last executing test programs: 11.107062797s ago: executing program 1 (id=781): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r1, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) 9.518185477s ago: executing program 1 (id=791): sched_rr_get_interval(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r2 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) 5.153739194s ago: executing program 4 (id=819): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x84, 0x500000001, 0x8000000000000001, 0x8}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) 5.033542635s ago: executing program 3 (id=820): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.852937918s ago: executing program 3 (id=821): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="be9e7bf5fe9a7856011b5e4be3280ae9948208a9e6e9aeb19cd18b502a884ac795d6d767ab59b9d11bda1958656da8749ad2f7c0cd09215f37356a296848dcb4f16e24a7cd11d2"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.825230658s ago: executing program 0 (id=822): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="41bbd3", 0x3}], 0x1}}], 0x2, 0x401eb94) 4.6758723s ago: executing program 0 (id=823): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b20, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x10, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 4.67549395s ago: executing program 3 (id=824): sched_rr_get_interval(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r2 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x10, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) 4.469154032s ago: executing program 1 (id=826): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r0) 3.816112551s ago: executing program 0 (id=828): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 3.647050403s ago: executing program 0 (id=829): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x12, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.274645588s ago: executing program 0 (id=831): socket(0x10, 0x803, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) eventfd2(0x0, 0x801) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = syz_io_uring_setup(0x4519, &(0x7f00000009c0)={0x0, 0xc48a, 0x20, 0x7}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, &(0x7f0000000480)=@multiplanar_overlay={0x3, 0x1, 0x4, 0x2000, 0x200, {}, {0x5, 0x8, 0x3, 0x8f, 0x40, 0x7f, "ceacd6d2"}, 0x7ffd, 0x3, {0x0}, 0x4}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000940)=@ethtool_coalesce={0xe, 0x0, 0x7fffffff, 0x8, 0xffff, 0x3, 0x1, 0xf, 0x5, 0x6, 0xf53e, 0xfffffffa, 0x8, 0x5, 0x7, 0x0, 0x80, 0x1, 0x1, 0x5, 0x3662, 0xc8, 0x1}}) 2.873963333s ago: executing program 4 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 2.734240715s ago: executing program 4 (id=834): r0 = userfaultfd(0x80001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20a81) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.656064986s ago: executing program 2 (id=835): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) 2.493863098s ago: executing program 4 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c6, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") 2.253226451s ago: executing program 1 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) sendfile(r2, r3, &(0x7f0000000000)=0x5, 0x20001) 2.189651272s ago: executing program 2 (id=838): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x10, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) 2.169950522s ago: executing program 4 (id=839): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b20, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x10, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 2.085376553s ago: executing program 2 (id=840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='D', 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r0, 0x1) 1.938034985s ago: executing program 2 (id=841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x13, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.758833387s ago: executing program 0 (id=842): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x84, 0x500000001, 0x8000000000000001, 0x8}) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) 1.730473518s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x45, 0xff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 1.535951951s ago: executing program 3 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 1.412056442s ago: executing program 3 (id=845): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.265081094s ago: executing program 3 (id=846): socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.134824405s ago: executing program 2 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000080000009500"], 0x0, 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000023c0)={@fallback, 0xffffffffffffffff, 0x0, 0x4, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r0, r1, 0x31, 0x2c, 0x0, @void, @void, @void, @value}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 0s ago: executing program 4 (id=848): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 32.504675][ T4283] cgroup: Unknown subsys name 'net' [ 32.765462][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.093480][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.202264][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.205001][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.207243][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.209945][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.212624][ T4296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.214730][ T4296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.280693][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.283440][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.285917][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.288560][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.290968][ T4308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.293719][ T4308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.295815][ T4308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.298012][ T4308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.301055][ T4310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.303220][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.305593][ T4308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.308532][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.309024][ T4308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.311354][ T4313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.313421][ T4308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 34.314995][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 34.316317][ T4308] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 34.318328][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.320127][ T4308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.323240][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.324532][ T4308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.326549][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.332055][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 34.349806][ T4303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.472720][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 34.542810][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.544892][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.547343][ T4295] device bridge_slave_0 entered promiscuous mode [ 34.553281][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.555211][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.557810][ T4295] device bridge_slave_1 entered promiscuous mode [ 34.619819][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.640645][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.689960][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 34.696288][ T4295] team0: Port device team_slave_0 added [ 34.703257][ T4295] team0: Port device team_slave_1 added [ 34.706719][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 34.715561][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 34.757125][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.758974][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.765692][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.774822][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 34.789846][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.791996][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.798819][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.846275][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.848325][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.851028][ T4299] device bridge_slave_0 entered promiscuous mode [ 34.857543][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.859390][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.861893][ T4301] device bridge_slave_0 entered promiscuous mode [ 34.878459][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.880343][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.882849][ T4299] device bridge_slave_1 entered promiscuous mode [ 34.889058][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.891193][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.893593][ T4301] device bridge_slave_1 entered promiscuous mode [ 34.895741][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.897614][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.900116][ T4309] device bridge_slave_0 entered promiscuous mode [ 34.903779][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.905691][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.908173][ T4309] device bridge_slave_1 entered promiscuous mode [ 34.952397][ T4295] device hsr_slave_0 entered promiscuous mode [ 35.020765][ T4295] device hsr_slave_1 entered promiscuous mode [ 35.107948][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.109810][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.112550][ T4302] device bridge_slave_0 entered promiscuous mode [ 35.130926][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.137369][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.139958][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.142053][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.144447][ T4302] device bridge_slave_1 entered promiscuous mode [ 35.148103][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.152593][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.160870][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.167252][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.201715][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.205606][ T4301] team0: Port device team_slave_0 added [ 35.208580][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.230503][ T4301] team0: Port device team_slave_1 added [ 35.238674][ T4309] team0: Port device team_slave_0 added [ 35.242717][ T4299] team0: Port device team_slave_0 added [ 35.245494][ T4299] team0: Port device team_slave_1 added [ 35.248005][ T4309] team0: Port device team_slave_1 added [ 35.283040][ T4302] team0: Port device team_slave_0 added [ 35.285264][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.287070][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.294027][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.310814][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.312601][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.319116][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.325076][ T4302] team0: Port device team_slave_1 added [ 35.332070][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.333984][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.346134][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.349665][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.351831][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.358556][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.363510][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.365384][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.372101][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.387885][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.389789][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.396572][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.405849][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.407722][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.414672][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.418981][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.426029][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.433345][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.482176][ T4301] device hsr_slave_0 entered promiscuous mode [ 35.521658][ T4301] device hsr_slave_1 entered promiscuous mode [ 35.560669][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.562846][ T4301] Cannot create hsr debugfs directory [ 35.642084][ T4299] device hsr_slave_0 entered promiscuous mode [ 35.701454][ T4299] device hsr_slave_1 entered promiscuous mode [ 35.760502][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.762516][ T4299] Cannot create hsr debugfs directory [ 35.822232][ T4309] device hsr_slave_0 entered promiscuous mode [ 35.860862][ T4309] device hsr_slave_1 entered promiscuous mode [ 35.900536][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.902520][ T4309] Cannot create hsr debugfs directory [ 35.992250][ T4302] device hsr_slave_0 entered promiscuous mode [ 36.030888][ T4302] device hsr_slave_1 entered promiscuous mode [ 36.070565][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.072526][ T4302] Cannot create hsr debugfs directory [ 36.075072][ T4295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.126081][ T4295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.179762][ T4295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.222036][ T4295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.271025][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 36.340665][ T4303] Bluetooth: hci4: command 0x0409 tx timeout [ 36.341711][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 36.350710][ T4313] Bluetooth: hci3: command 0x0409 tx timeout [ 36.420718][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 36.423787][ T4301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.476272][ T4301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.522651][ T4301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.570217][ T4301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.629974][ T4309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.676062][ T4309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.722550][ T4309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.773264][ T4309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.842452][ T4299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.885751][ T4299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.936375][ T4299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.997685][ T4299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.048741][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.064390][ T4302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.095677][ T4302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.142934][ T4302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.172582][ T4302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.221772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.224974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.235795][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.258222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.260808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.263551][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.265557][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.268338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.289021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.291794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.294247][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.296135][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.300040][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.308076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.312234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.321905][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.323873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.334015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.347671][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.350342][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.353264][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.355177][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.357442][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.360099][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.363455][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.365329][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.367586][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.372818][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.376337][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.395118][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.397161][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.399725][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.415410][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.418011][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.421511][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.424075][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.426672][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.429276][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.447611][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.450773][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.453278][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.455737][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.469109][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.472246][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.474676][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.477167][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.481815][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.488938][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.492054][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.494443][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.497102][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.505511][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.516949][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.524551][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.536550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.539214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.543381][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.545205][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.547513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.549907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.572021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.574552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.577137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.579930][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.581842][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.589774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.593202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.596072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.599360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.608400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.613452][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.648028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.651471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.654161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.656829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.659369][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.661310][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.669185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.686742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.688777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.694731][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.708108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.710993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.713457][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.715256][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.717483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.727337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.738140][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.752214][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.755006][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.757603][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.760881][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.763642][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.766702][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.769896][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.777532][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.784091][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.792847][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.795401][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.797959][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.806122][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.808551][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.810484][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.813835][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.816434][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.819092][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.834417][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.836607][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.848314][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.853554][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.856041][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.858617][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.866115][ T4299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.869384][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.899681][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.902881][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.905353][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.908290][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.911445][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.913249][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.937651][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.945749][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.948810][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.951904][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.954921][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.957514][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.960170][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.971307][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.976402][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.979207][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.982647][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.985057][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.997182][ T4295] device veth0_vlan entered promiscuous mode [ 38.011997][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.014610][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.019356][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.027781][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.051530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.054205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.057701][ T4295] device veth1_vlan entered promiscuous mode [ 38.068236][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.089774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.093025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.095525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.098124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.102626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.104939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.108641][ T4301] device veth0_vlan entered promiscuous mode [ 38.127774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.129829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.142574][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.148669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.151569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.154081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.156094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.158610][ T4295] device veth0_macvtap entered promiscuous mode [ 38.171525][ T4301] device veth1_vlan entered promiscuous mode [ 38.175679][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.179585][ T4295] device veth1_macvtap entered promiscuous mode [ 38.212950][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.215541][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.218101][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.227739][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.230285][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.234084][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.253374][ T4301] device veth0_macvtap entered promiscuous mode [ 38.255800][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.258347][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.262160][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.269553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.272334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.285797][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.288542][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.295015][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.299123][ T4301] device veth1_macvtap entered promiscuous mode [ 38.305633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.308233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.311907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.317870][ T4299] device veth0_vlan entered promiscuous mode [ 38.326147][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.328706][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.336797][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.340109][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.342329][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 38.346540][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.348909][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.351214][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.353826][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.369618][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.373778][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.377107][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.380109][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.389080][ T4309] device veth0_vlan entered promiscuous mode [ 38.396113][ T4295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398461][ T4295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.406542][ T4295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.408879][ T4295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.415313][ T4299] device veth1_vlan entered promiscuous mode [ 38.420644][ T4313] Bluetooth: hci3: command 0x041b tx timeout [ 38.422177][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 38.423760][ T4313] Bluetooth: hci4: command 0x041b tx timeout [ 38.429318][ T4309] device veth1_vlan entered promiscuous mode [ 38.437802][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.445916][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.449538][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.462918][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.465857][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.469340][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.472545][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.474996][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.477488][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.485597][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.488075][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.493039][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.495664][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.498270][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.510644][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 38.514172][ T4301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.516507][ T4301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.518746][ T4301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.522040][ T4301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.537204][ T4299] device veth0_macvtap entered promiscuous mode [ 38.550109][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.553018][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.556555][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.568562][ T4299] device veth1_macvtap entered promiscuous mode [ 38.578375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.587744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.591250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.595326][ T4309] device veth0_macvtap entered promiscuous mode [ 38.642639][ T4309] device veth1_macvtap entered promiscuous mode [ 38.649701][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.653922][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.656461][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.659078][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.665449][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.678031][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.680942][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.683371][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.686010][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.688527][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.691525][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.696732][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.699528][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.702907][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.705667][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.709199][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.712356][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.715061][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.717593][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.720256][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.724243][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.726961][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.730823][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.742594][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.745140][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.747757][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.750329][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.758834][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.763541][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.765664][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.768569][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.772111][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.774857][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.777531][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.780149][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.785008][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.798359][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.801542][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.804347][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.810267][ T4299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.813097][ T4299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.815411][ T4299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.817696][ T4299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.829880][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.832851][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.835417][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.837803][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.842258][ T4302] device veth0_vlan entered promiscuous mode [ 38.862735][ T4302] device veth1_vlan entered promiscuous mode [ 38.868423][ T4309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.871500][ T4309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.873888][ T4309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.876155][ T4309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.901971][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.904094][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.907167][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.909399][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.929199][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.932325][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.936277][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.938770][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.947023][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.953710][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.957822][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.014550][ T4302] device veth0_macvtap entered promiscuous mode [ 39.016932][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.019760][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.022817][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.036990][ T4302] device veth1_macvtap entered promiscuous mode [ 39.042117][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.044311][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.049190][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.055336][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.086631][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.089249][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.096604][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.099410][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.105391][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.108030][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.114758][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.117513][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.125763][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.149310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.152396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.168348][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.174324][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.177044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.179630][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.192331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.198573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.204660][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.207633][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.210204][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.213754][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.216326][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.218961][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.231898][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.235050][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.238954][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.257670][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.261072][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.335073][ T4383] device veth0_vlan left promiscuous mode [ 39.337743][ T4383] device veth0_vlan entered promiscuous mode [ 39.350876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.362336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.367151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.381961][ T4302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390529][ T4302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394049][ T4302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.405373][ T4302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.726363][ T4379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.838667][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.842478][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.866713][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.908555][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.911017][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.913800][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.283115][ T4399] loop4: detected capacity change from 0 to 32768 [ 40.285826][ T4399] ======================================================= [ 40.285826][ T4399] WARNING: The mand mount option has been deprecated and [ 40.285826][ T4399] and is ignored by this kernel. Remove the mand [ 40.285826][ T4399] option from the mount to silence this warning. [ 40.285826][ T4399] ======================================================= [ 40.334764][ T4399] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 40.375610][ T4399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 40.422068][ T4313] Bluetooth: hci0: command 0x040f tx timeout [ 40.437326][ T4399] lo speed is unknown, defaulting to 1000 [ 40.440550][ T4399] lo speed is unknown, defaulting to 1000 [ 40.442768][ T4399] lo speed is unknown, defaulting to 1000 [ 40.477914][ T4399] infiniband sz1: set active [ 40.479245][ T4399] infiniband sz1: added lo [ 40.483258][ T22] lo speed is unknown, defaulting to 1000 [ 40.496159][ T4399] RDS/IB: sz1: added [ 40.497509][ T4399] smc: adding ib device sz1 with port count 1 [ 40.499237][ T4399] smc: ib device sz1 port 1 has pnetid [ 40.502459][ T4399] lo speed is unknown, defaulting to 1000 [ 40.539389][ T4313] Bluetooth: hci2: command 0x040f tx timeout [ 40.541142][ T4313] Bluetooth: hci3: command 0x040f tx timeout [ 40.543637][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 40.545843][ T4399] lo speed is unknown, defaulting to 1000 [ 40.555938][ T22] lo speed is unknown, defaulting to 1000 [ 40.582542][ T4303] Bluetooth: hci1: command 0x040f tx timeout [ 40.718573][ T4388] loop2: detected capacity change from 0 to 32768 [ 40.735799][ T4388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4388) [ 40.742769][ T4399] lo speed is unknown, defaulting to 1000 [ 40.778756][ T4399] lo speed is unknown, defaulting to 1000 [ 40.779755][ T4395] loop0: detected capacity change from 0 to 32768 [ 40.798802][ T4395] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.6 (4395) [ 40.812828][ T4399] lo speed is unknown, defaulting to 1000 [ 40.848883][ T4388] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 40.853217][ T4388] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 40.855423][ T4388] BTRFS info (device loop2): using free space tree [ 41.075564][ T4388] BTRFS info (device loop2): enabling ssd optimizations [ 41.272818][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 41.275436][ T4446] netlink: 'syz.0.11': attribute type 7 has an invalid length. [ 41.277410][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 41.353025][ T4446] device erspan0 entered promiscuous mode [ 41.382197][ T4446] device batadv_slave_1 entered promiscuous mode [ 41.452341][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 41.457978][ T4450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 41.478682][ T4450] netlink: 'syz.0.11': attribute type 7 has an invalid length. [ 41.497550][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 41.543275][ T4299] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.731926][ T4450] Zero length message leads to an empty skb [ 41.732727][ T4410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4410) [ 41.810760][ T4302] ocfs2: Unmounting device (7,4) on (node local) [ 41.828076][ T4289] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 41.984991][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 42.079472][ T4476] loop1: detected capacity change from 0 to 1024 [ 42.088318][ T4476] hfsplus: unable to parse mount options [ 42.108864][ T4478] rdma_rxe: already configured on lo [ 42.124623][ T4474] binder: 4469:4474 tried to acquire reference to desc 0, got 1 instead [ 42.141231][ T4474] binder: cannot allocate buffer [ 42.141276][ T4474] binder: 4469:4474 transaction async to 4469:0 failed 5/29201/-22, size 96--516 line 3239 [ 42.192167][ T4411] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.500449][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 42.590912][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 42.591317][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 42.594769][ T4313] Bluetooth: hci2: command 0x0419 tx timeout [ 42.660934][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 44.952804][ T4462] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.169850][ T4495] sched: RT throttling activated [ 46.796475][ T4510] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 47.070688][ T4519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27'. [ 47.517608][ T4520] infiniband syz1: set active [ 47.542496][ T4520] infiniband syz1: added syz_tun [ 47.608620][ T4520] RDS/IB: syz1: added [ 47.611585][ T4520] smc: adding ib device syz1 with port count 1 [ 47.617532][ T4520] smc: ib device syz1 port 1 has pnetid [ 48.232328][ T4534] loop2: detected capacity change from 0 to 32768 [ 48.740961][ T4534] JBD2: Ignoring recovery information on journal [ 49.287282][ T4534] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 49.292049][ T4363] (kworker/u4:6,4363,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 49.389618][ T4299] ocfs2: Unmounting device (7,2) on (node local) [ 49.524594][ T4550] loop4: detected capacity change from 0 to 128 [ 49.750351][ T4550] syz.4.34: attempt to access beyond end of device [ 49.750351][ T4550] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.083229][ T4546] loop0: detected capacity change from 0 to 32768 [ 50.124059][ T4546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.32 (4546) [ 50.149896][ T4546] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.161509][ T4546] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 50.163904][ T4546] BTRFS info (device loop0): setting nodatacow, compression disabled [ 50.175024][ T4546] BTRFS info (device loop0): disabling tree log [ 50.180008][ T4546] BTRFS info (device loop0): turning on sync discard [ 50.186284][ T4546] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 50.201785][ T4546] BTRFS info (device loop0): force zstd compression, level 3 [ 50.208232][ T4546] BTRFS info (device loop0): using free space tree [ 50.569116][ T4577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.39'. [ 50.792519][ T4546] BTRFS info (device loop0): enabling ssd optimizations [ 51.399660][ T4546] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 53.891318][ T4309] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.519088][ T4606] loop3: detected capacity change from 0 to 128 [ 54.764207][ T4606] syz.3.46: attempt to access beyond end of device [ 54.764207][ T4606] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 55.953997][ T4618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.50'. [ 56.119591][ T4626] loop0: detected capacity change from 0 to 128 [ 56.164713][ T4626] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 56.199656][ T4626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.993026][ T4638] loop2: detected capacity change from 0 to 1024 [ 56.999625][ T4638] hfsplus: unable to parse mount options [ 57.143723][ T4641] loop4: detected capacity change from 0 to 16 [ 58.441739][ T4641] erofs: (device loop4): mounted with root inode @ nid 36. [ 58.541037][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 58.618241][ T4656] loop3: detected capacity change from 0 to 128 [ 58.865853][ T4656] syz.3.58: attempt to access beyond end of device [ 58.865853][ T4656] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 59.928570][ T4669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 59.939158][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 60.143496][ T4679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 60.145924][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 61.003409][ T4682] loop3: detected capacity change from 0 to 128 [ 61.071014][ T4682] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 61.084360][ T4682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.100133][ T4685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 61.108073][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 61.295943][ T4689] binder: 4686:4689 tried to acquire reference to desc 0, got 1 instead [ 61.298772][ T4689] binder: cannot allocate buffer [ 61.298802][ T4689] binder: 4686:4689 transaction async to 4686:0 failed 10/29201/-22, size 96--516 line 3239 [ 61.391889][ T4694] loop0: detected capacity change from 0 to 1024 [ 61.394205][ T4694] hfsplus: unable to parse mount options [ 62.263719][ T4410] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.088590][ T4706] loop3: detected capacity change from 0 to 128 [ 63.178754][ T4706] syz.3.74: attempt to access beyond end of device [ 63.178754][ T4706] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.313252][ T4714] rdma_rxe: rxe_register_device failed with error -23 [ 63.315328][ T4714] rdma_rxe: failed to add lo [ 64.413556][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.502402][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504254][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.533185][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 64.714538][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 64.723992][ T4731] netlink: 'syz.2.86': attribute type 7 has an invalid length. [ 64.729951][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 64.748072][ T4714] loop1: detected capacity change from 0 to 40427 [ 65.544286][ T4731] device erspan0 entered promiscuous mode [ 65.563220][ T4714] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 65.641103][ T4731] device batadv_slave_1 entered promiscuous mode [ 65.663013][ T4731] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 65.667854][ T4411] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.673954][ T4731] Cannot create hsr debugfs directory [ 65.682341][ T4734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 65.763710][ T4734] netlink: 'syz.2.86': attribute type 7 has an invalid length. [ 65.765907][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 65.987827][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 66.086320][ T4742] loop3: detected capacity change from 0 to 128 [ 66.227409][ T4742] syz.3.89: attempt to access beyond end of device [ 66.227409][ T4742] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 67.664349][ T4761] loop3: detected capacity change from 0 to 1024 [ 67.666723][ T4761] hfsplus: unable to parse mount options [ 69.833410][ T112] cfg80211: failed to load regulatory.db [ 70.034578][ T4788] loop1: detected capacity change from 0 to 128 [ 70.083882][ T4782] binder: 4773:4782 tried to acquire reference to desc 0, got 1 instead [ 70.086447][ T4782] binder: cannot allocate buffer [ 70.086476][ T4782] binder: 4773:4782 transaction async to 4773:0 failed 15/29201/-22, size 96--516 line 3239 [ 70.108594][ T4788] syz.1.105: attempt to access beyond end of device [ 70.108594][ T4788] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 71.211021][ T1963] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.633328][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 73.039452][ T4821] loop4: detected capacity change from 0 to 128 [ 74.416916][ T4827] syz.4.117: attempt to access beyond end of device [ 74.416916][ T4827] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 76.907443][ T4845] binder: 4842:4845 got transaction to invalid handle, 1 [ 76.909502][ T4845] binder: 4845:4842 cannot find target node [ 76.934252][ T4845] binder: 4842:4845 transaction async to 0:0 failed 18/29201/-22, size 96--516 line 3054 [ 76.944496][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 76.968079][ T4348] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.139072][ T4861] loop3: detected capacity change from 0 to 128 [ 79.046324][ T4869] syz.3.131: attempt to access beyond end of device [ 79.046324][ T4869] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 79.484948][ T4879] rdma_rxe: rxe_register_device failed with error -23 [ 79.486793][ T4879] rdma_rxe: failed to add lo [ 81.191595][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 83.561104][ T4914] binder: tried to use weak ref as strong ref [ 83.562813][ T4914] binder: 4913:4914 Acquire 1 refcount change on invalid ref 0 ret -22 [ 83.565292][ T4914] binder: 4913:4914 got transaction to invalid handle, 1 [ 83.567126][ T4914] binder: 4914:4913 cannot find target node [ 83.568659][ T4914] binder: 4913:4914 transaction async to 0:0 failed 21/29201/-22, size 96--516 line 3054 [ 83.577314][ T1963] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.678451][ T4924] loop4: detected capacity change from 0 to 128 [ 84.684162][ T4928] syz.4.148: attempt to access beyond end of device [ 84.684162][ T4928] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 85.906818][ T4937] loop0: detected capacity change from 0 to 128 [ 86.054455][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 86.128192][ T4941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 86.131056][ T4941] netlink: 'syz.4.153': attribute type 7 has an invalid length. [ 86.153462][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 86.237616][ T4941] device erspan0 entered promiscuous mode [ 86.273238][ T4941] device batadv_slave_1 entered promiscuous mode [ 86.452121][ T4951] syz.0.163: attempt to access beyond end of device [ 86.452121][ T4951] loop0: rw=2049, sector=145, nr_sectors = 824 limit=128 [ 86.460868][ T4941] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 86.463387][ T4941] Cannot create hsr debugfs directory [ 86.465873][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 86.468403][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 86.479187][ T4942] netlink: 'syz.4.153': attribute type 7 has an invalid length. [ 87.905860][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 88.387016][ T4971] binder: tried to use weak ref as strong ref [ 88.388830][ T4971] binder: 4970:4971 Acquire 1 refcount change on invalid ref 0 ret -22 [ 88.391983][ T4971] binder: 4970:4971 got transaction to invalid handle, 1 [ 88.393842][ T4971] binder: 4971:4970 cannot find target node [ 88.395390][ T4971] binder: 4970:4971 transaction async to 0:0 failed 24/29201/-22, size 96--516 line 3054 [ 88.398780][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.107520][ T4363] kworker/u4:6: attempt to access beyond end of device [ 93.107520][ T4363] loop0: rw=1, sector=969, nr_sectors = 72 limit=128 [ 94.123671][ T5015] binder: 5012:5015 got transaction to invalid handle, 1 [ 94.130741][ T5015] binder: 5015:5012 cannot find target node [ 94.132372][ T5015] binder: 5012:5015 transaction async to 0:0 failed 28/29201/-22, size 96--516 line 3054 [ 96.387528][ T5039] loop3: detected capacity change from 0 to 128 [ 96.576403][ T1963] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.250861][ T5054] syz.3.185: attempt to access beyond end of device [ 99.250861][ T5054] loop3: rw=2049, sector=145, nr_sectors = 568 limit=128 [ 101.316526][ T5088] binder: BINDER_SET_CONTEXT_MGR already set [ 101.319023][ T5088] binder: 5079:5088 ioctl 4018620d 20000040 returned -16 [ 101.321260][ T5088] binder: 5079:5088 got transaction to invalid handle, 1 [ 101.323218][ T5088] binder: 5088:5079 cannot find target node [ 101.324788][ T5088] binder: 5079:5088 transaction async to 0:0 failed 31/29201/-22, size 96--516 line 3054 [ 103.322182][ T4464] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.631174][ T4540] kworker/u4:9: attempt to access beyond end of device [ 104.631174][ T4540] loop3: rw=1, sector=713, nr_sectors = 328 limit=128 [ 108.312687][ T5145] binder: 5139:5145 got transaction to invalid handle, 1 [ 108.314514][ T5145] binder: 5145:5139 cannot find target node [ 108.316061][ T5145] binder: 5139:5145 transaction async to 0:0 failed 35/29201/-22, size 96--516 line 3054 [ 108.376102][ T5154] loop2: detected capacity change from 0 to 128 [ 110.155509][ T5163] syz.2.220: attempt to access beyond end of device [ 110.155509][ T5163] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 111.258555][ T4464] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.499611][ T5180] binder: tried to use weak ref as strong ref [ 111.501279][ T5180] binder: 5175:5180 Acquire 1 refcount change on invalid ref 0 ret -22 [ 111.507189][ T5180] binder: 5175:5180 got transaction to invalid handle, 1 [ 111.509096][ T5180] binder: 5180:5175 cannot find target node [ 111.526385][ T5180] binder: 5175:5180 transaction async to 0:0 failed 38/29201/-22, size 96--516 line 3054 [ 114.437767][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.090878][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.093501][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.095941][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.098388][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.100788][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.103133][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.127744][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.130158][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.132622][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.134912][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 118.323476][ T5235] binder: tried to use weak ref as strong ref [ 118.342472][ T5235] binder: 5233:5235 Acquire 1 refcount change on invalid ref 0 ret -22 [ 118.373900][ T5235] binder: 5233:5235 got transaction to invalid handle, 1 [ 118.375751][ T5235] binder: 5235:5233 cannot find target node [ 118.377283][ T5235] binder: 5233:5235 transaction async to 0:0 failed 41/29201/-22, size 96--516 line 3054 [ 118.476534][ T5241] loop0: detected capacity change from 0 to 128 [ 119.599919][ T5259] syz.0.246: attempt to access beyond end of device [ 119.599919][ T5259] loop0: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 119.711610][ T5262] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.913142][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.219021][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.489749][ T4363] kworker/u4:6: attempt to access beyond end of device [ 122.489749][ T4363] loop0: rw=1, sector=489, nr_sectors = 552 limit=128 [ 124.127969][ T5307] lo speed is unknown, defaulting to 1000 [ 124.771635][ T5314] loop4: detected capacity change from 0 to 32768 [ 124.786852][ T5314] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 124.799847][ T5312] loop0: detected capacity change from 0 to 32768 [ 124.898153][ T5312] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 126.151602][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.153225][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.231384][ T5330] binder: tried to use weak ref as strong ref [ 126.233022][ T5330] binder: 5319:5330 Acquire 1 refcount change on invalid ref 0 ret -22 [ 126.246142][ T5330] binder: 5319:5330 got transaction to invalid handle, 1 [ 126.248096][ T5330] binder: 5330:5319 cannot find target node [ 126.249581][ T5330] binder: 5319:5330 transaction async to 0:0 failed 44/29201/-22, size 96--516 line 3054 [ 126.258509][ T5333] loop3: detected capacity change from 0 to 128 [ 126.459524][ T4309] ocfs2: Unmounting device (7,0) on (node local) [ 126.479931][ T4411] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 126.552786][ C0] net_ratelimit: 21 callbacks suppressed [ 126.552801][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.556730][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.559785][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.562620][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.567545][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.569859][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.573664][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.576159][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.578988][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 126.581794][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.520938][ T5341] syz.3.274: attempt to access beyond end of device [ 127.520938][ T5341] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 128.571639][ T5357] bridge0: port 3(syz_tun) entered blocking state [ 128.581779][ T5357] bridge0: port 3(syz_tun) entered disabled state [ 128.584925][ T5357] device syz_tun entered promiscuous mode [ 128.587379][ T5357] bridge0: port 3(syz_tun) entered blocking state [ 128.589212][ T5357] bridge0: port 3(syz_tun) entered forwarding state [ 128.620452][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.875316][ T5356] loop1: detected capacity change from 0 to 32768 [ 129.920498][ T5356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.282 (5356) [ 129.960184][ T5356] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.969982][ T5356] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 129.989201][ T5356] BTRFS info (device loop1): setting nodatacow, compression disabled [ 129.999310][ T5356] BTRFS info (device loop1): disabling tree log [ 130.127692][ T5356] BTRFS info (device loop1): turning on sync discard [ 130.129582][ T5356] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 130.858825][ T5356] BTRFS info (device loop1): force zstd compression, level 3 [ 130.865899][ T5356] BTRFS info (device loop1): using free space tree [ 130.948101][ T5356] BTRFS error (device loop1): open_ctree failed: -12 [ 131.015621][ T4411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4411) [ 132.059710][ T5372] loop2: detected capacity change from 0 to 32768 [ 132.130167][ T5372] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 132.350286][ T4299] ocfs2: Unmounting device (7,2) on (node local) [ 132.361820][ C0] net_ratelimit: 888 callbacks suppressed [ 132.361834][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.365867][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.400688][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.403197][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.405696][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.408251][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.411421][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.413884][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.416488][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.418844][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 133.749080][ T5407] loop1: detected capacity change from 0 to 32768 [ 134.012489][ T5407] XFS (loop1): Mounting V5 Filesystem [ 136.016683][ T5407] XFS (loop1): Ending clean mount [ 136.331383][ T4295] XFS (loop1): Unmounting Filesystem [ 136.407324][ T5449] rdma_rxe: rxe_register_device failed with error -23 [ 136.409249][ T5449] rdma_rxe: failed to add syz_tun [ 136.490130][ T5450] lo speed is unknown, defaulting to 1000 [ 136.589020][ T5436] loop2: detected capacity change from 0 to 32768 [ 136.633556][ T5436] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.636292][ T5436] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 136.638617][ T5436] BTRFS info (device loop2): setting nodatacow, compression disabled [ 136.680424][ T5436] BTRFS info (device loop2): disabling tree log [ 136.682185][ T5436] BTRFS info (device loop2): turning on sync discard [ 136.683974][ T5436] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.690720][ T5436] BTRFS info (device loop2): force zstd compression, level 3 [ 136.692793][ T5436] BTRFS info (device loop2): using free space tree [ 137.040936][ T5436] BTRFS info (device loop2): enabling ssd optimizations [ 137.042322][ T5454] loop3: detected capacity change from 0 to 32768 [ 137.121157][ T5454] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 137.142662][ T4299] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.322087][ T4301] ocfs2: Unmounting device (7,3) on (node local) [ 137.569475][ T5479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.708671][ T5479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.220685][ T5487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.357858][ T5495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.396219][ T5516] rdma_rxe: already configured on syz_tun [ 140.457977][ T5522] loop1: detected capacity change from 0 to 64 [ 140.516604][ T47] Bluetooth: hci0: link tx timeout [ 140.518177][ T47] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.521455][ T4303] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 141.683291][ T5520] loop3: detected capacity change from 0 to 32768 [ 141.688045][ T5520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.319 (5520) [ 141.699138][ T5520] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.713223][ T5520] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 141.715589][ T5520] BTRFS info (device loop3): setting nodatacow, compression disabled [ 141.717677][ T5520] BTRFS info (device loop3): disabling tree log [ 141.719228][ T5520] BTRFS info (device loop3): turning on sync discard [ 141.737887][ T5520] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.740343][ T5520] BTRFS info (device loop3): force zstd compression, level 3 [ 141.742665][ T5520] BTRFS info (device loop3): using free space tree [ 142.274056][ T5520] BTRFS info (device loop3): enabling ssd optimizations [ 142.316820][ T5520] BTRFS info (device loop3): balance: start -d -m [ 142.330891][ T5520] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 142.417614][ T5520] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 142.487401][ T5520] BTRFS info (device loop3): balance: canceled [ 142.537161][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.581800][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 142.860194][ T5573] loop2: detected capacity change from 0 to 512 [ 142.931297][ T5573] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 142.956420][ T5573] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 142.959174][ T5573] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.332: Corrupt directory, running e2fsck is recommended [ 142.981278][ T5573] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 142.981406][ T5573] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.332: corrupted in-inode xattr [ 142.996815][ T5573] EXT4-fs (loop2): Remounting filesystem read-only [ 142.996881][ T5573] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.332: couldn't read orphan inode 15 (err -117) [ 143.001040][ T5573] EXT4-fs (loop2): Remounting filesystem read-only [ 143.001068][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.137521][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 143.270995][ T5588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.301827][ T5594] loop4: detected capacity change from 0 to 128 [ 143.337223][ T5588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.357927][ T5588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.368724][ T5588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.636777][ T5602] syz.4.342: attempt to access beyond end of device [ 143.636777][ T5602] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 144.630080][ T5599] loop1: detected capacity change from 0 to 32768 [ 144.642193][ T5599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.343 (5599) [ 144.660936][ T5599] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.667277][ T5599] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 144.674095][ T5599] BTRFS info (device loop1): setting nodatacow, compression disabled [ 144.677515][ T5599] BTRFS info (device loop1): disabling tree log [ 144.679326][ T5599] BTRFS info (device loop1): turning on sync discard [ 144.682902][ T5599] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.686232][ T5599] BTRFS info (device loop1): force zstd compression, level 3 [ 144.689870][ T5599] BTRFS info (device loop1): using free space tree [ 144.814937][ T5599] BTRFS info (device loop1): enabling ssd optimizations [ 144.858911][ T5599] BTRFS info (device loop1): balance: start -d -m [ 144.881139][ T5599] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 144.967964][ T5599] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 145.032325][ T5599] BTRFS info (device loop1): balance: canceled [ 145.080807][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.097029][ T5644] loop0: detected capacity change from 0 to 128 [ 145.691296][ T5658] syz.0.356: attempt to access beyond end of device [ 145.691296][ T5658] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 146.377465][ T5667] loop3: detected capacity change from 0 to 64 [ 146.467136][ T47] Bluetooth: hci2: link tx timeout [ 146.468880][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.267156][ T4303] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 147.396588][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.471404][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.481113][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.500817][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.571805][ T4457] wlan1: authenticate with 08:02:11:00:00:00 [ 147.575968][ T4457] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 147.681787][ T39] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 147.791237][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 147.964737][ T4603] wlan1: authentication with 08:02:11:00:00:00 timed out [ 148.317747][ T5708] loop0: detected capacity change from 0 to 64 [ 148.354421][ T4303] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 148.354516][ T4303] Bluetooth: hci4: link tx timeout [ 148.358335][ T4303] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.500704][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 149.251555][ T5715] rdma_rxe: rxe_register_device failed with error -23 [ 149.260594][ T5715] rdma_rxe: failed to add syz_tun [ 149.634128][ T5732] loop4: detected capacity change from 0 to 64 [ 149.661439][ T4303] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 149.661541][ T4303] Bluetooth: hci3: link tx timeout [ 149.664828][ T4303] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.420540][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 150.826296][ T5754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.919931][ T5746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.929064][ T5746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.670648][ T5746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.700491][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 152.853877][ T5788] rdma_rxe: rxe_register_device failed with error -23 [ 152.855739][ T5788] rdma_rxe: failed to add syz_tun [ 158.523727][ T5909] rdma_rxe: rxe_register_device failed with error -23 [ 158.525741][ T5909] rdma_rxe: failed to add syz_tun [ 158.810658][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 159.849500][ T5923] loop4: detected capacity change from 0 to 128 [ 160.871251][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.975120][ T5946] syz.4.445: attempt to access beyond end of device [ 160.975120][ T5946] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 162.648766][ T5994] loop1: detected capacity change from 0 to 128 [ 162.790176][ T5999] rdma_rxe: already configured on syz_tun [ 163.498228][ T6020] syz.1.466: attempt to access beyond end of device [ 163.498228][ T6020] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 163.619271][ T6015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.545384][ T6032] loop0: detected capacity change from 0 to 32768 [ 164.733374][ T6032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.478 (6032) [ 165.380009][ T6032] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.385073][ T6032] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 165.387504][ T6032] BTRFS info (device loop0): setting nodatacow, compression disabled [ 165.389829][ T6032] BTRFS info (device loop0): disabling tree log [ 165.392936][ T6032] BTRFS info (device loop0): turning on sync discard [ 165.394771][ T6032] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 165.397431][ T6032] BTRFS info (device loop0): force zstd compression, level 3 [ 165.399422][ T6032] BTRFS info (device loop0): using free space tree [ 165.423533][ T6064] loop4: detected capacity change from 0 to 128 [ 165.438343][ T6067] rdma_rxe: rxe_register_device failed with error -23 [ 165.441014][ T6067] rdma_rxe: failed to add syz_tun [ 165.876066][ T6032] BTRFS info (device loop0): enabling ssd optimizations [ 166.057028][ T6032] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 166.220705][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.928472][ T6120] syz.4.489: attempt to access beyond end of device [ 166.928472][ T6120] loop4: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 167.024025][ T4309] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.537899][ T6146] rdma_rxe: rxe_register_device failed with error -23 [ 167.554741][ T6146] rdma_rxe: failed to add syz_tun [ 170.377614][ T6224] rdma_rxe: rxe_register_device failed with error -23 [ 170.384881][ T6224] rdma_rxe: failed to add syz_tun [ 171.132134][ T4603] kworker/u4:10: attempt to access beyond end of device [ 171.132134][ T4603] loop4: rw=1, sector=553, nr_sectors = 488 limit=128 [ 171.963993][ T6255] loop3: detected capacity change from 0 to 128 [ 173.778997][ T6289] syz.3.539: attempt to access beyond end of device [ 173.778997][ T6289] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 173.961711][ T6300] rdma_rxe: already configured on syz_tun [ 176.652973][ T6348] net_ratelimit: 1846 callbacks suppressed [ 176.652987][ T6348] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 177.006777][ T6364] rdma_rxe: rxe_register_device failed with error -23 [ 177.008689][ T6364] rdma_rxe: failed to add syz_tun [ 178.424720][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.427337][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.622698][ T6386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.765181][ T6399] loop3: detected capacity change from 0 to 128 [ 179.709962][ T6424] rdma_rxe: rxe_register_device failed with error -23 [ 179.721596][ T6424] rdma_rxe: failed to add syz_tun [ 180.519103][ T6431] syz.3.592: attempt to access beyond end of device [ 180.519103][ T6431] loop3: rw=2049, sector=145, nr_sectors = 528 limit=128 [ 180.983899][ T47] Bluetooth: hci0: link tx timeout [ 180.985428][ T47] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.041396][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.056535][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.162655][ T6465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.893826][ T6477] binder: 6475:6477 got transaction to invalid handle, 1 [ 181.899223][ T6477] binder: 6477:6475 cannot find target node [ 181.940794][ T6477] binder: 6475:6477 transaction async to 0:0 failed 48/29201/-22, size 96--516 line 3054 [ 182.858460][ T4357] kworker/u4:5: attempt to access beyond end of device [ 182.858460][ T4357] loop3: rw=1, sector=673, nr_sectors = 368 limit=128 [ 182.959943][ T6494] process 'syz.3.616' launched './file2' with NULL argv: empty string added [ 182.976718][ T6498] rdma_rxe: already configured on syz_tun [ 183.385498][ T112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 183.408867][ T6506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.570497][ T112] usb 1-1: Using ep0 maxpacket: 8 [ 183.577845][ T112] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 183.580912][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.590665][ T112] usb 1-1: Product: syz [ 183.595409][ T112] usb 1-1: Manufacturer: syz [ 183.599008][ T112] usb 1-1: SerialNumber: syz [ 183.619550][ T112] usb 1-1: config 0 descriptor?? [ 183.815619][ T6533] loop2: detected capacity change from 0 to 128 [ 183.844346][ T112] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 184.885629][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.142620][ T6559] rdma_rxe: rxe_register_device failed with error -23 [ 185.165377][ T6559] rdma_rxe: failed to add syz_tun [ 185.733370][ T112] gspca_sunplus: reg_w_riv err -71 [ 185.734764][ T112] sunplus: probe of 1-1:0.0 failed with error -71 [ 185.751441][ T112] usb 1-1: USB disconnect, device number 2 [ 185.952222][ T6580] loop3: detected capacity change from 0 to 128 [ 185.977390][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.752687][ T47] Bluetooth: hci2: link tx timeout [ 186.754851][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.008664][ T6587] binder: BINDER_SET_CONTEXT_MGR already set [ 187.021263][ T6587] binder: 6581:6587 ioctl 4018620d 20000040 returned -16 [ 187.024779][ T6587] binder: 6581:6587 got transaction to invalid handle, 1 [ 187.026632][ T6587] binder: 6587:6581 cannot find target node [ 187.028130][ T6587] binder: 6581:6587 transaction async to 0:0 failed 50/29201/-22, size 96--516 line 3054 [ 187.381789][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.384735][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.292186][ T6620] rdma_rxe: rxe_register_device failed with error -23 [ 188.294143][ T6620] rdma_rxe: failed to add syz_tun [ 188.381764][ T6625] Bluetooth: MGMT ver 1.22 [ 188.401580][ T6628] loop4: detected capacity change from 0 to 128 [ 188.590331][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 189.314923][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.325071][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.400540][ T47] Bluetooth: hci4: link tx timeout [ 189.401907][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.427658][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.430120][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.440249][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.498045][ T47] Bluetooth: hci3: link tx timeout [ 190.499447][ T47] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.615102][ T6667] rdma_rxe: already configured on syz_tun [ 190.654107][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.656514][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.024093][ T6681] binder: BINDER_SET_CONTEXT_MGR already set [ 191.026199][ T6681] binder: 6677:6681 ioctl 4018620d 20000040 returned -16 [ 191.036015][ T6681] binder: 6677:6681 got transaction to invalid handle, 1 [ 191.037951][ T6681] binder: 6681:6677 cannot find target node [ 191.045695][ T6681] binder: 6677:6681 transaction async to 0:0 failed 52/29201/-22, size 96--516 line 3054 [ 192.207125][ T6698] rdma_rxe: already configured on syz_tun [ 192.581967][ T6716] syz.4.685 uses obsolete (PF_INET,SOCK_PACKET) [ 193.900555][ T5477] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.420858][ T6764] binder: BINDER_SET_CONTEXT_MGR already set [ 195.422394][ T6764] binder: 6761:6764 ioctl 4018620d 20000040 returned -16 [ 195.425371][ T6764] binder: 6761:6764 got transaction to invalid handle, 1 [ 195.427254][ T6764] binder: 6764:6761 cannot find target node [ 195.428723][ T6764] binder: 6761:6764 transaction async to 0:0 failed 54/29201/-22, size 96--516 line 3054 [ 196.070577][ T6129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.250449][ T6129] usb 1-1: Using ep0 maxpacket: 16 [ 196.255055][ T6129] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 196.257602][ T6129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.259772][ T6129] usb 1-1: Product: syz [ 196.272059][ T6129] usb 1-1: Manufacturer: syz [ 196.273294][ T6129] usb 1-1: SerialNumber: syz [ 196.276116][ T6129] usb 1-1: config 0 descriptor?? [ 196.285728][ T6129] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 196.508730][ T6129] gspca_sn9c2028: read1 error -32 [ 197.020943][ T6129] gspca_sn9c2028: read1 error -110 [ 197.022863][ T6129] sn9c2028: probe of 1-1:0.0 failed with error -110 [ 197.286935][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 197.303266][ T6129] usb 1-1: USB disconnect, device number 3 [ 197.672644][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.676890][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.756823][ T6129] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.865957][ T6818] tipc: Started in network mode [ 197.867452][ T6818] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 197.869530][ T6818] tipc: Enabled bearer , priority 0 [ 198.991661][ T4612] tipc: Node number set to 11578026 [ 199.686244][ T6847] binder: 6844:6847 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 199.727772][ T6847] binder: 6844:6847 got transaction to invalid handle, 1 [ 199.746125][ T6847] binder: 6847:6844 cannot find target node [ 199.756598][ T6847] binder: 6844:6847 transaction async to 0:0 failed 57/29201/-22, size 96--516 line 3054 [ 202.357557][ T6879] loop4: detected capacity change from 0 to 128 [ 203.506411][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.533329][ T6898] loop4: detected capacity change from 0 to 512 [ 204.640645][ T6898] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 204.662818][ T6898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.667052][ T6898] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 204.669983][ T6898] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.694081][ T6898] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 204.724892][ T6898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.756: bg 0: block 40: padding at end of block bitmap is not set [ 204.741637][ T6898] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 204.745817][ T6898] EXT4-fs (loop4): 1 truncate cleaned up [ 204.749673][ T6898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.855151][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 205.138516][ T6918] tipc: Started in network mode [ 205.139878][ T6918] tipc: Node identity 4, cluster identity 4711 [ 205.151203][ T6918] tipc: Node number set to 4 [ 205.849819][ T6926] binder: 6920:6926 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 205.860153][ T6926] binder: 6920:6926 got transaction to invalid handle, 1 [ 205.867988][ T6926] binder: 6926:6920 cannot find target node [ 205.869599][ T6926] binder: 6920:6926 transaction async to 0:0 failed 60/29201/-22, size 96--516 line 3054 [ 205.986401][ T6930] loop3: detected capacity change from 0 to 128 [ 207.591341][ T6955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.690576][ T6134] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.759937][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.780698][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.989429][ T6990] loop0: detected capacity change from 0 to 128 [ 210.463947][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.572777][ T7016] binder: 7012:7016 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 210.577712][ T7016] binder: 7012:7016 got transaction to invalid handle, 1 [ 210.579553][ T7016] binder: 7016:7012 cannot find target node [ 210.593298][ T7016] binder: 7012:7016 transaction async to 0:0 failed 63/29201/-22, size 96--516 line 3054 [ 211.095050][ T7040] loop4: detected capacity change from 0 to 128 [ 211.860208][ T7065] syz.4.796: attempt to access beyond end of device [ 211.860208][ T7065] loop4: rw=2049, sector=145, nr_sectors = 720 limit=128 [ 212.627492][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.430103][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.548167][ T4929] kworker/u4:12: attempt to access beyond end of device [ 213.548167][ T4929] loop4: rw=1, sector=865, nr_sectors = 176 limit=128 [ 215.325879][ T7145] binder: 7141:7145 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 215.328606][ T7144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.448854][ T7151] loop1: detected capacity change from 0 to 128 [ 216.151851][ T7172] syz.1.826: attempt to access beyond end of device [ 216.151851][ T7172] loop1: rw=2049, sector=145, nr_sectors = 296 limit=128 [ 216.970461][ T4458] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.160530][ T4458] usb 1-1: Using ep0 maxpacket: 32 [ 217.163384][ T4458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.174555][ T4458] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 217.178238][ T4458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.178634][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 217.182665][ T4458] usb 1-1: Product: syz [ 217.185029][ T4458] usb 1-1: Manufacturer: syz [ 217.189580][ T4458] usb 1-1: SerialNumber: syz [ 217.207732][ T4458] usb 1-1: config 0 descriptor?? [ 217.218090][ T4458] usb 1-1: no audio or video endpoints found [ 217.438508][ T7203] loop4: detected capacity change from 0 to 512 [ 217.470202][ T7203] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 217.473896][ T7203] UDF-fs: Scanning with blocksize 512 failed [ 217.486451][ T7203] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 217.488326][ T7203] UDF-fs: Scanning with blocksize 1024 failed [ 217.495266][ T4458] usb 1-1: USB disconnect, device number 4 [ 217.500629][ T7203] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 217.502552][ T7203] UDF-fs: Scanning with blocksize 2048 failed [ 217.514441][ T7203] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 217.538606][ T7203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.603195][ T4540] kworker/u4:9: attempt to access beyond end of device [ 217.603195][ T4540] loop1: rw=1, sector=441, nr_sectors = 600 limit=128 [ 218.081849][ T4302] infiniband syz1: set down [ 218.093709][ T6134] infiniband syz1: ib_query_port failed (-19) [ 218.165124][ T194] smc: removing ib device syz1 [ 219.903649][ T4929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.946416][ T194] ------------[ cut here ]------------ [ 219.948070][ T194] GID entry ref leak for dev syz1 index 2 ref=2 [ 219.966105][ T194] WARNING: CPU: 0 PID: 194 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc [ 219.968923][ T194] Modules linked in: [ 219.970015][ T194] CPU: 0 PID: 194 Comm: kworker/u4:4 Not tainted 6.1.140-syzkaller #0 [ 219.972253][ T194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.975024][ T194] Workqueue: ib-unreg-wq ib_unregister_work [ 219.976632][ T194] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 219.978785][ T194] pc : gid_table_release_one+0x284/0x3cc [ 219.980283][ T194] lr : gid_table_release_one+0x284/0x3cc [ 219.981738][ T194] sp : ffff8000203c7920 [ 219.982862][ T194] x29: ffff8000203c7970 x28: ffff0000cd3ad200 x27: ffff0000cd3944d8 [ 219.985036][ T194] x26: ffff0000cd394400 x25: 0000000000000010 x24: 0000000000000001 [ 219.987148][ T194] x23: ffff800017a32000 x22: dfff800000000000 x21: 0000000000000003 [ 219.989347][ T194] x20: 1fffe00019a7289b x19: 1fffe00019a72880 x18: ffff800011a7bd00 [ 219.991469][ T194] x17: 1fffe00033ee2f76 x16: ffff8000082d1c1c x15: ffff80001506d000 [ 219.993666][ T194] x14: 0000000000000100 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 219.995797][ T194] x11: ff0080000a889954 x10: 0000000000000003 x9 : 73aa03a8ecb5ac00 [ 219.997910][ T194] x8 : 73aa03a8ecb5ac00 x7 : ffff8000082516f8 x6 : 0000000000000000 [ 219.999999][ T194] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 220.002121][ T194] x2 : 0000000000000006 x1 : ffff800011a7d800 x0 : ffff80018a752000 [ 220.004270][ T194] Call trace: [ 220.005156][ T194] gid_table_release_one+0x284/0x3cc [ 220.006598][ T194] ib_cache_release_one+0x144/0x174 [ 220.007942][ T194] ib_device_release+0xc4/0x18c [ 220.009272][ T194] device_release+0x8c/0x1ac [ 220.010539][ T194] kobject_put+0x2b0/0x438 [ 220.011774][ T194] put_device+0x28/0x40 [ 220.012910][ T194] ib_unregister_work+0x28/0x38 [ 220.014233][ T194] process_one_work+0x7f4/0x13a8 [ 220.015575][ T194] worker_thread+0x8c8/0xfbc [ 220.016762][ T194] kthread+0x250/0x2d8 [ 220.017853][ T194] ret_from_fork+0x10/0x20 [ 220.019085][ T194] irq event stamp: 2227100 [ 220.020237][ T194] hardirqs last enabled at (2227099): [] finish_lock_switch+0xb0/0x1c4 [ 220.022844][ T194] hardirqs last disabled at (2227100): [] el1_dbg+0x24/0x80 [ 220.025176][ T194] softirqs last enabled at (2225180): [] handle_softirqs+0xaf8/0xc6c [ 220.027744][ T194] softirqs last disabled at (2225161): [] __do_softirq+0x14/0x20 [ 220.030255][ T194] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.123445][ T4929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.276782][ T4929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.416169][ T4929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.458146][ T4299] bridge0: port 3(syz_tun) entered disabled state [ 220.469339][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.489793][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.492622][ T4303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.495253][ T4303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.497961][ T4303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.500062][ T4303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.522484][ T4299] device syz_tun left promiscuous mode [ 220.524609][ T4299] bridge0: port 3(syz_tun) entered disabled state [ 220.888663][ T7236] lo speed is unknown, defaulting to 1000 [ 221.418005][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 221.540227][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.548410][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.551379][ T7236] device bridge_slave_0 entered promiscuous mode [ 221.554869][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.556855][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.559395][ T7236] device bridge_slave_1 entered promiscuous mode [ 221.633632][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.637967][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.737691][ T7236] team0: Port device team_slave_0 added [ 221.741522][ T7236] team0: Port device team_slave_1 added [ 221.755803][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.757640][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.764491][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.768627][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.770916][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.777435][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.824813][ T4929] device erspan0 left promiscuous mode [ 221.922585][ T7236] device hsr_slave_0 entered promiscuous mode [ 221.960848][ T7236] device hsr_slave_1 entered promiscuous mode [ 221.990510][ T7236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.992507][ T7236] Cannot create hsr debugfs directory [ 222.239018][ T7236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.272329][ T7236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.591472][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 222.602931][ T7236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.657202][ T7236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.789145][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.068571][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.071987][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.074514][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.081599][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.084303][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.086712][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.088575][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.177755][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.183057][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.185647][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.188303][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.190167][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.197071][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.199845][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.209002][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.217951][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.222560][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.229085][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.232004][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.240240][ T4929] device batadv_slave_1 left promiscuous mode [ 223.316218][ T4929] device hsr_slave_0 left promiscuous mode [ 223.351617][ T4929] device hsr_slave_1 left promiscuous mode [ 223.430736][ T4929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.432725][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.436479][ T4929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.438479][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.441066][ T4929] device bridge_slave_1 left promiscuous mode [ 223.442858][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.491564][ T4929] device bridge_slave_0 left promiscuous mode [ 223.493253][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.651716][ T4929] device veth1_macvtap left promiscuous mode [ 223.653665][ T4929] device veth0_macvtap left promiscuous mode [ 223.655340][ T4929] device veth1_vlan left promiscuous mode [ 223.657007][ T4929] device veth0_vlan left promiscuous mode [ 223.761814][ T4929] infiniband sz1: set down [ 224.660475][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 225.823888][ T4929] team0 (unregistering): Port device team_slave_1 removed [ 226.031521][ T4929] team0 (unregistering): Port device team_slave_0 removed [ 226.202242][ T4929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.487199][ T4929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.740738][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 228.820566][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 228.843329][ T4929] bond0 (unregistering): Released all slaves [ 229.073705][ T194] smc: removing ib device sz1 [ 229.080596][ T14] lo speed is unknown, defaulting to 1000 [ 229.082539][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.085187][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.093471][ T7236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.096712][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.107817][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.111994][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.344685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.346819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.354857][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.645007][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.647677][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.661227][ T7236] device veth0_vlan entered promiscuous mode [ 229.668224][ T7236] device veth1_vlan entered promiscuous mode [ 229.679349][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.688301][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.691500][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.693933][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.696432][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.709121][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.712006][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.714639][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.720061][ T7236] device veth0_macvtap entered promiscuous mode [ 229.726083][ T7236] device veth1_macvtap entered promiscuous mode [ 229.746842][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.749591][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.758667][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.761613][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.764130][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.766706][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.769233][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.772157][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.775814][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.778290][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.780979][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.783552][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.786340][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.790996][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.793782][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.796234][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.798805][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.801484][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.804136][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.806797][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.809650][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.813263][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.818000][ T7236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.820333][ T7236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.830179][ T7236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.832787][ T7236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.836260][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.838896][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.955230][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.957560][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.964149][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.967483][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50