqUA4L823G7H8/+3QPr+48POWfKz8rc1w8moPNxuuUIgnaXylzzXH8PTIN7a+un8qqTLY7XHH0jMZ5d/kMtfqdj+ai7flU798u76H97P5q9KWpN0TdJ1STck3ZTsjVO3lBxItb+ba/+uO+zVBwAAAAAAytinz3X/6t3CvNcJHhfutU/PL/ejsPhouaUk/6RmftnmJ3jPuZy0v5He2fIILrlNN8mv77yJdut3A6ilVW38j/1b0H/8F8bVnnD8d+L8p5ppYLEdHh2/GkRR+K6xglQ1ZafKRnr4xRZ07t6MNPxn8SnYm+0cdCNT+KjyOsajzlQLZq3RRu2k5Pac/6nO7yVnyQnt9DiIoiA/TjuZQfQ1Odk/HqcZ7YZvTACmrvf+4G3v8Oj40f7BYC/cC19vbvX7W5sbT/u9eFnem2RxDmCujSb9WfcEAAAAAAAAAAAAAADUdVvSneox36/3AAAAADBHmvhQ1KyvEQAAAAAAAAAAAACAi+5XAAAA//9wqDyb") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x8, 0xd, [0x34, 0x1e, 0x35, 0x16, 0xc, 0x30, 0x1f, 0x2b, 0x13, 0x3b, 0xf, 0x39, 0x2e, 0x7, 0x8, 0x33], 0x1, 0x2800, 0x10}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x6b142, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000140)=[{r3}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 6.336125213s ago: executing program 2 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 6.290173117s ago: executing program 3 (id=769): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f00000001c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0x7c8, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 6.171978477s ago: executing program 4 (id=771): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0xfc, 0x0, 0x7ffffffb}]}) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9api\x87\xb9\x02\x95$\xf1\f\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xc0\xd7Uw\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x94?\x96\\\xf6\xc6\x95\x03\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xaf\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\b\x00\xce\x8b\x19\xea\xef\xe3\x00\x00', 0x0) r1 = dup(r0) fallocate(r0, 0x0, 0x0, 0x8) copy_file_range(r0, 0x0, r1, &(0x7f0000000000)=0xa1, 0x7fff000000, 0x0) 5.585676269s ago: executing program 0 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x201, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}}, 0x0) 5.33617493s ago: executing program 4 (id=774): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x41, &(0x7f0000000580), 0x1, 0x4e3, &(0x7f00000005c0)="$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") 5.335809781s ago: executing program 2 (id=775): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.272769776s ago: executing program 0 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(0x0, &(0x7f00000003c0)={0x380000, 0x8, 0x100, 0x9, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r4, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r8, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10) keyctl$describe(0x6, r7, &(0x7f0000000080)=""/72, 0x48) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "e5231296f5880856cfb591151cebcb3c130e574e0912fc5261cbe89b56860676f63ffd2a5c60e7dc92673d761aa2da81a8b43ddd019e9180e9f00518d131dd3d", 0x19}, 0x48, r7) 5.266497297s ago: executing program 2 (id=777): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050033000100000008000300", @ANYRES32=r3], 0x24}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 5.174231195s ago: executing program 3 (id=778): socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x68}}, 0x4000080) 4.32012178s ago: executing program 0 (id=779): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0xff}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="92", 0x1}}, 0x0) io_uring_setup(0x6f17, &(0x7f00000001c0)) close_range(r0, 0xffffffffffffffff, 0x0) 4.31994267s ago: executing program 1 (id=780): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES16=0x0], 0x1, 0x1a3, &(0x7f0000000440)="$eJzs0bFrE2EYx/Hv896b5CJUiYpDBRuweF6o9C5VB6fgVCEHDi6CQUN6NsWrkl4GW1roIgWp9l/QQXRUQScRBefiIDhoXbpJMxQHcZDIJW8E/wbfDxy/e57j7t73edtpJy0Av/dXW9QYcDjIRwQNTMiwp9QwX5v6u8mtYXDR1Jsmn5kcT5dXbjWTJF4qXyhT+qcB/CgXSvC3lb7gmKIo1JDP+6utptyI6NdYVHMRpTqVBzgNOv5DxvUYR6/j0Pc2uaToiFeHQ9Ndl+l0eeXMwmJzPp6Pb1erM+eDs0FwLlt/EgevEP++KB6xhh9RiCj6a+Qa3NvWB5gSxG+rHUcqPfINtrad0yeneih/jz7CO69H4atul9UVTuFeyzY0yxHhMU7EZJ2iQnNzIYmDWeSyeimh/qR/5hTuuuO4rTvJ3MZVJb/yT2uy50q4S84LqVZCZrLRcJj3bOywbobK7jcm5E32l9Fc9eDZc1Md5wRP8txtdrtLYR4+iBdRza4SjA0+pyImswPmrXnHBF9GN5ZlWZZlWZZlWdZ/4E8AAAD//4rdXjc=") setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 4.31973275s ago: executing program 4 (id=781): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x25, 0x354, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 4.288318383s ago: executing program 3 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mount$bind(0x0, 0x0, 0x0, 0x20a3006, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x2, 0x1e6, &(0x7f0000000700)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x1c, 0x0, 0x3) 4.183502602s ago: executing program 1 (id=783): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 4.147092805s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$notify(r4, 0x402, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@llx, {0x3, 0x3, 0x3, 0x4, 0x9}, {0x7, 0x1, 0xb, 0x1, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5d}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.145907485s ago: executing program 2 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) 2.883367516s ago: executing program 4 (id=786): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{}, 0x0, 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x14) 2.883012706s ago: executing program 1 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 1.289355567s ago: executing program 0 (id=788): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f00000001c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0x7c8, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 1.203704934s ago: executing program 1 (id=789): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800007f, 0x1c) 1.178057036s ago: executing program 3 (id=790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@dev, @empty, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 1.000179552s ago: executing program 1 (id=791): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) 964.194265ms ago: executing program 3 (id=792): socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x4000080) 904.64523ms ago: executing program 2 (id=793): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c10"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 143.560627ms ago: executing program 1 (id=794): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b21, &(0x7f0000000040)) 142.276067ms ago: executing program 0 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r6 = fanotify_init(0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) 49.213286ms ago: executing program 3 (id=796): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x1000000, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 0s ago: executing program 2 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) kernel console output (not intermixed with test programs): ing later): interface not active [ 44.275853][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.277630][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.289761][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.411824][ T4029] device hsr_slave_0 entered promiscuous mode [ 44.450114][ T4029] device hsr_slave_1 entered promiscuous mode [ 44.499820][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.501711][ T4029] Cannot create hsr debugfs directory [ 44.510265][ T4010] Bluetooth: hci2: command 0x0409 tx timeout [ 44.512390][ T4010] Bluetooth: hci1: command 0x0409 tx timeout [ 44.514012][ T4010] Bluetooth: hci0: command 0x0409 tx timeout [ 44.543950][ T4019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.590030][ T4010] Bluetooth: hci3: command 0x0409 tx timeout [ 44.593794][ T4019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.621717][ T4019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.671566][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 44.673758][ T4019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.762251][ T4027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.813224][ T4027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.863221][ T4027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.913757][ T4027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.962228][ T4024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.001819][ T4024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.051837][ T4024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.107162][ T4024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.216096][ T4019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.219601][ T4023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.262324][ T4023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.309787][ T4023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.386706][ T4019] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.388838][ T4023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.429004][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.433732][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.445837][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.450335][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.453711][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.455667][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.472953][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.479325][ T4029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.542041][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.544939][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.548054][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.549834][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.552927][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.560282][ T4029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.611799][ T4029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.662821][ T4029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.704307][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.737627][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.741322][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.767634][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.776363][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.788579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.792712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.798327][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.802337][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.816257][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.823294][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.831899][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.838735][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.842683][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.844989][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.847450][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.851166][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.854411][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.856935][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.858658][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.877826][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.881718][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.884272][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.886886][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.893118][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.895621][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.897407][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.901662][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.941112][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.944166][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.947224][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.949114][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.957543][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.962698][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.965284][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.967112][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.969270][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.974174][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.976921][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.980228][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.983337][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.986035][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.988538][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.997999][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.004003][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.006797][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.035965][ T4027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.038938][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.046150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.052297][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.055233][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.057915][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.065344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.067918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.073251][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.075918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.078608][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.081557][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.089295][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.096170][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.099422][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.102270][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.104909][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.122572][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.128340][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.132436][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.147395][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.154412][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.158859][ T4019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.167847][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.170740][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.197287][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.200944][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.203625][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.211423][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.214091][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.216059][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.218430][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.223330][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.225852][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.227599][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.240002][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.246886][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.258850][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.283797][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.286788][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.295500][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.327253][ T4019] device veth0_vlan entered promiscuous mode [ 46.343343][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.345943][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.349062][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.353101][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.355736][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.358952][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.363799][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.366397][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.368225][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.371171][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.373964][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.376389][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.378352][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.381590][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.384590][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.386670][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.388595][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.392213][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.394941][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.397554][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.406177][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.414840][ T4019] device veth1_vlan entered promiscuous mode [ 46.426017][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.429282][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.433525][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.445940][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.448650][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.452008][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.457069][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.462130][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.464352][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.466445][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.469139][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.474258][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.476955][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.480609][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.492396][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.495168][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.529248][ T4029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.536580][ T4029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.543941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.546941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.551372][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.554690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.557719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.561676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.564640][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.567305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.570302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.580248][ T4019] device veth0_macvtap entered promiscuous mode [ 46.591080][ T4065] Bluetooth: hci0: command 0x041b tx timeout [ 46.592952][ T4065] Bluetooth: hci1: command 0x041b tx timeout [ 46.594577][ T4065] Bluetooth: hci2: command 0x041b tx timeout [ 46.597562][ T4019] device veth1_macvtap entered promiscuous mode [ 46.611831][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.614580][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.617313][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.621168][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.623639][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.626207][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.643125][ T4027] device veth0_vlan entered promiscuous mode [ 46.650427][ T4027] device veth1_vlan entered promiscuous mode [ 46.660378][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.663086][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.667239][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.670604][ T4065] Bluetooth: hci3: command 0x041b tx timeout [ 46.675225][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.677797][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.686114][ T4024] device veth0_vlan entered promiscuous mode [ 46.707911][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.710511][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.713129][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.715740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.718495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.723307][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.726196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.728688][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.736799][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.750168][ T4065] Bluetooth: hci4: command 0x041b tx timeout [ 46.755444][ T4024] device veth1_vlan entered promiscuous mode [ 46.767742][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.774575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.777312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.785677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.788446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.792094][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.794816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.797312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.800828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.817114][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.820513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.827107][ T4027] device veth0_macvtap entered promiscuous mode [ 46.838368][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.842684][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.845396][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.849047][ T4019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.853665][ T4019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.856158][ T4019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.858319][ T4019] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.885925][ T4027] device veth1_macvtap entered promiscuous mode [ 46.892363][ T4024] device veth0_macvtap entered promiscuous mode [ 46.897406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.902224][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.904756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.906880][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.912021][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.914629][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.926731][ T4024] device veth1_macvtap entered promiscuous mode [ 46.933644][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.936139][ T4023] device veth0_vlan entered promiscuous mode [ 46.943898][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.946480][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.949142][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.988123][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.991479][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.998642][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.012473][ T4023] device veth1_vlan entered promiscuous mode [ 47.015655][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.018341][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.021745][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.025697][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.028494][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.038631][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.043306][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.047850][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.057884][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.062057][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.065982][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.080786][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.085505][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.088320][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.091245][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.093935][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.097863][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.101848][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.104288][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.106906][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.112475][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.118287][ T4027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.123527][ T4027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.125789][ T4027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.128105][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.152242][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.155173][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.162945][ T4024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.165111][ T4024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.167473][ T4024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.171103][ T4024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.191783][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.195357][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.208671][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.212460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.216470][ T1633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.235353][ T1633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.256562][ T4023] device veth0_macvtap entered promiscuous mode [ 47.264849][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.267423][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.288909][ T4023] device veth1_macvtap entered promiscuous mode [ 47.302058][ T4029] device veth0_vlan entered promiscuous mode [ 47.315525][ T4029] device veth1_vlan entered promiscuous mode [ 47.317989][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.322196][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.324914][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.327676][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.332818][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.360450][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.371361][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.373980][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.376489][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.379086][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.386166][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.388268][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.416364][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.436018][ T4029] device veth0_macvtap entered promiscuous mode [ 47.448236][ T1633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.451877][ T1633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.464977][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.467698][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.472558][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.475406][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.477864][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.481987][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.485809][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.492556][ T4029] device veth1_macvtap entered promiscuous mode [ 47.495199][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.497863][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.501728][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.504457][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.507006][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.511067][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.514956][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.517191][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.521442][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.524271][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.527137][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.530448][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.533268][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.535867][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.538545][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.557673][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.566873][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.569160][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.577306][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.581549][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.583960][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.586147][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.588372][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.625329][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.628377][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.636575][ T4099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6'. [ 47.638725][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.638949][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 47.654828][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.657943][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.662091][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.664723][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.666989][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.670274][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.672651][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.675259][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.679183][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.701083][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.706605][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.721162][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.723984][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.726547][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.729275][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.741589][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.744824][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.747681][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.747759][ T4099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6'. [ 47.752961][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.757651][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.758270][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 47.798331][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.801317][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.837913][ T4029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.841993][ T4029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.844494][ T4029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.846868][ T4029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.878681][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.881208][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.885371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.938533][ T4105] loop3: detected capacity change from 0 to 512 [ 47.953052][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.955231][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.983866][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.986389][ T4099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6'. [ 47.988729][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 48.019774][ T4105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.026073][ T4105] EXT4-fs error (device loop3): ext4_find_extent:929: inode #4: comm syz.3.4: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 48.070187][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.072428][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.076058][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.086204][ T4105] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 48.089005][ T4105] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.093237][ T4105] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 48.094915][ T4105] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.108485][ T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.115558][ T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.120223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.265933][ T4114] loop4: detected capacity change from 0 to 2048 [ 48.346026][ T4114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.418078][ T4114] fs-verity: sha512 using implementation "sha512-arm64" [ 48.680541][ T4109] Bluetooth: hci2: command 0x040f tx timeout [ 48.682865][ T4109] Bluetooth: hci1: command 0x040f tx timeout [ 48.684656][ T4109] Bluetooth: hci0: command 0x040f tx timeout [ 49.604149][ T4062] Bluetooth: hci3: command 0x040f tx timeout [ 49.611505][ T4062] Bluetooth: hci4: command 0x040f tx timeout [ 49.846611][ T4125] loop0: detected capacity change from 0 to 32768 [ 49.908427][ T4134] loop3: detected capacity change from 0 to 8192 [ 49.939292][ T4125] XFS (loop0): Mounting V5 Filesystem [ 49.963370][ T4120] loop2: detected capacity change from 0 to 32768 [ 49.992124][ T4125] XFS (loop0): Ending clean mount [ 49.998951][ T4147] loop4: detected capacity change from 0 to 512 [ 50.016303][ T4120] XFS (loop2): Mounting V5 Filesystem [ 50.020572][ T4109] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 50.023651][ T4109] XFS (loop0): Unmount and run xfs_repair [ 50.025073][ T4109] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.026830][ T4109] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 50.036439][ T4109] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 50.038800][ T4109] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 50.041236][ T4109] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 50.042705][ T4120] XFS (loop2): Ending clean mount [ 50.043672][ T4109] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 50.047408][ T4109] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.060117][ T4109] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.062384][ T4109] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.063333][ T4120] XFS (loop2): Quotacheck needed: Please wait. [ 50.066723][ T4125] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 50.072986][ T4125] XFS (loop0): page discard on page 000000007963e619, inode 0x1807, offset 20480. [ 50.094615][ T4094] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 50.097394][ T4094] XFS (loop0): Unmount and run xfs_repair [ 50.098831][ T4094] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.101987][ T4094] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 50.109354][ T4094] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 50.128401][ T4147] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.152914][ T4120] XFS (loop2): Quotacheck: Done. [ 50.160296][ T4094] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 50.162637][ T4094] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 50.164696][ T4094] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 50.167017][ T4094] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.169241][ T4094] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.218234][ T4094] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.231065][ T4157] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 50.234098][ T4157] XFS (loop0): page discard on page 00000000c362ebef, inode 0x1807, offset 10240. [ 50.248467][ T4063] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 50.254904][ T4063] XFS (loop0): Unmount and run xfs_repair [ 50.256464][ T4063] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.258301][ T4063] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 50.283250][ T4063] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 50.285553][ T4063] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 50.287932][ T4063] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 50.296786][ T4120] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x434, xfs_refcountbt block 0x28 [ 50.300711][ T4063] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 50.303250][ T4063] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.305562][ T4063] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.307125][ T4120] XFS (loop2): Unmount and run xfs_repair [ 50.307707][ T4063] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.310761][ T4120] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 50.313657][ T4120] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 50.316090][ T4120] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 50.318655][ T4120] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 50.322311][ T4120] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 50.324684][ T4120] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.327198][ T4120] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.329620][ T4120] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.332118][ T4120] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.334429][ T4120] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x28 len 8 error 74 [ 50.386620][ T4120] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 50.391223][ T4120] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 50.459300][ T4023] XFS (loop2): Unmounting Filesystem [ 50.478622][ T4157] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 50.481941][ T4157] XFS (loop0): page discard on page 00000000693cdb7e, inode 0x1807, offset 12288. [ 50.489936][ T4062] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 50.492540][ T4062] XFS (loop0): Unmount and run xfs_repair [ 50.496407][ T4062] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.498356][ T4062] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 50.518328][ T4169] loop3: detected capacity change from 0 to 128 [ 50.519979][ T4062] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 50.523427][ T4062] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 50.550477][ T4062] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 50.552985][ T4062] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 50.557463][ T4062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.566994][ T4062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.572063][ T4062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.609771][ T4157] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 50.613723][ T4157] XFS (loop0): page discard on page 000000008b525b27, inode 0x1807, offset 16384. [ 50.630918][ T4094] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 50.634123][ T4094] XFS (loop0): Unmount and run xfs_repair [ 50.636034][ T4094] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.648781][ T4094] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 50.660220][ T4094] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 50.680989][ T4094] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 50.683509][ T4094] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 50.685992][ T4094] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 50.936165][ T4094] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.938992][ T4094] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.940304][ T4062] Bluetooth: hci0: command 0x0419 tx timeout [ 50.942702][ T4094] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 50.944993][ T4065] Bluetooth: hci1: command 0x0419 tx timeout [ 50.947058][ T4065] Bluetooth: hci2: command 0x0419 tx timeout [ 50.949223][ T4157] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 50.953918][ T4157] XFS (loop0): page discard on page 000000007963e619, inode 0x1807, offset 20480. [ 50.964110][ T4063] loop0: writeback error on inode 6151, offset 0, sector 12256 [ 51.771914][ T1959] Bluetooth: hci4: command 0x0419 tx timeout [ 51.782013][ T1959] Bluetooth: hci3: command 0x0419 tx timeout [ 51.895640][ T4027] XFS (loop0): Unmounting Filesystem [ 56.034095][ T4185] udc-core: couldn't find an available UDC or it's busy [ 56.036014][ T4185] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.354634][ T4196] usb usb8: usbfs: process 4196 (syz.4.28) did not claim interface 0 before use [ 56.392451][ T4197] loop0: detected capacity change from 0 to 2048 [ 56.395674][ T4200] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 56.397691][ T4199] IPVS: stopping master sync thread 4200 ... [ 56.784565][ T4209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'. [ 57.583877][ T4211] udc-core: couldn't find an available UDC or it's busy [ 57.593950][ T4211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.634311][ T4197] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,grpjquota=,,errors=continue. Quota mode: none. [ 57.690722][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 57.709344][ T4221] loop3: detected capacity change from 0 to 512 [ 57.814179][ T4218] loop2: detected capacity change from 0 to 512 [ 57.832331][ T4221] attempt to access beyond end of device [ 57.832331][ T4221] loop3: rw=0, want=1022040, limit=512 [ 57.850760][ T4218] ======================================================= [ 57.850760][ T4218] WARNING: The mand mount option has been deprecated and [ 57.850760][ T4218] and is ignored by this kernel. Remove the mand [ 57.850760][ T4218] option from the mount to silence this warning. [ 57.850760][ T4218] ======================================================= [ 57.961485][ T4218] EXT4-fs (loop2): 1 truncate cleaned up [ 57.963002][ T4218] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 57.994308][ T4208] loop1: detected capacity change from 0 to 32768 [ 58.015694][ T4213] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.34: Directory hole found for htree leaf block 0 [ 58.031497][ T4213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.034603][ T4213] team0: Port device batadv0 added [ 58.097444][ T4208] XFS (loop1): Mounting V5 Filesystem [ 58.240827][ T4208] XFS (loop1): Ending clean mount [ 58.249383][ T4208] XFS (loop1): Quotacheck needed: Please wait. [ 58.251508][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.274890][ T4242] udc-core: couldn't find an available UDC or it's busy [ 58.284759][ T4242] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.346849][ T4208] XFS (loop1): Quotacheck: Done. [ 58.359147][ T4242] loop3: detected capacity change from 0 to 2048 [ 59.350803][ T4242] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 59.480937][ T4255] udc-core: couldn't find an available UDC or it's busy [ 59.482861][ T4255] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.497141][ T4242] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.603313][ T4259] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 59.605271][ T4259] netlink: 666 bytes leftover after parsing attributes in process `syz.2.44'. [ 59.609909][ T7] usb 1-1: device not accepting address 2, error -71 [ 59.631625][ T4019] XFS (loop1): Unmounting Filesystem [ 60.027220][ T4264] loop2: detected capacity change from 0 to 128 [ 60.033852][ T1959] Bluetooth: hci0: command 0x0c20 tx timeout [ 60.266238][ T4272] loop1: detected capacity change from 0 to 1024 [ 60.271218][ T4264] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.301439][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 60.303759][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.305689][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.380403][ T4274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.45'. [ 61.155861][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.178821][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.231984][ T4272] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 61.234583][ T4272] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 61.236561][ T4272] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.287727][ T4264] fscrypt: Error allocating hmac(sha512): -2 [ 61.330498][ T4272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 61.332674][ T4272] System zones: 0-1, 3-36 [ 61.338141][ T4272] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 61.464701][ T4285] udc-core: couldn't find an available UDC or it's busy [ 61.479347][ T4285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.633612][ T4294] netlink: 'syz.3.53': attribute type 29 has an invalid length. [ 61.636152][ T4294] netlink: 'syz.3.53': attribute type 29 has an invalid length. [ 61.663730][ T4294] netlink: 'syz.3.53': attribute type 29 has an invalid length. [ 61.666300][ T4294] netlink: 'syz.3.53': attribute type 29 has an invalid length. [ 61.895549][ T4303] delete_channel: no stack [ 62.383546][ T4025] Bluetooth: hci0: unexpected event for opcode 0x200d [ 62.898349][ T4312] loop4: detected capacity change from 0 to 128 [ 62.977518][ T4312] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.341758][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 63.344049][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.358906][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.367314][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.369418][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.467411][ T4333] loop4: detected capacity change from 0 to 8 [ 64.291125][ T4341] loop2: detected capacity change from 0 to 256 [ 64.334789][ T4343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.70'. [ 64.435043][ T4352] loop3: detected capacity change from 0 to 1024 [ 64.470419][ T4353] loop1: detected capacity change from 0 to 128 [ 64.675639][ T4353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.746127][ T4132] hfsplus: b-tree write err: -5, ino 4 [ 64.825694][ T4353] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 64.948094][ T4364] loop1: detected capacity change from 0 to 512 [ 64.990894][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.907335][ T4378] udc-core: couldn't find an available UDC or it's busy [ 65.909146][ T4378] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.996635][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 66.018558][ T4380] batman_adv: Cannot find parent device [ 66.119873][ T26] audit: type=1326 audit(66.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.3.85" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaadc0428 code=0x0 [ 66.281331][ T4390] loop2: detected capacity change from 0 to 128 [ 66.400882][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.416979][ T4395] udc-core: couldn't find an available UDC or it's busy [ 66.420199][ T4395] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.565194][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 67.634103][ T4419] udc-core: couldn't find an available UDC or it's busy [ 67.635957][ T4419] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.644936][ T26] audit: type=1326 audit(67.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.96" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x0 [ 67.657639][ T26] audit: type=1326 audit(67.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.1.97" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8903c428 code=0x0 [ 67.767905][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 68.056756][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 68.213173][ T4444] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 68.234048][ T4444] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 68.254723][ T4444] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 68.272541][ T4446] loop3: detected capacity change from 0 to 764 [ 69.364422][ T4458] loop2: detected capacity change from 0 to 128 [ 69.443072][ T4458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.632539][ T1533] cfg80211: failed to load regulatory.db [ 69.635002][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.637005][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.754339][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 69.756581][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.758461][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.823102][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.825469][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.891219][ T4475] team0: Port device batadv0 removed [ 70.131230][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 70.154678][ T4488] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.800705][ T4488] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 70.914667][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.924362][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.934245][ T4470] device bridge_slave_0 entered promiscuous mode [ 70.970211][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.972062][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.974660][ T4470] device bridge_slave_1 entered promiscuous mode [ 70.997513][ T4497] loop4: detected capacity change from 0 to 128 [ 71.012740][ T4498] loop2: detected capacity change from 0 to 1024 [ 71.043097][ T4495] loop3: detected capacity change from 0 to 1024 [ 71.061843][ T4497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.076243][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.099409][ T4498] EXT4-fs (loop2): Ignoring removed orlov option [ 71.101605][ T4498] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 71.120495][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.162865][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 71.175821][ T4498] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 71.244070][ T4470] team0: Port device team_slave_0 added [ 71.277213][ T4470] team0: Port device team_slave_1 added [ 71.431430][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.433261][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.453616][ T4515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 71.454149][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.455723][ T4515] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 71.477857][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.492328][ T4515] vhci_hcd vhci_hcd.0: Device attached [ 71.502369][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.533692][ T4516] vhci_hcd: connection closed [ 71.536368][ T4095] vhci_hcd: stop threads [ 71.537619][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.538290][ T4095] vhci_hcd: release socket [ 71.557162][ T4095] vhci_hcd: disconnect device [ 71.709652][ T4062] Bluetooth: hci5: command 0x0409 tx timeout [ 72.864575][ T4532] syz.3.135 sent an empty control message without MSG_MORE. [ 73.160115][ T4536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.166472][ T4537] loop3: detected capacity change from 0 to 128 [ 73.249990][ T4537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.276733][ T4540] loop4: detected capacity change from 0 to 512 [ 73.291759][ T4470] device hsr_slave_0 entered promiscuous mode [ 73.332715][ T4540] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.350785][ T4470] device hsr_slave_1 entered promiscuous mode [ 73.400446][ T4470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.402455][ T4470] Cannot create hsr debugfs directory [ 73.555281][ T4547] tipc: Started in network mode [ 73.556784][ T4547] tipc: Node identity ac1414aa, cluster identity 4711 [ 74.280257][ T4547] tipc: Enabled bearer , priority 10 [ 74.282530][ T4551] tipc: Disabling bearer [ 74.384570][ T4062] Bluetooth: hci5: command 0x041b tx timeout [ 74.574356][ T26] audit: type=1326 audit(74.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.583582][ T4470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.589263][ T26] audit: type=1326 audit(74.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.610284][ T26] audit: type=1326 audit(74.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.628141][ T26] audit: type=1326 audit(74.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.647256][ T26] audit: type=1326 audit(74.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.667269][ T26] audit: type=1326 audit(74.560:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.684672][ T26] audit: type=1326 audit(74.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.725806][ T26] audit: type=1326 audit(74.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.740058][ T4564] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 74.742587][ T4564] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 74.744719][ T4564] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 74.767180][ T26] audit: type=1326 audit(74.560:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 74.824530][ T26] audit: type=1326 audit(74.560:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff936e0428 code=0x7ffc0000 [ 75.664672][ T4567] loop1: detected capacity change from 0 to 512 [ 75.697110][ T4470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.718681][ T4567] EXT4-fs (loop1): Ignoring removed nobh option [ 75.721619][ T4567] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.737662][ T4567] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.778918][ T4567] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.809727][ T4567] EXT4-fs (loop1): 1 truncate cleaned up [ 75.811223][ T4567] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,grpquota,,errors=continue. Quota mode: writeback. [ 75.967886][ T4470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.126955][ T4470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.287409][ T4584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.421899][ T4470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.439909][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 76.484671][ T4470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.551251][ T4470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.583704][ T4470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.954709][ T4601] loop4: detected capacity change from 0 to 128 [ 76.972764][ T4601] hpfs: bad mount options. [ 77.806444][ T4604] loop3: detected capacity change from 0 to 128 [ 77.824472][ T4605] loop2: detected capacity change from 0 to 256 [ 77.849958][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.888784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.897454][ T4604] hpfs: bad mount options. [ 77.902261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.907239][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.927798][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.930775][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.952436][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.954235][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.980312][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.996915][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.003907][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.017212][ T4614] loop1: detected capacity change from 0 to 1024 [ 78.020956][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.022842][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.043609][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.047002][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.061065][ T4616] xt_bpf: check failed: parse error [ 78.073177][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.080613][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.087106][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.107655][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.117523][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.127292][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.146765][ T4470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.166265][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.166812][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.205418][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.208063][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.211544][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.223729][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.429506][ T4636] loop1: detected capacity change from 0 to 512 [ 78.441917][ T4637] loop2: detected capacity change from 0 to 128 [ 78.482254][ T4633] device syzkaller0 entered promiscuous mode [ 78.485748][ T4637] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.513304][ T4175] Bluetooth: hci5: command 0x0419 tx timeout [ 78.526814][ T4636] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.560713][ T4636] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.171: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 78.606206][ T4636] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.627141][ T4636] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 78.628778][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.807759][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.813149][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.830988][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.933915][ T4651] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 78.943728][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.946541][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.136034][ T4470] device veth0_vlan entered promiscuous mode [ 79.153990][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.166311][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.173817][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.182010][ T4657] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 79.183103][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.215612][ T4470] device veth1_vlan entered promiscuous mode [ 79.278958][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 79.282261][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.285433][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.294333][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.301577][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.311531][ T4470] device veth0_macvtap entered promiscuous mode [ 79.314946][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 79.320044][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 79.336632][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 79.356643][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 79.367481][ T4470] device veth1_macvtap entered promiscuous mode [ 79.405142][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.407868][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.411408][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.414285][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.418614][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.422135][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.424958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.427545][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.431345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.437090][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.441072][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.445969][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.450389][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.455127][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.457504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.467998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.500744][ T4470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.508478][ T4470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524331][ T4470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.534475][ T4470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.656259][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.678400][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.681667][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.691983][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.707561][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.719330][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.725298][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.733364][ T4095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.811847][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.814171][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.819309][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.286418][ T4671] loop0: detected capacity change from 0 to 128 [ 80.333147][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.049279][ T4679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.601678][ T4703] loop2: detected capacity change from 0 to 128 [ 82.863503][ T4703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.779417][ T4722] loop3: detected capacity change from 0 to 512 [ 85.078787][ T4727] device pim6reg1 entered promiscuous mode [ 85.177503][ T4722] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.472094][ T4705] loop4: detected capacity change from 0 to 40427 [ 86.486742][ T4756] loop1: detected capacity change from 0 to 128 [ 86.600275][ T4756] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.245219][ T4791] loop2: detected capacity change from 0 to 1024 [ 88.286866][ T4796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.394039][ T4733] hfsplus: b-tree write err: -5, ino 4 [ 89.745930][ T4809] __nla_validate_parse: 5 callbacks suppressed [ 89.745966][ T4809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.230'. [ 90.499573][ C0] sched: RT throttling activated [ 90.510965][ T4809] device wlan0 entered promiscuous mode [ 90.825096][ T4817] bridge0: port 3(gretap0) entered blocking state [ 90.832790][ T4817] bridge0: port 3(gretap0) entered disabled state [ 90.871978][ T4817] device gretap0 entered promiscuous mode [ 90.874100][ T4817] bridge0: port 3(gretap0) entered blocking state [ 90.876205][ T4817] bridge0: port 3(gretap0) entered forwarding state [ 90.903099][ T4821] device gretap0 left promiscuous mode [ 90.905744][ T4821] bridge0: port 3(gretap0) entered disabled state [ 90.998113][ T4818] loop2: detected capacity change from 0 to 8192 [ 91.060843][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 92.292037][ T4844] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 92.294436][ T4844] FAT-fs (loop2): Filesystem has been set read-only [ 93.371991][ T4860] udc-core: couldn't find an available UDC or it's busy [ 93.373891][ T4860] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.532398][ T4865] udc-core: couldn't find an available UDC or it's busy [ 93.544715][ T4865] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.669072][ T4867] Zero length message leads to an empty skb [ 94.070072][ T4872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.272755][ T4880] loop3: detected capacity change from 0 to 128 [ 95.988081][ T26] kauditd_printk_skb: 86 callbacks suppressed [ 95.988094][ T26] audit: type=1326 audit(95.950:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.154401][ T26] audit: type=1326 audit(96.020:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.176345][ T26] audit: type=1326 audit(96.020:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.219327][ T26] audit: type=1326 audit(96.020:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.247012][ T26] audit: type=1326 audit(96.020:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.289197][ T26] audit: type=1326 audit(96.020:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.307766][ T26] audit: type=1326 audit(96.020:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.328171][ T26] audit: type=1326 audit(96.020:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.356712][ T26] audit: type=1326 audit(96.020:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 96.372767][ T26] audit: type=1326 audit(96.020:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a170428 code=0x7ffc0000 [ 99.647118][ T4961] loop4: detected capacity change from 0 to 128 [ 99.683286][ T4959] tmpfs: Unknown parameter 'noswap' [ 103.523724][ T4970] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.536110][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 103.536123][ T26] audit: type=1326 audit(103.500:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaadc0428 code=0x7ffc0000 [ 103.545530][ T26] audit: type=1326 audit(103.510:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaadc0428 code=0x7ffc0000 [ 103.552094][ T4974] tmpfs: Unknown parameter 'n' [ 103.794685][ T26] audit: type=1326 audit(103.510:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=264 compat=0 ip=0xffffaadc0428 code=0x7ffc0000 [ 103.841205][ T26] audit: type=1326 audit(103.510:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaadc0428 code=0x7ffc0000 [ 103.856460][ T4981] loop2: detected capacity change from 0 to 1024 [ 103.897410][ T26] audit: type=1326 audit(103.510:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaadc0428 code=0x7ffc0000 [ 104.096080][ T4982] loop3: detected capacity change from 0 to 2048 [ 104.242345][ T4981] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.338990][ T4981] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 104.378872][ T4993] loop0: detected capacity change from 0 to 128 [ 105.620903][ T5007] loop4: detected capacity change from 0 to 2048 [ 105.725439][ T5007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.756258][ T5011] loop0: detected capacity change from 0 to 2048 [ 105.827240][ T5011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.861781][ T4991] loop1: detected capacity change from 0 to 32768 [ 106.025456][ T4991] XFS (loop1): Mounting V5 Filesystem [ 106.126642][ T5010] loop2: detected capacity change from 0 to 32768 [ 106.243587][ T4991] XFS (loop1): Ending clean mount [ 106.311527][ T5010] XFS (loop2): Mounting V5 Filesystem [ 106.323188][ T4019] XFS (loop1): Unmounting Filesystem [ 106.377022][ T5003] loop3: detected capacity change from 0 to 32768 [ 106.463240][ T5010] XFS (loop2): Starting recovery (logdev: internal) [ 106.534622][ T5010] XFS (loop2): Ending recovery (logdev: internal) [ 106.551620][ T5003] XFS (loop3): Mounting V5 Filesystem [ 106.666770][ T5007] process 'syz.4.297' launched '/dev/fd/6' with NULL argv: empty string added [ 106.738946][ T5007] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 163840 lbcount: 167936 extent 129+132096 [ 107.493837][ T5003] XFS (loop3): Ending clean mount [ 107.635555][ T4024] XFS (loop3): Unmounting Filesystem [ 108.621693][ T5043] XFS (loop2): User initiated shutdown received. [ 108.626825][ T5043] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 108.661482][ T5043] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 108.886609][ T4023] XFS (loop2): Unmounting Filesystem [ 109.015153][ T5057] loop1: detected capacity change from 0 to 32768 [ 109.094986][ T5069] tipc: Started in network mode [ 109.103484][ T5069] tipc: Node identity ac14140f, cluster identity 4711 [ 109.200003][ T5069] tipc: New replicast peer: 255.255.255.255 [ 109.204317][ T5069] tipc: Enabled bearer , priority 10 [ 109.268663][ T5057] XFS (loop1): Mounting V5 Filesystem [ 109.427891][ T5073] tipc: Started in network mode [ 109.453052][ T5073] tipc: Node identity ac14140f, cluster identity 4711 [ 109.497981][ T5073] tipc: New replicast peer: 255.255.255.255 [ 109.540540][ T5073] tipc: Enabled bearer , priority 10 [ 109.545330][ T5057] XFS (loop1): Starting recovery (logdev: internal) [ 109.569749][ T5057] XFS (loop1): Ending recovery (logdev: internal) [ 110.534417][ T1959] tipc: Node number set to 2886997007 [ 110.620812][ T1533] tipc: Node number set to 2886997007 [ 110.840154][ T4019] XFS (loop1): Unmounting Filesystem [ 112.807754][ T5138] loop0: detected capacity change from 0 to 2048 [ 113.477765][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.729473][ T5155] loop1: detected capacity change from 0 to 128 [ 114.720232][ T5166] udc-core: couldn't find an available UDC or it's busy [ 114.722188][ T5166] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.747788][ T5166] udc-core: couldn't find an available UDC or it's busy [ 114.758156][ T5166] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.785775][ T5168] device vlan2 entered promiscuous mode [ 116.400526][ T5185] syz.1.345 uses obsolete (PF_INET,SOCK_PACKET) [ 116.593411][ T5190] capability: warning: `syz.3.346' uses 32-bit capabilities (legacy support in use) [ 117.922643][ T5200] loop1: detected capacity change from 0 to 2048 [ 118.134928][ T5204] udc-core: couldn't find an available UDC or it's busy [ 118.136798][ T5204] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.157038][ T5207] udc-core: couldn't find an available UDC or it's busy [ 118.158831][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.161630][ T5200] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.352124][ T5212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 118.496751][ T5216] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 118.499132][ T5216] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 118.512970][ T5216] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 118.516357][ T5216] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 118.519498][ T5216] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 120.013861][ T5243] loop0: detected capacity change from 0 to 128 [ 121.168023][ T5226] loop2: detected capacity change from 0 to 32768 [ 121.218828][ T5243] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.395039][ T5256] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 121.407241][ T5226] XFS (loop2): Mounting V5 Filesystem [ 121.411406][ T5256] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 121.430818][ T5256] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 121.464070][ T5256] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 121.475955][ T5256] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 121.698434][ T5226] XFS (loop2): Starting recovery (logdev: internal) [ 121.828667][ T5226] XFS (loop2): Ending recovery (logdev: internal) [ 122.976970][ T5276] loop3: detected capacity change from 0 to 512 [ 123.166348][ T5276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.255787][ T4023] XFS (loop2): Unmounting Filesystem [ 123.498884][ T5290] loop3: detected capacity change from 0 to 128 [ 123.537240][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.548993][ T5293] netlink: 'syz.1.381': attribute type 4 has an invalid length. [ 123.649624][ T5294] netlink: 'syz.1.381': attribute type 4 has an invalid length. [ 123.976780][ T5308] udc-core: couldn't find an available UDC or it's busy [ 123.978711][ T5308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.023822][ T5324] loop1: detected capacity change from 0 to 128 [ 125.040531][ T5284] loop0: detected capacity change from 0 to 32768 [ 125.064888][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 125.139224][ T5324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.244306][ T5284] XFS (loop0): Mounting V5 Filesystem [ 125.264249][ T5343] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 125.306013][ T5343] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 125.331978][ T5348] udc-core: couldn't find an available UDC or it's busy [ 125.333724][ T5348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.338141][ T5335] loop3: detected capacity change from 0 to 4096 [ 125.343379][ T5343] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 125.346007][ T5343] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 125.463291][ T5284] XFS (loop0): Ending clean mount [ 125.476470][ T5351] udc-core: couldn't find an available UDC or it's busy [ 125.478370][ T5351] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.504142][ T5284] XFS (loop0): Quotacheck needed: Please wait. [ 125.635334][ T5284] XFS (loop0): Quotacheck: Done. [ 126.534468][ T13] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x434, xfs_refcountbt block 0x28 [ 126.541029][ T13] XFS (loop0): Unmount and run xfs_repair [ 126.542652][ T13] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 126.544649][ T13] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 126.546868][ T13] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 126.549195][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 126.853572][ T13] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 126.855907][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.858197][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.895003][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.902679][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.923565][ T5284] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x28 len 8 error 74 [ 126.958480][ T5284] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 126.988990][ T5284] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 127.046096][ T5365] device syzkaller0 entered promiscuous mode [ 127.074391][ T5365] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 127.148001][ T4470] XFS (loop0): Unmounting Filesystem [ 127.239055][ T5369] loop3: detected capacity change from 0 to 128 [ 127.304994][ T5371] loop4: detected capacity change from 0 to 1024 [ 127.348604][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.623957][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 128.404708][ T5393] udc-core: couldn't find an available UDC or it's busy [ 128.406611][ T5393] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.366648][ T5414] loop3: detected capacity change from 0 to 128 [ 130.675116][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 130.677589][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.679507][ T5424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.682290][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.684226][ T5424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.049889][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.051674][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.065609][ T5414] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.174659][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 132.375205][ T5445] udc-core: couldn't find an available UDC or it's busy [ 132.390310][ T5445] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.503014][ T5447] loop1: detected capacity change from 0 to 128 [ 133.199048][ T5452] loop4: detected capacity change from 0 to 4096 [ 133.632235][ T5464] loop3: detected capacity change from 0 to 128 [ 134.520766][ T5464] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.896043][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 138.157581][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 139.048709][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 139.297863][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 139.305059][ T5549] udc-core: couldn't find an available UDC or it's busy [ 139.306893][ T5549] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.505764][ T5557] loop0: detected capacity change from 0 to 256 [ 140.449511][ T5563] loop2: detected capacity change from 0 to 128 [ 140.551555][ T5557] FAT-fs (loop0): Directory bread(block 64) failed [ 140.553609][ T5557] FAT-fs (loop0): Directory bread(block 65) failed [ 140.555317][ T5557] FAT-fs (loop0): Directory bread(block 66) failed [ 140.556965][ T5557] FAT-fs (loop0): Directory bread(block 67) failed [ 140.558558][ T5557] FAT-fs (loop0): Directory bread(block 68) failed [ 140.581629][ T5557] FAT-fs (loop0): Directory bread(block 69) failed [ 140.599756][ T5557] FAT-fs (loop0): Directory bread(block 70) failed [ 140.601551][ T5557] FAT-fs (loop0): Directory bread(block 71) failed [ 140.603345][ T5557] FAT-fs (loop0): Directory bread(block 72) failed [ 140.615488][ T5557] FAT-fs (loop0): Directory bread(block 73) failed [ 140.647240][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 142.414698][ T5586] loop1: detected capacity change from 0 to 1024 [ 142.443743][ T5563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.459216][ T5586] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 142.462703][ T5586] EXT4-fs (loop1): Ignoring removed bh option [ 142.464354][ T5586] EXT4-fs (loop1): Ignoring removed nobh option [ 142.530937][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,nomblk_io_submit,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,bsdgroups,bh,nobh,quota,,errors=continue. Quota mode: writeback. [ 145.950139][ T5624] binder: 5617:5624 got transaction to context manager from process owning it [ 145.952863][ T5624] binder: 5617:5624 transaction failed 29201/-22, size 0-0 line 2908 [ 146.479688][ T1533] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.523972][ T5625] netlink: 830 bytes leftover after parsing attributes in process `syz.0.492'. [ 146.561758][ T5625] device bond_slave_0 entered promiscuous mode [ 146.563531][ T5625] device bond_slave_1 entered promiscuous mode [ 146.611850][ T5630] loop4: detected capacity change from 0 to 128 [ 146.687207][ T5630] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.771449][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 146.790195][ T5636] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 146.885196][ T5636] team0: Port device netdevsim0 added [ 147.107241][ T5651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.158651][ T5653] loop3: detected capacity change from 0 to 256 [ 147.284007][ T5653] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 149.197496][ T5672] loop2: detected capacity change from 0 to 128 [ 149.239237][ T5673] loop4: detected capacity change from 0 to 1024 [ 149.303359][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.207441][ T5687] loop1: detected capacity change from 0 to 512 [ 150.253335][ T5673] Process accounting resumed [ 150.424310][ T5701] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 151.909183][ T5716] loop0: detected capacity change from 0 to 128 [ 151.990723][ T5727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'. [ 152.000206][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.024227][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.033030][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.075790][ T5716] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.129145][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 152.452883][ T5743] loop4: detected capacity change from 0 to 512 [ 153.912985][ T5761] loop2: detected capacity change from 0 to 256 [ 154.574632][ T5761] FAT-fs (loop2): Directory bread(block 64) failed [ 154.576638][ T5761] FAT-fs (loop2): Directory bread(block 65) failed [ 154.590679][ T5743] EXT4-fs (loop4): 1 truncate cleaned up [ 154.592258][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 154.699919][ T5761] FAT-fs (loop2): Directory bread(block 66) failed [ 154.701977][ T5761] FAT-fs (loop2): Directory bread(block 67) failed [ 154.711459][ T5761] FAT-fs (loop2): Directory bread(block 68) failed [ 154.713213][ T5761] FAT-fs (loop2): Directory bread(block 69) failed [ 154.714989][ T5761] FAT-fs (loop2): Directory bread(block 70) failed [ 154.716721][ T5761] FAT-fs (loop2): Directory bread(block 71) failed [ 154.842684][ T5761] FAT-fs (loop2): Directory bread(block 72) failed [ 154.844521][ T5761] FAT-fs (loop2): Directory bread(block 73) failed [ 154.896319][ T5773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 154.946175][ T5778] loop4: detected capacity change from 0 to 128 [ 154.971794][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 155.034782][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.265361][ T5794] fuse: Bad value for 'group_id' [ 157.725409][ T5820] binder: 5818:5820 tried to acquire reference to desc 0, got 1 instead [ 157.778711][ T5825] loop1: detected capacity change from 0 to 128 [ 157.794807][ T4175] binder: undelivered TRANSACTION_COMPLETE [ 157.805277][ T4175] binder: undelivered transaction 10, process died. [ 157.939076][ T5822] loop3: detected capacity change from 0 to 32768 [ 158.000689][ T5836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.026293][ T5825] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.271500][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.274439][ T5834] loop0: detected capacity change from 0 to 1024 [ 158.809195][ T5834] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.847935][ T5834] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,dioread_nolock,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 159.250744][ T5855] fuse: Bad value for 'group_id' [ 160.337198][ T5864] loop2: detected capacity change from 0 to 256 [ 160.544648][ T5864] exFAT-fs (loop2): bogus fat length [ 160.546062][ T5864] exFAT-fs (loop2): failed to read boot sector [ 160.547552][ T5864] exFAT-fs (loop2): failed to recognize exfat type [ 160.575523][ T5865] binder: 5862:5865 Acquire 1 refcount change on invalid ref 2 ret -22 [ 160.578019][ T5865] binder: 5862:5865 ioctl c0306201 200003c0 returned -14 [ 160.584522][ T5865] binder: 5862:5865 ioctl c0306201 0 returned -14 [ 160.869352][ T5872] loop3: detected capacity change from 0 to 512 [ 160.915564][ T5872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.997840][ T5872] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.566: bad orphan inode 16 [ 161.011269][ T5872] ext4_test_bit(bit=15, block=4) = 0 [ 161.012691][ T5872] EXT4-fs (loop3): 1 orphan inode deleted [ 161.014196][ T5872] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback. [ 161.032666][ T5879] loop0: detected capacity change from 0 to 128 [ 161.076609][ T5872] capability: warning: `syz.3.566' uses deprecated v2 capabilities in a way that may be insecure [ 161.094154][ T5879] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.118084][ T5872] 9pnet: p9_fd_create_tcp (5872): problem binding to privport [ 162.010194][ T5891] dccp_xmit_packet: Payload too large (65475) for featneg. [ 162.293406][ T5886] dccp_close: ABORT with 65475 bytes unread [ 162.295616][ T5886] dccp_close: ABORT with 11 bytes unread [ 162.513912][ T5897] netlink: 'syz.2.574': attribute type 12 has an invalid length. [ 162.516199][ T4025] Bluetooth: Wrong link type (-22) [ 162.541984][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 162.637191][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 162.766749][ T5908] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.117793][ T5920] loop1: detected capacity change from 0 to 1024 [ 163.175699][ T5920] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.195345][ T5920] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,dioread_nolock,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 163.285020][ T5928] bridge0: port 3(syz_tun) entered blocking state [ 163.286944][ T5928] bridge0: port 3(syz_tun) entered disabled state [ 163.291214][ T5928] device syz_tun entered promiscuous mode [ 163.292991][ T5928] bridge0: port 3(syz_tun) entered blocking state [ 163.294679][ T5928] bridge0: port 3(syz_tun) entered forwarding state [ 163.346478][ T5932] loop3: detected capacity change from 0 to 128 [ 163.353390][ T5931] loop2: detected capacity change from 0 to 128 [ 163.365187][ T5932] FAT-fs (loop3): bogus number of FAT sectors [ 163.366894][ T5932] FAT-fs (loop3): Can't find a valid FAT filesystem [ 163.382665][ T5931] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.478240][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 163.514243][ T5936] netlink: 172 bytes leftover after parsing attributes in process `syz.3.585'. [ 165.072913][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.591'. [ 165.257558][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 165.991865][ T5969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.994403][ T5969] IPv6: NLM_F_CREATE should be set when creating new route [ 165.996354][ T5969] IPv6: NLM_F_CREATE should be set when creating new route [ 165.998219][ T5969] IPv6: NLM_F_CREATE should be set when creating new route [ 166.176954][ T5976] loop0: detected capacity change from 0 to 128 [ 166.343264][ T5976] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.387430][ T5939] loop4: detected capacity change from 0 to 32768 [ 166.952831][ T6002] sp0: Synchronizing with TNC [ 168.638269][ T5004] device hsr_slave_0 left promiscuous mode [ 168.755535][ T5004] device hsr_slave_1 left promiscuous mode [ 168.842594][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.845276][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.865571][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.868921][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.887090][ T5004] device bridge_slave_1 left promiscuous mode [ 168.907547][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.985478][ T5004] device bridge_slave_0 left promiscuous mode [ 168.988084][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.999736][ T1959] Bluetooth: hci0: command 0x0406 tx timeout [ 169.020305][ T1959] Bluetooth: hci1: command 0x0406 tx timeout [ 169.021963][ T1959] Bluetooth: hci3: command 0x0406 tx timeout [ 169.023564][ T1959] Bluetooth: hci4: command 0x0406 tx timeout [ 169.127088][ T6034] loop3: detected capacity change from 0 to 1764 [ 169.212485][ T5004] device veth1_macvtap left promiscuous mode [ 169.214639][ T5004] device veth0_macvtap left promiscuous mode [ 169.216311][ T5004] device veth1_vlan left promiscuous mode [ 169.217987][ T5004] device veth0_vlan left promiscuous mode [ 169.268034][ T6034] tmpfs: Bad value for 'mpol' [ 169.359808][ T1959] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.599646][ T1959] usb 1-1: Using ep0 maxpacket: 16 [ 169.665895][ T5004] team0 (unregistering): Port device team_slave_1 removed [ 169.680716][ T5004] team0 (unregistering): Port device team_slave_0 removed [ 169.691149][ T5004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.727368][ T5004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.886810][ T5004] bond0 (unregistering): Released all slaves [ 169.970117][ T1959] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 169.997799][ T1959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.010768][ T1959] usb 1-1: Product: syz [ 170.012181][ T1959] usb 1-1: Manufacturer: syz [ 170.013235][ T1959] usb 1-1: SerialNumber: syz [ 170.025261][ T1959] usb 1-1: config 0 descriptor?? [ 170.041125][ T6051] loop1: detected capacity change from 0 to 1024 [ 170.178696][ T1959] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 170.208884][ T6051] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 171.881222][ T4733] usb 1-1: Failed to submit usb control message: -110 [ 171.884749][ T4733] usb 1-1: unable to send the bmi data to the device: -110 [ 171.886744][ T4733] usb 1-1: unable to get target info from device [ 171.888319][ T4733] usb 1-1: could not get target info (-110) [ 171.893403][ T4733] usb 1-1: could not probe fw (-110) [ 172.085088][ T4064] usb 1-1: USB disconnect, device number 4 [ 172.091618][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 172.114077][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.115850][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.117635][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.119250][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.121017][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.122560][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.124142][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.125706][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.127278][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.128802][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.130525][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.132032][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.133795][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.135388][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.137020][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.138630][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.140238][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.141847][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.143336][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.144903][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.146434][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.148077][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.149966][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.151544][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.153259][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.154801][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.156512][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.158160][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.159845][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.161621][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.163270][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.164824][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.166554][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.167966][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.169653][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.171255][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.172807][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.174312][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.176044][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.177546][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.179095][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.180596][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.182191][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.183598][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.185308][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.186873][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.188415][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.189969][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.191773][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.193413][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.195034][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.196701][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.198297][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.199963][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.201545][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.203073][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.204635][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.206296][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.208019][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.209764][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.211334][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.212939][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.214613][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 172.216163][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 172.422738][ T6078] loop1: detected capacity change from 0 to 256 [ 172.503832][ T6078] FAT-fs (loop1): Directory bread(block 64) failed [ 172.505979][ T6078] FAT-fs (loop1): Directory bread(block 65) failed [ 172.518916][ T6078] FAT-fs (loop1): Directory bread(block 66) failed [ 172.520714][ T6078] FAT-fs (loop1): Directory bread(block 67) failed [ 172.522379][ T6078] FAT-fs (loop1): Directory bread(block 68) failed [ 172.523943][ T6078] FAT-fs (loop1): Directory bread(block 69) failed [ 172.525464][ T6078] FAT-fs (loop1): Directory bread(block 70) failed [ 172.527141][ T6078] FAT-fs (loop1): Directory bread(block 71) failed [ 172.528758][ T6078] FAT-fs (loop1): Directory bread(block 72) failed [ 172.553390][ T6078] FAT-fs (loop1): Directory bread(block 73) failed [ 172.909656][ T6097] hub 6-0:1.0: USB hub found [ 172.913032][ T6097] hub 6-0:1.0: 8 ports detected [ 175.257895][ T6124] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 175.729528][ T6142] udc-core: couldn't find an available UDC or it's busy [ 175.738871][ T6142] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.745772][ T6161] vhci_hcd: default hub control req: d811 v0002 i0000 l33 [ 177.922503][ T6176] udc-core: couldn't find an available UDC or it's busy [ 177.924485][ T6176] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.790140][ T6195] hub 6-0:1.0: USB hub found [ 180.793665][ T6195] hub 6-0:1.0: 8 ports detected [ 183.027160][ T6209] fuse: Unknown parameter 'grou00000000000000000000' [ 185.505508][ T6239] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 185.634615][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 185.834415][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.997672][ T4062] Bluetooth: hci2: command 0x0409 tx timeout [ 186.006927][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.014747][ T6221] device bridge_slave_0 entered promiscuous mode [ 186.022699][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.029485][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.040593][ T6221] device bridge_slave_1 entered promiscuous mode [ 186.361205][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.381984][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.562013][ T6262] fuse: Unknown parameter 'grou00000000000000000000' [ 186.826986][ T6221] team0: Port device team_slave_0 added [ 186.847959][ T6221] team0: Port device team_slave_1 added [ 187.051989][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.056337][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.007928][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.034248][ T4062] Bluetooth: hci2: command 0x041b tx timeout [ 188.048831][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.050886][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.058688][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.172423][ T6221] device hsr_slave_0 entered promiscuous mode [ 190.119787][ T4175] Bluetooth: hci2: command 0x040f tx timeout [ 190.143491][ T6221] device hsr_slave_1 entered promiscuous mode [ 190.191577][ T6221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.193514][ T6221] Cannot create hsr debugfs directory [ 190.272133][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 190.286767][ T6283] device veth3 entered promiscuous mode [ 190.339200][ T6275] loop3: detected capacity change from 0 to 512 [ 190.372260][ T6221] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.458282][ T6221] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.617538][ T6221] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.624039][ T6275] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.205577][ T6301] fuse: Unknown parameter 'grou00000000000000000000' [ 194.304418][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315301][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.447177][ T4062] Bluetooth: hci2: command 0x0419 tx timeout [ 194.702677][ T6221] team0: Port device netdevsim0 removed [ 194.759449][ T6221] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.091621][ T6313] loop4: detected capacity change from 0 to 1024 [ 195.961188][ T6221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.052084][ T6221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.184289][ T6221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.222844][ T5004] hfsplus: b-tree write err: -5, ino 4 [ 197.059494][ T4175] Bluetooth: hci5: command 0x0406 tx timeout [ 197.095555][ T6221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.145240][ T6332] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 197.389438][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.407338][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.410347][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.495776][ T6341] ptrace attach of "./syz-executor exec"[4024] was attempted by "0WN|\x1bZm\x07`ΞG8h=$G`TƵ>-(̤in$HnJ9^܍ K)i\x22c^\x22AӒW8*( +|B x\x0a@U\x0cV7\x1bTi⁺nǛd m\x1b\x1b1F#L*3jB1.=n\x1bO\x0a\x07EA7L{R} gէW5JSzb4l@ޤ}[,UR@ފa\x0b{NB9{*/{+&CCŇiwaY&QF+18<`e_OS9B~;T/Zd6^\x09*:#YUD,lD S‰4BH[YbՃ#\x0dO ~K\x07QDР6$ak~hsHa\x07Y_%`e\x22C܏*vDqdR}79] x0p{]%. m=5׷_ElR8\x5c1c\x0aӹv&e3Q\x0cVU+kl)q)^Nw!m)!W\x07@TINY3-xUx#IE\x0c̹4~czͭoxD@\x0c-o>w\x0auN/c0 \x0cZ)杯H\x22UP/|Q2(rf~j6^Gvįe\x0aT] finish_lock_switch+0xbc/0x1e8 [ 217.247816][ T6619] hardirqs last disabled at (348): [] el1_dbg+0x24/0x80 [ 217.249972][ T6619] softirqs last enabled at (326): [] local_bh_enable+0x10/0x34 [ 217.252272][ T6619] softirqs last disabled at (324): [] local_bh_disable+0x10/0x34 [ 217.254558][ T6619] ---[ end trace e8932fbebeb67371 ]--- [ 217.684647][ T6628] Cannot find set identified by id 0 to match [ 217.725859][ T6619] ------------[ cut here ]------------ [ 217.727746][ T6619] WARNING: CPU: 1 PID: 6619 at net/wireless/core.h:228 __cfg80211_wext_giwrate+0x3f0/0x48c [ 217.730416][ T6619] Modules linked in: [ 217.731453][ T6619] CPU: 1 PID: 6619 Comm: syz.1.794 Tainted: G W 5.15.166-syzkaller #0 [ 217.733909][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.736595][ T6619] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.738470][ T6619] pc : __cfg80211_wext_giwrate+0x3f0/0x48c [ 217.740033][ T6619] lr : __cfg80211_wext_giwrate+0x3f0/0x48c [ 217.741566][ T6619] sp : ffff8000205577a0 [ 217.742439][ T6619] x29: ffff800020557970 x28: ffff800020557800 x27: 0000000000000000 [ 217.744568][ T6619] x26: 00000000ffffffa1 x25: ffff0000cdf28000 x24: 0000000000000000 [ 217.746633][ T6619] x23: ffff800020557920 x22: ffff0000cdf285c0 x21: dfff800000000000 [ 217.748703][ T6619] x20: 1fffe00019bdd992 x19: ffff7000040aaefc x18: ffff8000205572a0 [ 217.750732][ T6619] x17: 0000000000000002 x16: ffff8000084c4e2c x15: 0000000000038d35 [ 217.752853][ T6619] x14: 00000000b590714a x13: dfff800000000000 x12: 0000000000040000 [ 217.754904][ T6619] x11: 000000000001e606 x10: ffff8000206f9000 x9 : 000000000001e607 [ 217.757040][ T6619] x8 : ffff8000113df8cc x7 : 0000000000000000 x6 : 0000000000000000 [ 217.759089][ T6619] x5 : ffff800017963958 x4 : 0000000000000008 x3 : ffff8000082e1c3c [ 217.761167][ T6619] x2 : ffff0000d61eb680 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.763193][ T6619] Call trace: [ 217.763988][ T6619] __cfg80211_wext_giwrate+0x3f0/0x48c [ 217.765495][ T6619] ioctl_standard_call+0xe8/0x264 [ 217.766815][ T6619] wext_ioctl_dispatch+0x16c/0x3ec [ 217.768000][ T6619] wext_handle_ioctl+0x224/0x448 [ 217.769264][ T6619] sock_ioctl+0x140/0x8ac [ 217.770254][ T6619] __arm64_sys_ioctl+0x14c/0x1c8 [ 217.771438][ T6619] invoke_syscall+0x98/0x2b8 [ 217.772548][ T6619] el0_svc_common+0x138/0x258 [ 217.773890][ T6619] do_el0_svc+0x58/0x14c [ 217.774918][ T6619] el0_svc+0x7c/0x1f0 [ 217.776013][ T6619] el0t_64_sync_handler+0x84/0xe4 [ 217.777345][ T6619] el0t_64_sync+0x1a0/0x1a4 [ 217.778339][ T6619] irq event stamp: 604 [ 217.779292][ T6619] hardirqs last enabled at (603): [] exit_to_kernel_mode+0x100/0x178 [ 217.781859][ T6619] hardirqs last disabled at (604): [] el1_dbg+0x24/0x80 [ 217.783969][ T6619] softirqs last enabled at (598): [] handle_softirqs+0xb88/0xdbc [ 217.786327][ T6619] softirqs last disabled at (351): [] __irq_exit_rcu+0x268/0x4d8 [ 217.788567][ T6619] ---[ end trace e8932fbebeb67372 ]---