last executing test programs: 3.762675034s ago: executing program 4 (id=321): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000840)=""/4096, 0x1000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) set_mempolicy(0x4000, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x2104) sendto$inet6(r4, 0x0, 0x59, 0x2409c880, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x134}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x844, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x3, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.094129615s ago: executing program 1 (id=329): clock_adjtime(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f00000105001300000000000800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.613220076s ago: executing program 3 (id=333): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x1000000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_dev$mouse(&(0x7f00000004c0), 0xe, 0x30000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.508401916s ago: executing program 4 (id=334): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.211840726s ago: executing program 4 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) r1 = syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe55) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa62e, @void, @value}, 0x94) setfsuid(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, 0x0, 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000004c0), 0x1004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000000000000000000070d0000000000000"], 0x50) 2.038139427s ago: executing program 1 (id=338): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.876918177s ago: executing program 3 (id=340): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000060000000002000040"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.805255127s ago: executing program 4 (id=341): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.681622217s ago: executing program 1 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1.680972057s ago: executing program 2 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) 1.516716207s ago: executing program 3 (id=344): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000840)=""/4096, 0x1000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) set_mempolicy(0x4000, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x2104) sendto$inet6(r4, 0x0, 0x59, 0x2409c880, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x134}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x844, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x3, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.421795558s ago: executing program 1 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x40f5}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0) 1.368014928s ago: executing program 2 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000600)=ANY=[], 0xffdd) 1.288280168s ago: executing program 0 (id=347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20004090) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) 1.154658968s ago: executing program 0 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 975.947669ms ago: executing program 0 (id=349): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) write$binfmt_elf64(r0, 0x0, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000030000001c000000180001801400020076657468305f766c616e"], 0x2c}}, 0x4000) 926.970458ms ago: executing program 2 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800) 879.574749ms ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) r1 = syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe55) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) setfsuid(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, 0x0, 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000004c0), 0x1004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000000000000000000070d0000000000000"], 0x50) 777.744069ms ago: executing program 2 (id=352): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x8}, {0x6}]}) write$ppp(0xffffffffffffffff, &(0x7f0000002240)="0cff82a626f71238", 0x8) 777.304918ms ago: executing program 4 (id=353): mkdir(&(0x7f0000000300)='./file0\x00', 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r1}, 0x18) 570.551149ms ago: executing program 2 (id=354): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 570.014939ms ago: executing program 0 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 568.489259ms ago: executing program 3 (id=356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r3}, 0x18) 459.875279ms ago: executing program 4 (id=357): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0xa, 0x200) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$RTC_UIE_OFF(r2, 0x7004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) set_mempolicy(0x0, 0x0, 0x5) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x21, 0xd, 0x20, 0x6, 0x7, 0x2f505fd2, 0x2, 0xa3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a006bb20000000000000000000002000000000008000afa"], 0x20}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0xf, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x81}, 0x18) fcntl$setpipe(r7, 0x407, 0x6) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x28}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r10}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 459.711359ms ago: executing program 1 (id=358): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 330.86086ms ago: executing program 2 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 270.32171ms ago: executing program 3 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000"], 0x48) 201.57949ms ago: executing program 1 (id=361): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) write$binfmt_elf64(r0, 0x0, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000030000001c000000180001801400020076657468305f766c616e"], 0x2c}}, 0x4000) 55.96468ms ago: executing program 3 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 0s ago: executing program 0 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 67.471898][ T4243] cgroup: Unknown subsys name 'net' [ 67.576955][ T4243] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.092477][ T4243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.564742][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.566971][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.574214][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.580890][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.587848][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.594998][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.601710][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.608657][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.615535][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.629241][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.630454][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.636917][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.643945][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.650671][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.658321][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.666045][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.673919][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.678654][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.686328][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.692584][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.700610][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.706730][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.714312][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.720436][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.727522][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.734441][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.741854][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.748188][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.755346][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.784495][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.256127][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 71.292506][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 71.320396][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 71.389834][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 71.434536][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441172][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.453755][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 71.517395][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.525298][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.537237][ T4256] device bridge_slave_0 entered promiscuous mode [ 71.558262][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.565517][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.574159][ T4255] device bridge_slave_0 entered promiscuous mode [ 71.582918][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.590099][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.597942][ T4256] device bridge_slave_1 entered promiscuous mode [ 71.635461][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.642782][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.651246][ T4255] device bridge_slave_1 entered promiscuous mode [ 71.678851][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.688800][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.697303][ T4254] device bridge_slave_0 entered promiscuous mode [ 71.733459][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.740685][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.748549][ T4254] device bridge_slave_1 entered promiscuous mode [ 71.766413][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.780588][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.787704][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.796132][ T4265] device bridge_slave_0 entered promiscuous mode [ 71.815883][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.827161][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.844974][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.852279][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.860855][ T4265] device bridge_slave_1 entered promiscuous mode [ 71.876870][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.912808][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.948562][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.955881][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.964125][ T4263] device bridge_slave_0 entered promiscuous mode [ 71.974081][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.995286][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.016666][ T4256] team0: Port device team_slave_0 added [ 72.023273][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.030786][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.039045][ T4263] device bridge_slave_1 entered promiscuous mode [ 72.055591][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.067401][ T4255] team0: Port device team_slave_0 added [ 72.076084][ T4256] team0: Port device team_slave_1 added [ 72.091657][ T4254] team0: Port device team_slave_0 added [ 72.114772][ T4255] team0: Port device team_slave_1 added [ 72.130493][ T4254] team0: Port device team_slave_1 added [ 72.138005][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.174869][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.204357][ T4265] team0: Port device team_slave_0 added [ 72.211603][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.218576][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.244879][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.284896][ T4265] team0: Port device team_slave_1 added [ 72.291273][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.298251][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.324462][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.336087][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.343309][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.369381][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.390165][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.397156][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.423251][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.447805][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.455074][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.485379][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.501332][ T4263] team0: Port device team_slave_0 added [ 72.507779][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.514911][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.541789][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.567872][ T4263] team0: Port device team_slave_1 added [ 72.579268][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.586884][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.613109][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.626327][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.633525][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.660290][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.721413][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.728405][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.754581][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.787487][ T4254] device hsr_slave_0 entered promiscuous mode [ 72.794756][ T4254] device hsr_slave_1 entered promiscuous mode [ 72.811434][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.818441][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.844942][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.858971][ T4256] device hsr_slave_0 entered promiscuous mode [ 72.865750][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 72.868103][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 72.873205][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 72.878518][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 72.884564][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 72.892723][ T4256] device hsr_slave_1 entered promiscuous mode [ 72.903919][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.911863][ T4256] Cannot create hsr debugfs directory [ 72.937610][ T4255] device hsr_slave_0 entered promiscuous mode [ 72.944723][ T4255] device hsr_slave_1 entered promiscuous mode [ 72.951608][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.959181][ T4255] Cannot create hsr debugfs directory [ 72.981936][ T4265] device hsr_slave_0 entered promiscuous mode [ 72.988905][ T4265] device hsr_slave_1 entered promiscuous mode [ 72.995603][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.003610][ T4265] Cannot create hsr debugfs directory [ 73.098043][ T4263] device hsr_slave_0 entered promiscuous mode [ 73.105324][ T4263] device hsr_slave_1 entered promiscuous mode [ 73.112251][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.119873][ T4263] Cannot create hsr debugfs directory [ 73.424619][ T4256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.436303][ T4256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.446680][ T4256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.459668][ T4256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.542134][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.567427][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.577317][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.593016][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.651654][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.663156][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.675096][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.686800][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.719378][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.760486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.770339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.797294][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.823141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.832474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.842881][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.850261][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.859422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.868678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.877620][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.884773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.896229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.909042][ T4255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.929251][ T4255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.943813][ T4255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.954984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.965786][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.994930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.007343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.016781][ T4255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.035269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.062871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.073601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.110094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.118663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.135815][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.149299][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.161629][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.174210][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.186766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.195703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.216658][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.226572][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.266172][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.275108][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.286396][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.301046][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.319515][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.376926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.388207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.397533][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.404707][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.415072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.424125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.433312][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.440501][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.451214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.459333][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.468924][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.500881][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.507932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.517706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.528363][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.556066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.575210][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.596978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.606749][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.620639][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.652935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.662298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.671096][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.678224][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.686975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.696862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.707773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.717652][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.726911][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.734238][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.742708][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.751474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.759965][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.768734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.778422][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.791517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.799449][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.841190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.850806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.864374][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.873705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.884673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.893622][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.916440][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.935467][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.940432][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 74.946202][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 74.951925][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 74.957857][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 74.964804][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 74.989067][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.006040][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.017435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.033778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.053602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.066519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.078086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.090345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.115100][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.128986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.151468][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.158507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.170812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.209886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.218638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.256121][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.263352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.296740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.306549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.323010][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.330192][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.338714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.348535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.357546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.364689][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.373361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.381731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.399084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.408690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.446220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.473295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.492769][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.499999][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.540301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.549314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.559003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.570834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.596478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.656395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.673202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.685007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.695395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.704618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.713706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.722796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.731832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.740842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.748337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.756559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.765918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.775037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.785275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.797795][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.808206][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.824940][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.836778][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.849131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.857590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.866735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.903380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.912340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.934867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.961898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.004996][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.071190][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.091202][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.126291][ T4254] device veth0_vlan entered promiscuous mode [ 76.142802][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.151635][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.160970][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.170146][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.178888][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.188254][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.198882][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.207732][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.216297][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.225767][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.242462][ T4256] device veth0_vlan entered promiscuous mode [ 76.276358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.291655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.306219][ T4254] device veth1_vlan entered promiscuous mode [ 76.326149][ T4265] device veth0_vlan entered promiscuous mode [ 76.346433][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.366812][ T4256] device veth1_vlan entered promiscuous mode [ 76.375716][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.387889][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.397786][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.407832][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.419109][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.427215][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.453532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.462956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.486777][ T4265] device veth1_vlan entered promiscuous mode [ 76.520321][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.528390][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.539486][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.549366][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.558581][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.592505][ T4255] device veth0_vlan entered promiscuous mode [ 76.602572][ T4256] device veth0_macvtap entered promiscuous mode [ 76.615318][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.625494][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.634421][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.643695][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.652500][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.676486][ T4254] device veth0_macvtap entered promiscuous mode [ 76.690280][ T4256] device veth1_macvtap entered promiscuous mode [ 76.704651][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.713238][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.722425][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.730735][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.738866][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.748624][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.764768][ T4255] device veth1_vlan entered promiscuous mode [ 76.775324][ T4254] device veth1_macvtap entered promiscuous mode [ 76.790426][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.800898][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.809003][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.818491][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.845047][ T4265] device veth0_macvtap entered promiscuous mode [ 76.869283][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.878212][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.888866][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.898149][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.908188][ T4263] device veth0_vlan entered promiscuous mode [ 76.920355][ T4265] device veth1_macvtap entered promiscuous mode [ 76.933818][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.945362][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.954532][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.962772][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.971445][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.980953][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.994316][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.005263][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.019169][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.026740][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 77.026782][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 77.026813][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 77.026844][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 77.030729][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 77.046005][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.068618][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.078691][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.089235][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.115130][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.136921][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.146014][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.156797][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.171923][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.182809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.192033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.201710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.210724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.219269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.228503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.238295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.247805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.256821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.266080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.277892][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.289189][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.299367][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.310336][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.321847][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.331709][ T4255] device veth0_macvtap entered promiscuous mode [ 77.353816][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362982][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.375383][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.384171][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.397724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.406347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.416046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.427908][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.437117][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446205][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.455419][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468280][ T4255] device veth1_macvtap entered promiscuous mode [ 77.477465][ T4256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.486611][ T4256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.495638][ T4256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505473][ T4256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.517048][ T4263] device veth1_vlan entered promiscuous mode [ 77.641883][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.653156][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.671715][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.682654][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.692989][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.703937][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.715681][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.749164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.761318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.771623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.781003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.790864][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.802416][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.813295][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.824336][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.835540][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.846228][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.857969][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.879095][ T4263] device veth0_macvtap entered promiscuous mode [ 77.894002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.903659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.913044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.924582][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934010][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.942912][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.953693][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.975678][ T4263] device veth1_macvtap entered promiscuous mode [ 78.000529][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.014625][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049284][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.058258][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.086632][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.097398][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.108541][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.120249][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.131288][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.142756][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.152851][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.163571][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.174967][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.201946][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.210524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.219267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.220621][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.238281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.252347][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.263274][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.273578][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.284077][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.294165][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.305722][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.315907][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.326757][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.338399][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.360036][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.368967][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.383320][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392762][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.403144][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.412253][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.431522][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.445152][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.455894][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.478286][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.487194][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.505780][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.547304][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.571380][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.616428][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.618562][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.636083][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.663851][ T1070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.779188][ T4338] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 78.790366][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.791378][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.798333][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.815685][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.845631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.888483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.896062][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.915450][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.942879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.962814][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.979693][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.013985][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.104277][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 79.111415][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 79.111543][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 79.117445][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 79.123694][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 79.290175][ T4350] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.307755][ T4346] tipc: Started in network mode [ 79.320127][ T4350] loop3: detected capacity change from 0 to 256 [ 79.331528][ T4353] 9pnet_fd: Insufficient options for proto=fd [ 79.357571][ T4346] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 79.358543][ T4350] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.394844][ T27] audit: type=1326 audit(1733550312.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee4f7fed9 code=0x7ffc0000 [ 79.412433][ T4346] tipc: Enabled bearer , priority 10 [ 79.467454][ T27] audit: type=1326 audit(1733550312.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7ee4f7fed9 code=0x7ffc0000 [ 79.564386][ T27] audit: type=1326 audit(1733550312.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee4f7fed9 code=0x7ffc0000 [ 79.662198][ T27] audit: type=1326 audit(1733550312.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7ee4f7fed9 code=0x7ffc0000 [ 79.721027][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 79.750782][ T27] audit: type=1326 audit(1733550312.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee4f7fed9 code=0x7ffc0000 [ 79.801558][ T27] audit: type=1326 audit(1733550313.250:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 79.852985][ T27] audit: type=1326 audit(1733550313.250:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 79.908265][ T4361] hub 9-0:1.0: USB hub found [ 79.913079][ T27] audit: type=1326 audit(1733550313.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 79.913121][ T27] audit: type=1326 audit(1733550313.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 79.913156][ T27] audit: type=1326 audit(1733550313.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 80.063492][ T4368] mmap: syz.1.10 (4368) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.133405][ T4361] hub 9-0:1.0: 1 port detected [ 80.149191][ T26] kernel write not supported for file /snd/seq (pid: 26 comm: kworker/1:1) [ 80.180823][ T4371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 80.429550][ T4380] loop0: detected capacity change from 0 to 2048 [ 80.539060][ T4299] tipc: Node number set to 4269801491 [ 80.565679][ T4376] loop4: detected capacity change from 0 to 2048 [ 80.594888][ T4380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.696294][ T4389] loop1: detected capacity change from 0 to 512 [ 80.715524][ T4376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.792355][ T4391] device veth0_to_team entered promiscuous mode [ 80.808985][ T4389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.878660][ T4389] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.917755][ T4376] EXT4-fs (loop4): shut down requested (0) [ 80.961666][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 81.202963][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 81.262192][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 81.431237][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 81.461179][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 81.490204][ T4409] loop0: detected capacity change from 0 to 1024 [ 81.505558][ T4403] device bond0 entered promiscuous mode [ 81.540467][ T4409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.547957][ T4409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.555444][ T4403] device bond_slave_0 entered promiscuous mode [ 81.610429][ T4403] device bond_slave_1 entered promiscuous mode [ 81.613171][ T4409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.652508][ T4403] device bond0 left promiscuous mode [ 81.657869][ T4403] device bond_slave_0 left promiscuous mode [ 81.678772][ T4406] loop4: detected capacity change from 0 to 8192 [ 81.680213][ T4403] device bond_slave_1 left promiscuous mode [ 81.747538][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.963456][ T4409] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 81.975459][ T4414] process 'syz.2.28' launched './file0' with NULL argv: empty string added [ 82.126051][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 82.226061][ T4416] device vlan2 entered promiscuous mode [ 82.302305][ T4416] device bond0 entered promiscuous mode [ 82.307925][ T4416] device bond_slave_0 entered promiscuous mode [ 82.370244][ T4416] device bond_slave_1 entered promiscuous mode [ 82.386009][ T4420] loop2: detected capacity change from 0 to 2048 [ 82.450061][ T4416] device bond0 left promiscuous mode [ 82.455430][ T4416] device bond_slave_0 left promiscuous mode [ 82.468509][ T4420] Alternate GPT is invalid, using primary GPT. [ 82.474623][ T4416] device bond_slave_1 left promiscuous mode [ 82.500005][ T4420] loop2: p2 p3 p7 [ 82.628976][ T4419] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 83.086163][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 83.265259][ T4448] loop2: detected capacity change from 0 to 512 [ 83.338522][ T4448] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.40: invalid indirect mapped block 256 (level 2) [ 83.392045][ T4448] EXT4-fs (loop2): 2 truncates cleaned up [ 83.421263][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.421283][ T4442] device wireguard0 entered promiscuous mode [ 83.546979][ T4448] bridge0: port 3(vlan2) entered blocking state [ 83.562982][ T4458] loop0: detected capacity change from 0 to 2048 [ 83.569755][ T4448] bridge0: port 3(vlan2) entered disabled state [ 83.588471][ T4448] device vlan2 entered promiscuous mode [ 83.594853][ T4448] device bond0 entered promiscuous mode [ 83.600761][ T4448] device bond_slave_0 entered promiscuous mode [ 83.607678][ T4448] device bond_slave_1 entered promiscuous mode [ 83.636252][ T4448] bridge0: port 3(vlan2) entered blocking state [ 83.642949][ T4448] bridge0: port 3(vlan2) entered forwarding state [ 83.657374][ T4458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.704397][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 83.745173][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 83.763423][ T4462] device gretap0 entered promiscuous mode [ 83.770988][ T4462] device batadv_slave_1 entered promiscuous mode [ 83.774845][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 83.790043][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 83.798631][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 84.258928][ T4476] loop1: detected capacity change from 0 to 512 [ 84.344448][ T4476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.410405][ T4476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.494851][ T4476] EXT4-fs (loop1): 1 truncate cleaned up [ 84.510954][ T4476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.556453][ T4484] loop4: detected capacity change from 0 to 2048 [ 84.580556][ T4476] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.51: corrupted in-inode xattr [ 84.596764][ T4476] EXT4-fs (loop1): Remounting filesystem read-only [ 84.603647][ T4476] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1723: inode #15: comm syz.1.51: unable to update i_inline_off [ 84.617997][ T4476] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.754885][ T27] kauditd_printk_skb: 90 callbacks suppressed [ 84.754903][ T27] audit: type=1326 audit(1733550318.280:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 84.791815][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.858573][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 84.966765][ T4502] loop3: detected capacity change from 0 to 512 [ 84.966889][ T27] audit: type=1326 audit(1733550318.290:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.047867][ T4502] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 85.075130][ T27] audit: type=1326 audit(1733550318.290:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.111633][ T4502] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 85.125102][ T4502] EXT4-fs (loop3): 1 truncate cleaned up [ 85.130965][ T4502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.144787][ T4502] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 85.153810][ T4502] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 85.164236][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 85.184386][ T4506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 85.189970][ T27] audit: type=1326 audit(1733550318.290:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.219150][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 85.269865][ T4506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 85.307554][ T27] audit: type=1326 audit(1733550318.290:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.358924][ T27] audit: type=1326 audit(1733550318.290:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.408110][ T4511] device vlan2 entered promiscuous mode [ 85.424523][ T27] audit: type=1326 audit(1733550318.290:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.435839][ T4509] futex_wake_op: syz.0.64 tries to shift op by 32; fix this program [ 85.464412][ T27] audit: type=1326 audit(1733550318.290:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.466347][ T4511] device bond0 entered promiscuous mode [ 85.526645][ T4511] device bond_slave_0 entered promiscuous mode [ 85.538781][ T4511] device bond_slave_1 entered promiscuous mode [ 85.546918][ T27] audit: type=1326 audit(1733550318.290:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.587799][ T4511] device bond0 left promiscuous mode [ 85.601512][ T4511] device bond_slave_0 left promiscuous mode [ 85.618710][ T27] audit: type=1326 audit(1733550318.290:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 85.623847][ T4511] device bond_slave_1 left promiscuous mode [ 85.799938][ T4509] device wireguard0 entered promiscuous mode [ 86.298024][ T4537] loop4: detected capacity change from 0 to 2048 [ 86.376461][ T4541] loop2: detected capacity change from 0 to 512 [ 86.391207][ T4540] loop1: detected capacity change from 0 to 4096 [ 86.417703][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.430071][ T4540] EXT4-fs: Invalid commit interval 50331648, must be smaller than 21474836 [ 86.490955][ T4541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.529817][ T4541] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.576896][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 86.792324][ T1197] cfg80211: failed to load regulatory.db [ 86.823081][ T4553] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 86.833207][ T4552] IPVS: stopping master sync thread 4553 ... [ 86.917556][ T4558] device vlan2 entered promiscuous mode [ 86.950609][ T4558] device bond0 entered promiscuous mode [ 86.956241][ T4558] device bond_slave_0 entered promiscuous mode [ 86.983429][ T4558] device bond_slave_1 entered promiscuous mode [ 86.996859][ T4558] device bond0 left promiscuous mode [ 86.996880][ T4558] device bond_slave_0 left promiscuous mode [ 86.997022][ T4558] device bond_slave_1 left promiscuous mode [ 87.160967][ T4564] loop1: detected capacity change from 0 to 4096 [ 87.236913][ T4564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.257564][ T4572] Zero length message leads to an empty skb [ 87.376973][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 87.656165][ T4579] loop3: detected capacity change from 0 to 2048 [ 87.711317][ T4579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.882497][ T4588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.91'. [ 87.929372][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 88.073463][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 88.221153][ T4596] loop0: detected capacity change from 0 to 512 [ 88.256560][ T4596] ======================================================= [ 88.256560][ T4596] WARNING: The mand mount option has been deprecated and [ 88.256560][ T4596] and is ignored by this kernel. Remove the mand [ 88.256560][ T4596] option from the mount to silence this warning. [ 88.256560][ T4596] ======================================================= [ 88.415834][ T4596] EXT4-fs (loop0): 1 truncate cleaned up [ 88.436721][ T4603] loop2: detected capacity change from 0 to 512 [ 88.444850][ T4603] ext4: Unknown parameter 'fsmagic' [ 88.445768][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.498657][ T4336] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.630088][ T4596] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.95: Directory hole found for htree leaf block 0 [ 88.771711][ T4609] syz.3.100[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.771824][ T4609] syz.3.100[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.786538][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 88.808618][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 88.832073][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.146678][ T4617] loop3: detected capacity change from 0 to 2048 [ 89.220633][ T4617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.258665][ T4603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.278397][ T4603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.298460][ T4603] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 89.352513][ T4603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.360509][ T4603] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.366641][ T4603] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 89.374223][ T4603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.392311][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 89.539452][ T4627] netlink: 'syz.3.105': attribute type 8 has an invalid length. [ 89.554684][ T4627] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 89.640707][ T4603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.647580][ T4603] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 89.799873][ T4603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.808086][ T4603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.860651][ T4603] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 89.869095][ T4603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.906134][ T4634] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.949839][ T4635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.109'. [ 89.975623][ T4637] loop0: detected capacity change from 0 to 512 [ 90.074372][ T4637] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.095722][ T4603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.119326][ T4603] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 90.133652][ T4637] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.108: bg 0: block 248: padding at end of block bitmap is not set [ 90.270101][ T4637] __quota_error: 17 callbacks suppressed [ 90.270123][ T4637] Quota error (device loop0): write_blk: dquota write failed [ 90.337589][ T4637] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 90.366008][ T4637] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.108: Failed to acquire dquot type 1 [ 90.436052][ T4637] EXT4-fs (loop0): 1 truncate cleaned up [ 90.463312][ T4637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.497139][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 90.526971][ T4650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 90.573164][ T4637] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 90.592224][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.626124][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.632215][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.644484][ T4652] loop1: detected capacity change from 0 to 2048 [ 90.651751][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.655866][ T4637] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 90.685997][ T4650] device bridge_slave_0 left promiscuous mode [ 90.697053][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.708803][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.733453][ T27] audit: type=1804 audit(1733550324.270:129): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.115" name="/newroot/26/file2/file1" dev="loop1" ino=15 res=1 errno=0 [ 90.734969][ T4650] device bridge_slave_1 left promiscuous mode [ 90.767260][ T4637] syz.0.108 (4637) used greatest stack depth: 19808 bytes left [ 90.810987][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 90.817326][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.855897][ T4650] bond0: (slave bond_slave_0): Releasing backup interface [ 90.920318][ T4650] bond0: (slave bond_slave_1): Releasing backup interface [ 90.931567][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 91.007272][ T4650] team0: Port device team_slave_0 removed [ 91.035679][ T4650] team0: Port device team_slave_1 removed [ 91.048641][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.062302][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.076861][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.088337][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.157534][ T4665] device vlan2 entered promiscuous mode [ 91.172068][ T4665] device bond0 entered promiscuous mode [ 91.192501][ T4665] device bond_slave_0 entered promiscuous mode [ 91.212826][ T4665] device bond_slave_1 entered promiscuous mode [ 91.277811][ T4665] device bond0 left promiscuous mode [ 91.286893][ T4665] device bond_slave_0 left promiscuous mode [ 91.306258][ T4665] device bond_slave_1 left promiscuous mode [ 91.373528][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 91.396465][ T4675] loop0: detected capacity change from 0 to 512 [ 91.412086][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 91.421490][ T4271] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.429727][ T4271] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.454288][ T4671] device bridge0 entered promiscuous mode [ 91.461914][ T4671] device ip6gretap0 entered promiscuous mode [ 91.469100][ T4671] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 91.477712][ T4671] Cannot create hsr debugfs directory [ 91.502093][ T27] audit: type=1326 audit(1733550325.040:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.540025][ T4675] loop0: detected capacity change from 0 to 128 [ 91.567839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 91.596630][ T27] audit: type=1326 audit(1733550325.070:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.724724][ T27] audit: type=1326 audit(1733550325.070:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.728604][ T4681] device sit0 entered promiscuous mode [ 91.820012][ T4271] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.827105][ T27] audit: type=1326 audit(1733550325.070:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.859839][ T27] audit: type=1326 audit(1733550325.070:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.873184][ T4686] loop3: detected capacity change from 0 to 512 [ 91.888055][ T27] audit: type=1326 audit(1733550325.070:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.914246][ T4271] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.920677][ T27] audit: type=1326 audit(1733550325.070:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 91.945303][ T4687] loop2: detected capacity change from 0 to 2048 [ 91.948503][ T4681] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 91.952606][ T4686] ext4: Unknown parameter 'fsmagic' [ 91.979772][ T4681] netlink: 9 bytes leftover after parsing attributes in process `syz.1.125'. [ 92.008468][ T4691] loop0: detected capacity change from 0 to 1024 [ 92.017036][ T4691] EXT4-fs: Ignoring removed oldalloc option [ 92.035162][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.060845][ T4687] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.062115][ T4691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.079938][ T4687] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 92.100191][ T4687] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.100191][ T4687] [ 92.111775][ T4687] EXT4-fs (loop2): Total free blocks count 0 [ 92.120971][ T4687] EXT4-fs (loop2): Free/Dirty block details [ 92.127866][ T4691] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 92.162624][ T4687] EXT4-fs (loop2): free_blocks=2415919104 [ 92.164335][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 92.205966][ T4687] EXT4-fs (loop2): dirty_blocks=48 [ 92.229698][ T4687] EXT4-fs (loop2): Block reservation details [ 92.256138][ T4687] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 92.387770][ T4318] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.545276][ T4704] syz.0.133 uses obsolete (PF_INET,SOCK_PACKET) [ 92.621133][ T4685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.631758][ T4685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.667982][ T4685] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 92.678940][ T4714] loop2: detected capacity change from 0 to 512 [ 92.697754][ T4685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.707467][ T4685] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.719454][ T4685] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 92.735388][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.746410][ T4685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.764647][ T4714] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.778013][ T4685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.790983][ T4685] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 92.798519][ T4685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.848874][ T4718] program syz.0.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.860313][ T4685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.866316][ T4685] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 92.893987][ T4685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 92.914236][ T4685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 92.944612][ T4685] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 93.313391][ T4731] loop0: detected capacity change from 0 to 2048 [ 93.398649][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.445369][ T4731] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.461669][ T4739] loop3: detected capacity change from 0 to 164 [ 93.507357][ T4737] device veth0_to_team entered promiscuous mode [ 93.541399][ T4731] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 93.560120][ T4731] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.560120][ T4731] [ 93.568517][ T4739] syz.3.145: attempt to access beyond end of device [ 93.568517][ T4739] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.620046][ T4731] EXT4-fs (loop0): Total free blocks count 0 [ 93.626105][ T4731] EXT4-fs (loop0): Free/Dirty block details [ 93.641616][ T4739] syz.3.145: attempt to access beyond end of device [ 93.641616][ T4739] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.711285][ T4731] EXT4-fs (loop0): free_blocks=2415919104 [ 93.737941][ T4731] EXT4-fs (loop0): dirty_blocks=48 [ 93.759761][ T4731] EXT4-fs (loop0): Block reservation details [ 93.774486][ T4731] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 93.917361][ T1070] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.139935][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.160202][ T4755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 94.226385][ T4755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 94.278591][ T4755] device gretap0 entered promiscuous mode [ 94.292254][ T4759] loop1: detected capacity change from 0 to 512 [ 94.305616][ T4755] device batadv_slave_1 entered promiscuous mode [ 94.316122][ T4755] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 94.341363][ T4755] Cannot create hsr debugfs directory [ 94.363697][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 94.394088][ T4759] EXT4-fs (loop1): too many log groups per flexible block group [ 94.424182][ T4759] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 94.472086][ T4759] EXT4-fs (loop1): mount failed [ 94.599152][ T4764] loop0: detected capacity change from 0 to 2048 [ 94.690819][ T4764] Alternate GPT is invalid, using primary GPT. [ 94.697319][ T4764] loop0: p2 p3 p7 [ 94.701414][ T4257] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.779782][ T4257] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.859792][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.940131][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.996551][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 95.016315][ T4426] udevd[4426]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 95.028234][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 95.031960][ T4772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 95.052842][ T4773] loop4: detected capacity change from 0 to 512 [ 95.054325][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 95.059305][ T4772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 95.153334][ T4369] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.174317][ T4772] device bond0 entered promiscuous mode [ 95.217645][ T4772] device bond_slave_0 entered promiscuous mode [ 95.231541][ T4426] udevd[4426]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 95.247212][ T4430] udevd[4430]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 95.260681][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 95.270365][ T4772] device bond_slave_1 entered promiscuous mode [ 95.295084][ T4772] device bond0 left promiscuous mode [ 95.304963][ T4777] loop2: detected capacity change from 0 to 2048 [ 95.319807][ T4772] device bond_slave_0 left promiscuous mode [ 95.332624][ T4772] device bond_slave_1 left promiscuous mode [ 95.375726][ T4775] device vlan2 entered promiscuous mode [ 95.387090][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.404327][ T4775] device bond0 entered promiscuous mode [ 95.424161][ T4777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.499183][ T4775] device bond_slave_0 entered promiscuous mode [ 95.525150][ T4777] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 95.535980][ T4775] device bond_slave_1 entered promiscuous mode [ 95.537822][ T4777] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.537822][ T4777] [ 95.553808][ T4777] EXT4-fs (loop2): Total free blocks count 0 [ 95.559973][ T4777] EXT4-fs (loop2): Free/Dirty block details [ 95.571722][ T4777] EXT4-fs (loop2): free_blocks=2415919104 [ 95.591013][ T4777] EXT4-fs (loop2): dirty_blocks=48 [ 95.600755][ T4777] EXT4-fs (loop2): Block reservation details [ 95.606994][ T4777] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 95.607422][ T4775] device bond0 left promiscuous mode [ 95.624787][ T4775] device bond_slave_0 left promiscuous mode [ 95.636893][ T4786] IPv4: Oversized IP packet from 127.202.26.0 [ 95.648965][ T4775] device bond_slave_1 left promiscuous mode [ 95.648976][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.915911][ T4794] loop3: detected capacity change from 0 to 512 [ 95.974990][ T4798] random: crng reseeded on system resumption [ 95.990600][ T4794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.061372][ T4794] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.213622][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 96.219724][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 96.338492][ T4807] loop0: detected capacity change from 0 to 512 [ 96.454438][ T4807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.485796][ T4807] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.779962][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 96.848913][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.859812][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 96.909181][ T4826] netlink: 'syz.4.177': attribute type 10 has an invalid length. [ 96.934976][ T4826] device veth0_macvtap left promiscuous mode [ 96.948436][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 96.978422][ T4826] device veth0_macvtap entered promiscuous mode [ 96.998550][ T4826] team0: Device macvtap0 failed to register rx_handler [ 97.019849][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 97.062409][ T4826] device veth0_macvtap left promiscuous mode [ 97.376853][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 97.376869][ T27] audit: type=1326 audit(1733550330.910:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 97.519666][ T27] audit: type=1326 audit(1733550330.910:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 97.737678][ T27] audit: type=1326 audit(1733550330.970:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 97.782568][ T27] audit: type=1326 audit(1733550330.970:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.021390][ T27] audit: type=1326 audit(1733550330.970:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.181799][ T27] audit: type=1326 audit(1733550330.970:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.209700][ T27] audit: type=1326 audit(1733550330.970:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.249659][ T27] audit: type=1326 audit(1733550330.970:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.310579][ T27] audit: type=1326 audit(1733550330.970:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.379923][ T27] audit: type=1326 audit(1733550330.970:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7547b7fed9 code=0x7ffc0000 [ 98.432185][ T4860] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.479760][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 98.624076][ T4866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.193'. [ 98.652654][ T4870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 99.077830][ T4880] device vlan2 entered promiscuous mode [ 99.108659][ T4882] loop0: detected capacity change from 0 to 512 [ 99.131819][ T4880] device bond0 entered promiscuous mode [ 99.149904][ T4880] device bond_slave_0 entered promiscuous mode [ 99.157607][ T4880] device bond_slave_1 entered promiscuous mode [ 99.173580][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.187602][ T4880] device bond0 left promiscuous mode [ 99.200282][ T4882] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.228172][ T4880] device bond_slave_0 left promiscuous mode [ 99.235694][ T4880] device bond_slave_1 left promiscuous mode [ 99.726073][ T4901] loop1: detected capacity change from 0 to 128 [ 99.919647][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 99.938874][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 100.331069][ T4914] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 100.331069][ T4914] program syz.4.214 not setting count and/or reply_len properly [ 101.880078][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 101.892069][ T4937] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.222' sets config #1 [ 102.054584][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 102.116023][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 102.343513][ T4952] loop3: detected capacity change from 0 to 512 [ 102.369399][ T4952] EXT4-fs: Ignoring removed bh option [ 102.410722][ T4952] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.486126][ T4952] EXT4-fs (loop3): 1 truncate cleaned up [ 102.497610][ T4952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.675422][ T4955] 9pnet: Could not find request transport: fd0x0000000000000004 [ 102.732903][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 102.870574][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 102.870590][ T27] audit: type=1326 audit(1733550336.410:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 102.981153][ T27] audit: type=1326 audit(1733550336.440:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.058717][ T27] audit: type=1326 audit(1733550336.440:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.175432][ T27] audit: type=1326 audit(1733550336.440:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.252490][ T27] audit: type=1326 audit(1733550336.450:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.349969][ T27] audit: type=1326 audit(1733550336.450:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.412753][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'. [ 103.424861][ T27] audit: type=1326 audit(1733550336.450:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.461289][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 103.518066][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.538845][ T27] audit: type=1326 audit(1733550336.460:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.592114][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.608031][ T27] audit: type=1326 audit(1733550336.460:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.630798][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.666809][ T4989] device bridge_slave_0 left promiscuous mode [ 103.700420][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.720938][ T27] audit: type=1326 audit(1733550336.460:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b61b7fed9 code=0x7ffc0000 [ 103.745381][ T4989] device bridge_slave_1 left promiscuous mode [ 103.760652][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.784262][ T4989] bond0: (slave bond_slave_0): Releasing backup interface [ 103.830199][ T4989] bond0: (slave bond_slave_1): Releasing backup interface [ 103.949403][ T4989] team0: Port device team_slave_0 removed [ 103.983501][ T4989] team0: Port device team_slave_1 removed [ 104.003876][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.024584][ T4989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.046943][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.070484][ T4989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.478960][ T5007] 9pnet: Could not find request transport: fd0x0000000000000004 [ 104.488675][ T5014] usb usb8: usbfs: process 5014 (syz.2.250) did not claim interface 0 before use [ 104.715554][ T5020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'. [ 104.739058][ T5020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'. [ 104.969928][ T4301] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.045582][ T5031] loop1: detected capacity change from 0 to 512 [ 105.067856][ T5034] random: crng reseeded on system resumption [ 105.071357][ T5031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.149715][ T4301] usb 5-1: device descriptor read/64, error -71 [ 105.164808][ T5031] EXT4-fs (loop1): 1 truncate cleaned up [ 105.188925][ T5033] loop3: detected capacity change from 0 to 1024 [ 105.197382][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.259137][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.400840][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 105.434424][ T4301] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.462656][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 105.619661][ T4301] usb 5-1: device descriptor read/64, error -71 [ 105.654740][ T5048] loop3: detected capacity change from 0 to 512 [ 105.676131][ T5048] EXT4-fs: inline encryption not supported [ 105.737743][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.750270][ T4301] usb usb5-port1: attempt power cycle [ 105.831366][ T5048] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.886092][ T5048] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.262: corrupted inode contents [ 105.921784][ T5048] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.262: mark_inode_dirty error [ 105.950522][ T5048] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.262: corrupted inode contents [ 105.996911][ T5059] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.262: corrupted inode contents [ 106.038620][ T5059] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.262: mark_inode_dirty error [ 106.059811][ T5059] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.262: corrupted inode contents [ 106.079738][ T5059] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.262: mark_inode_dirty error [ 106.100496][ T5059] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.262: corrupted inode contents [ 106.153798][ T5059] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.262: mark_inode_dirty error [ 106.209866][ T4301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.253367][ T4301] usb 5-1: device descriptor read/8, error -71 [ 106.264627][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 106.529703][ T4301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.570865][ T4301] usb 5-1: device descriptor read/8, error -71 [ 106.703566][ T4301] usb usb5-port1: unable to enumerate USB device [ 106.713829][ T5074] loop3: detected capacity change from 0 to 1024 [ 106.759405][ T5074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.896348][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 107.209745][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.232846][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.277276][ T5089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.276'. [ 107.519495][ T5096] random: crng reseeded on system resumption [ 107.620743][ T5099] syz.0.280[5099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.620851][ T5099] syz.0.280[5099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.890268][ T27] kauditd_printk_skb: 116 callbacks suppressed [ 107.890287][ T27] audit: type=1326 audit(1733550341.060:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dcd76ea7 code=0x7ffc0000 [ 107.966950][ T27] audit: type=1326 audit(1733550341.110:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dcd1c0e9 code=0x7ffc0000 [ 108.024743][ T5106] loop0: detected capacity change from 0 to 1024 [ 108.029222][ T27] audit: type=1326 audit(1733550341.110:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dcd76ea7 code=0x7ffc0000 [ 108.074516][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.136591][ T27] audit: type=1326 audit(1733550341.110:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dcd1c0e9 code=0x7ffc0000 [ 108.198695][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 108.208605][ T27] audit: type=1326 audit(1733550341.110:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 108.254112][ T27] audit: type=1326 audit(1733550341.120:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dcd76ea7 code=0x7ffc0000 [ 108.367061][ T27] audit: type=1326 audit(1733550341.120:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dcd1c0e9 code=0x7ffc0000 [ 108.424018][ T27] audit: type=1326 audit(1733550341.120:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4dcd7fed9 code=0x7ffc0000 [ 108.489705][ T27] audit: type=1326 audit(1733550341.120:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dcd76ea7 code=0x7ffc0000 [ 108.565090][ T27] audit: type=1326 audit(1733550341.120:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dcd1c0e9 code=0x7ffc0000 [ 108.812814][ T5128] loop2: detected capacity change from 0 to 512 [ 108.871867][ T5130] device veth0_to_team entered promiscuous mode [ 108.889328][ T5133] loop3: detected capacity change from 0 to 1024 [ 108.961167][ T5133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.981991][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.060529][ T5128] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.316295][ T5154] random: crng reseeded on system resumption [ 110.185909][ T5174] loop4: detected capacity change from 0 to 1024 [ 110.504578][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 110.581872][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.616643][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.643243][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.685756][ T5190] syz.0.315[5190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.685869][ T5190] syz.0.315[5190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.724139][ T4254] EXT4-fs unmount: 3 callbacks suppressed [ 110.724157][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 111.216613][ T5204] loop2: detected capacity change from 0 to 1024 [ 111.302114][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.380601][ T5218] random: crng reseeded on system resumption [ 111.398884][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 111.584275][ T5223] loop2: detected capacity change from 0 to 512 [ 111.643434][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.660403][ T5223] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.887573][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 111.966499][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.016805][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.043293][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.074455][ T5230] device bridge_slave_0 left promiscuous mode [ 112.089961][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.128436][ T5230] device bridge_slave_1 left promiscuous mode [ 112.176656][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.215567][ T5230] bond0: (slave bond_slave_0): Releasing backup interface [ 112.270246][ T5230] bond0: (slave bond_slave_1): Releasing backup interface [ 112.413608][ T5230] team0: Port device team_slave_0 removed [ 112.457467][ T5230] team0: Port device team_slave_1 removed [ 112.468018][ T5245] usb usb7: usbfs: process 5245 (syz.0.335) did not claim interface 0 before use [ 112.479181][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.496045][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.512751][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.532660][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.798901][ T5250] loop4: detected capacity change from 0 to 1024 [ 112.853474][ T5250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.996695][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 113.067062][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 113.077028][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 113.096629][ T5261] device bridge0 entered promiscuous mode [ 113.119143][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 113.142657][ T5261] device ip6gretap0 entered promiscuous mode [ 113.159534][ T5261] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 113.167925][ T5261] Cannot create hsr debugfs directory [ 113.173902][ T5261] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 113.193524][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 113.409431][ T5275] random: crng reseeded on system resumption [ 113.573418][ T5285] usb usb7: usbfs: process 5285 (syz.0.347) did not claim interface 0 before use [ 113.606047][ T5286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.620317][ T5286] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.051193][ T5294] loop0: detected capacity change from 0 to 1024 [ 114.090385][ T5294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.116646][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 114.116664][ T27] audit: type=1800 audit(1733550347.290:364): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.351" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 114.277587][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 114.476875][ T5309] 9pnet_fd: Insufficient options for proto=fd [ 114.548843][ T5312] device pim6reg1 entered promiscuous mode [ 114.857396][ T5315] [ 114.859797][ T5315] ====================================================== [ 114.866836][ T5315] WARNING: possible circular locking dependency detected [ 114.873882][ T5315] 6.1.119-syzkaller #0 Not tainted [ 114.879017][ T5315] ------------------------------------------------------ [ 114.886095][ T5315] syz.2.359/5315 is trying to acquire lock: [ 114.892003][ T5315] ffff8880b8e28118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0 [ 114.900660][ T5315] [ 114.900660][ T5315] but task is already holding lock: [ 114.908028][ T5315] ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 114.916938][ T5315] [ 114.916938][ T5315] which lock already depends on the new lock. [ 114.916938][ T5315] [ 114.927346][ T5315] [ 114.927346][ T5315] the existing dependency chain (in reverse order) is: [ 114.936359][ T5315] [ 114.936359][ T5315] -> #1 (&base->lock){-.-.}-{2:2}: [ 114.943666][ T5315] lock_acquire+0x1f8/0x5a0 [ 114.948817][ T5315] _raw_spin_lock_irqsave+0xd1/0x120 [ 114.954633][ T5315] lock_timer_base+0x120/0x260 [ 114.959929][ T5315] __mod_timer+0x1cb/0xee0 [ 114.964884][ T5315] queue_delayed_work_on+0x156/0x250 [ 114.970697][ T5315] kvfree_call_rcu+0x520/0x8c0 [ 114.975985][ T5315] rtnl_register_internal+0x489/0x580 [ 114.981887][ T5315] rtnl_register+0x32/0x70 [ 114.986830][ T5315] ip_rt_init+0x335/0x3c7 [ 114.991684][ T5315] ip_init+0xa/0x14 [ 114.996015][ T5315] inet_init+0x2ae/0x3c0 [ 115.000791][ T5315] do_one_initcall+0x265/0x8f0 [ 115.006090][ T5315] do_initcall_level+0x157/0x207 [ 115.011557][ T5315] do_initcalls+0x49/0x86 [ 115.016413][ T5315] kernel_init_freeable+0x45c/0x60f [ 115.022136][ T5315] kernel_init+0x19/0x290 [ 115.026990][ T5315] ret_from_fork+0x1f/0x30 [ 115.031940][ T5315] [ 115.031940][ T5315] -> #0 (krc.lock){..-.}-{2:2}: [ 115.039000][ T5315] validate_chain+0x1661/0x5950 [ 115.044380][ T5315] __lock_acquire+0x125b/0x1f80 [ 115.049769][ T5315] lock_acquire+0x1f8/0x5a0 [ 115.054806][ T5315] _raw_spin_lock+0x2a/0x40 [ 115.059841][ T5315] kvfree_call_rcu+0x1b2/0x8c0 [ 115.065128][ T5315] trie_delete_elem+0x53a/0x690 [ 115.070514][ T5315] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 115.076514][ T5315] bpf_trace_run3+0x231/0x440 [ 115.081717][ T5315] enqueue_timer+0x440/0x600 [ 115.086841][ T5315] __mod_timer+0x92b/0xee0 [ 115.091781][ T5315] queue_delayed_work_on+0x156/0x250 [ 115.097588][ T5315] ovs_init_net+0x234/0x240 [ 115.102622][ T5315] ops_init+0x35d/0x610 [ 115.107304][ T5315] setup_net+0x4b5/0xb90 [ 115.112088][ T5315] copy_net_ns+0x392/0x5d0 [ 115.117034][ T5315] create_new_namespaces+0x425/0x7a0 [ 115.122854][ T5315] copy_namespaces+0x397/0x3f0 [ 115.128142][ T5315] copy_process+0x1ab8/0x4060 [ 115.133347][ T5315] kernel_clone+0x222/0x920 [ 115.138371][ T5315] __x64_sys_clone+0x231/0x280 [ 115.143660][ T5315] do_syscall_64+0x3b/0xb0 [ 115.148611][ T5315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.155036][ T5315] [ 115.155036][ T5315] other info that might help us debug this: [ 115.155036][ T5315] [ 115.165265][ T5315] Possible unsafe locking scenario: [ 115.165265][ T5315] [ 115.172710][ T5315] CPU0 CPU1 [ 115.178078][ T5315] ---- ---- [ 115.183440][ T5315] lock(&base->lock); [ 115.187519][ T5315] lock(krc.lock); [ 115.193854][ T5315] lock(&base->lock); [ 115.200450][ T5315] lock(krc.lock); [ 115.204271][ T5315] [ 115.204271][ T5315] *** DEADLOCK *** [ 115.204271][ T5315] [ 115.212500][ T5315] 3 locks held by syz.2.359/5315: [ 115.217523][ T5315] #0: ffffffff8e4fe3d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 115.226944][ T5315] #1: ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 115.236285][ T5315] #2: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 115.245706][ T5315] [ 115.245706][ T5315] stack backtrace: [ 115.251638][ T5315] CPU: 0 PID: 5315 Comm: syz.2.359 Not tainted 6.1.119-syzkaller #0 [ 115.259633][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.269705][ T5315] Call Trace: [ 115.273027][ T5315] [ 115.275965][ T5315] dump_stack_lvl+0x1e3/0x2cb [ 115.280664][ T5315] ? nf_tcp_handle_invalid+0x642/0x642 [ 115.286139][ T5315] ? print_circular_bug+0x12b/0x1a0 [ 115.291342][ T5315] check_noncircular+0x2fa/0x3b0 [ 115.296291][ T5315] ? add_chain_block+0x850/0x850 [ 115.301233][ T5315] ? lockdep_lock+0x11f/0x2a0 [ 115.305925][ T5315] ? __lock_acquire+0x125b/0x1f80 [ 115.310976][ T5315] ? _find_first_zero_bit+0xd0/0x100 [ 115.316287][ T5315] validate_chain+0x1661/0x5950 [ 115.321148][ T5315] ? __stack_depot_save+0x3f5/0x470 [ 115.326440][ T5315] ? reacquire_held_locks+0x660/0x660 [ 115.331816][ T5315] ? do_raw_spin_unlock+0x137/0x8a0 [ 115.337023][ T5315] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.342954][ T5315] ? _raw_spin_unlock+0x40/0x40 [ 115.347814][ T5315] ? stack_trace_save+0x113/0x1c0 [ 115.352852][ T5315] ? stack_trace_snprint+0xe0/0xe0 [ 115.357982][ T5315] ? mark_lock+0x9a/0x340 [ 115.362333][ T5315] __lock_acquire+0x125b/0x1f80 [ 115.367206][ T5315] lock_acquire+0x1f8/0x5a0 [ 115.371724][ T5315] ? kvfree_call_rcu+0x1b2/0x8c0 [ 115.376674][ T5315] ? read_lock_is_recursive+0x10/0x10 [ 115.382072][ T5315] ? __phys_addr+0xb6/0x170 [ 115.386586][ T5315] _raw_spin_lock+0x2a/0x40 [ 115.391099][ T5315] ? kvfree_call_rcu+0x1b2/0x8c0 [ 115.396043][ T5315] kvfree_call_rcu+0x1b2/0x8c0 [ 115.400818][ T5315] ? rcu_leak_callback+0x10/0x10 [ 115.405757][ T5315] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.411666][ T5315] ? _raw_spin_unlock+0x40/0x40 [ 115.416531][ T5315] ? longest_prefix_match+0x318/0x640 [ 115.421924][ T5315] trie_delete_elem+0x53a/0x690 [ 115.426798][ T5315] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 115.432261][ T5315] bpf_trace_run3+0x231/0x440 [ 115.436943][ T5315] ? bpf_trace_run3+0x146/0x440 [ 115.441801][ T5315] ? bpf_trace_run2+0x410/0x410 [ 115.446658][ T5315] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.452560][ T5315] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 115.458028][ T5315] ? _raw_spin_lock+0x40/0x40 [ 115.462723][ T5315] enqueue_timer+0x440/0x600 [ 115.467325][ T5315] __mod_timer+0x92b/0xee0 [ 115.471752][ T5315] ? mod_timer_pending+0x20/0x20 [ 115.476693][ T5315] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.482596][ T5315] ? _raw_spin_unlock+0x40/0x40 [ 115.487459][ T5315] ? queue_delayed_work_on+0xfc/0x250 [ 115.492834][ T5315] ? __queue_delayed_work+0x16b/0x210 [ 115.498211][ T5315] queue_delayed_work_on+0x156/0x250 [ 115.503504][ T5315] ? delayed_work_timer_fn+0x80/0x80 [ 115.508802][ T5315] ? ovs_ct_init+0x3a8/0x4c0 [ 115.513400][ T5315] ovs_init_net+0x234/0x240 [ 115.517913][ T5315] ops_init+0x35d/0x610 [ 115.522087][ T5315] setup_net+0x4b5/0xb90 [ 115.526341][ T5315] ? copy_net_ns+0x5d0/0x5d0 [ 115.530945][ T5315] copy_net_ns+0x392/0x5d0 [ 115.535376][ T5315] create_new_namespaces+0x425/0x7a0 [ 115.540672][ T5315] ? bpf_lsm_capable+0x5/0x10 [ 115.545356][ T5315] copy_namespaces+0x397/0x3f0 [ 115.550130][ T5315] ? copy_namespaces+0x5a/0x3f0 [ 115.554991][ T5315] copy_process+0x1ab8/0x4060 [ 115.559712][ T5315] ? copy_process+0x9e1/0x4060 [ 115.564487][ T5315] ? futex_wait_setup+0x340/0x340 [ 115.569523][ T5315] ? idle_dummy+0x10/0x10 [ 115.573858][ T5315] ? futex_wake+0x4ea/0x590 [ 115.578375][ T5315] kernel_clone+0x222/0x920 [ 115.582887][ T5315] ? create_io_thread+0x180/0x180 [ 115.587920][ T5315] ? __ia32_sys_get_robust_list+0x80/0x80 [ 115.593649][ T5315] __x64_sys_clone+0x231/0x280 [ 115.598422][ T5315] ? __do_sys_vfork+0x110/0x110 [ 115.603282][ T5315] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 115.609282][ T5315] ? syscall_enter_from_user_mode+0x2e/0x230 [ 115.615268][ T5315] ? lockdep_hardirqs_on+0x94/0x130 [ 115.620476][ T5315] ? syscall_enter_from_user_mode+0x2e/0x230 [ 115.626465][ T5315] do_syscall_64+0x3b/0xb0 [ 115.630911][ T5315] ? clear_bhb_loop+0x45/0xa0 [ 115.635604][ T5315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.641510][ T5315] RIP: 0033:0x7f7547b7fed9 [ 115.645928][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.665557][ T5315] RSP: 002b:00007f7548915008 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 115.673977][ T5315] RAX: ffffffffffffffda RBX: 00007f7547d45fa0 RCX: 00007f7547b7fed9 [ 115.681950][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 115.689921][ T5315] RBP: 00007f7547bf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 115.697897][ T5315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 115.705871][ T5315] R13: 0000000000000000 R14: 00007f7547d45fa0 R15: 00007ffd523fdf68 [ 115.713855][ T5315]