last executing test programs: 9.809261669s ago: executing program 3 (id=917): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) 8.563714533s ago: executing program 3 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0xf, 0x0, @void}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 8.462850517s ago: executing program 1 (id=924): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 7.875381322s ago: executing program 1 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000080), 0x40000000, &(0x7f00000000c0)) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x554, &(0x7f0000000640)="$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") 7.749388908s ago: executing program 0 (id=927): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x0, 0xb88f, 0x1}, {0x6, 0x1, 0x9, 0xa2df, 0x8, 0x10}, 0x8, 0xfffffff9, 0x9c3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x1ee2644bd4c0a1f6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x26ab54c204cc3d9d}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x3, 0xfffffffa, 0x10000, 0x5, 0x7, 0x0, 0x9a, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x8000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 6.857132296s ago: executing program 4 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 6.726788891s ago: executing program 2 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.663610227s ago: executing program 4 (id=931): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x2, 0x0, @void}, 0xd) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000000680)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030372c6e6f7374726963742c7569643d69676e6f72652c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6d6f64653d30303030303030303030303030303030303033353031362c646d6f64653d30303030303030303030303030303030303030303031312c00e3cc6abaa52ef118fcbe734b47a6bf66bdd357c81c22ed4c07659e40ba6f24e50fafda55f8d6b01f7fa9505996c5c8e5fac082523b41c69e892f8f3372228da85b089c449c8243489693fc724dc3a34a1c85226b306f86ba0484aad17849d21905bbe3dbc20bf4c98777720c05637db44ef1224790223b183be4cbccef28b6dc7701cf3b6d45babe7a0177b34116f8033c0614d351a01526a5e4626159b2d7a3176575b87ce23efc23d6fc182ecb01ea4d182720d93ab9a99e432ce3c68dcdeec61f9cc21345ccd818e18d6d9c4bb97e0f79e4cfb80641"], 0x1, 0xc56, &(0x7f0000002680)="$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") close_range(r1, 0xffffffffffffffff, 0x0) 5.632161029s ago: executing program 3 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 5.592004s ago: executing program 1 (id=933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 5.546747392s ago: executing program 4 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 5.465811226s ago: executing program 2 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6db, &(0x7f0000000c00)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 4.795243334s ago: executing program 0 (id=936): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 4.754620716s ago: executing program 0 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 4.66884949s ago: executing program 4 (id=938): gettid() r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000001c0400000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000040010000000000006006000000e8b72dc202f2b682af9c8d78690cd0a170a53cbad6423d60e8e2e7e83184142b5d859784af1b8bbdd432ac3746f9ef9192c2ee15"], 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x40490) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) 4.66757589s ago: executing program 1 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 4.185977731s ago: executing program 3 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x36c, &(0x7f0000000540)="$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") syz_clone(0x50202180, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x10000, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.183802751s ago: executing program 2 (id=950): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3.786617498s ago: executing program 0 (id=941): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0xfff8, 0x6, 0x89, 0xc9, r4}, &(0x7f0000000340)=0x10) 3.742591979s ago: executing program 1 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1000000, 0x8, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.342493903s ago: executing program 0 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0xf, 0x0, @void}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 1.341214363s ago: executing program 1 (id=944): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 1.339924083s ago: executing program 2 (id=945): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 1.339166283s ago: executing program 3 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) socket$qrtr(0x2a, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 1.338333813s ago: executing program 4 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) waitid(0x2, r0, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 484.71918ms ago: executing program 2 (id=948): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket(0x10, 0x3, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 482.21052ms ago: executing program 0 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 308.934377ms ago: executing program 3 (id=949): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd44cb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r7}) 119.237606ms ago: executing program 4 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) 0s ago: executing program 2 (id=952): openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000640), 0x2000, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ): interface not active [ 33.376220][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.377372][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.378923][ T4327] device bridge_slave_0 entered promiscuous mode [ 33.380493][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.381541][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.382932][ T4321] device bridge_slave_1 entered promiscuous mode [ 33.386113][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.387797][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.389192][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.393062][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.396075][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.397020][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.401143][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.403146][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.404300][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.405829][ T4327] device bridge_slave_1 entered promiscuous mode [ 33.410561][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.415809][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.416821][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.420747][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.428351][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.433183][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.447014][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.453453][ T4330] team0: Port device team_slave_0 added [ 33.489701][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.528838][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.569605][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.574422][ T4330] team0: Port device team_slave_1 added [ 33.576333][ T4321] team0: Port device team_slave_0 added [ 33.629586][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.688764][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.738587][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.739813][ T4325] Cannot create hsr debugfs directory [ 33.744424][ T4321] team0: Port device team_slave_1 added [ 33.757089][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.758185][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.762191][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.765109][ T4327] team0: Port device team_slave_0 added [ 33.770115][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.771232][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.774971][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.776890][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.777882][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.781757][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.784501][ T4327] team0: Port device team_slave_1 added [ 33.791593][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.792674][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.796537][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.814320][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.815418][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.819041][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.869596][ T4330] device hsr_slave_0 entered promiscuous mode [ 33.909266][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.948592][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.949803][ T4330] Cannot create hsr debugfs directory [ 33.950985][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.952092][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.956135][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.009552][ T4321] device hsr_slave_0 entered promiscuous mode [ 34.058794][ T4321] device hsr_slave_1 entered promiscuous mode [ 34.108614][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.109811][ T4321] Cannot create hsr debugfs directory [ 34.189875][ T4327] device hsr_slave_0 entered promiscuous mode [ 34.238997][ T4327] device hsr_slave_1 entered promiscuous mode [ 34.278601][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.279755][ T4327] Cannot create hsr debugfs directory [ 34.363112][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.412481][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.459746][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.500867][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.561901][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.619706][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.672289][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.710880][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.755967][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.781055][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.821966][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.869779][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.941134][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.942383][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.971798][ T4327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.010147][ T4327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.038933][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 35.039008][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 35.040016][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 35.049399][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.092538][ T4327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.118658][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 35.118799][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 35.149578][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.189666][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.221696][ T4327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.275461][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.277419][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.287474][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.301537][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.303143][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.304664][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.305762][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.307508][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.319408][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.325235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.326808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.328098][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.329145][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.336072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.342617][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.349606][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.350966][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.354443][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.358228][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.363866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.365515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.367091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.373449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.375072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.376822][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.377973][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.387253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.389735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.391429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.392872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.394207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.399606][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.402154][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.405777][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.407544][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.409253][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.410819][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.412212][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.413418][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.414636][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.416095][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.421646][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.427548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.442989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.444520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.445938][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.447071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.448441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.453030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.456562][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.464922][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.466194][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.467653][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.471794][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.473474][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.474889][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.475964][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.481698][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.484592][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.486227][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.487776][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.493426][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.495292][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.503198][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.505157][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.506777][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.508327][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.511092][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.512150][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.513445][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.515065][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.516602][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.518658][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.520207][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.521681][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.526652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.528157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.530279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.531631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.534389][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.535929][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.537351][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.539291][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.541451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.542723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.544770][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.550189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.551762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.553198][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.554367][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.557394][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.561773][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.563414][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.564899][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.566288][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.567888][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.574223][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.575336][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.576832][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.584411][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.586441][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.591265][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.599181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.600807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.602312][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.603389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.604674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.606382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.607914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.611583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.613086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.614614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.623134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.624567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.629503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.630933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.633529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.636559][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.644109][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.646238][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.647781][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.650043][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.659042][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.666690][ T4320] device veth0_vlan entered promiscuous mode [ 35.674655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.676371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.677919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.679785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.682594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.684034][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.692535][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.694202][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.702682][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.711888][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.713557][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.714981][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.716347][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.717818][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.720575][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.721765][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.723310][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.724859][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.729220][ T4320] device veth1_vlan entered promiscuous mode [ 35.735927][ T4320] device veth0_macvtap entered promiscuous mode [ 35.738007][ T4320] device veth1_macvtap entered promiscuous mode [ 35.742975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.744388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.745793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.747332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.751408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.752812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.756910][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.767090][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.768837][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.781531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.783447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.785119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.786447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.789912][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.796662][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.801556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.803353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.804868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.806153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.812900][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.815162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.816491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.825050][ T4325] device veth0_vlan entered promiscuous mode [ 35.828738][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.830428][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.831718][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.832982][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.836315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.837523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.843080][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.850822][ T4325] device veth1_vlan entered promiscuous mode [ 35.867622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.869721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.871201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.892603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.894112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.895526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.896901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.898342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.901401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.902715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.920905][ T4330] device veth0_vlan entered promiscuous mode [ 35.922557][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.924207][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.926328][ T4325] device veth0_macvtap entered promiscuous mode [ 35.932424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.933950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.935346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.937049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.938418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.942271][ T4330] device veth1_vlan entered promiscuous mode [ 35.951332][ T4325] device veth1_macvtap entered promiscuous mode [ 35.961212][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.962350][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.964108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.965596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.967034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.968469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.972162][ T4321] device veth0_vlan entered promiscuous mode [ 35.984586][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.986165][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.987669][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.990721][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.994635][ T4327] device veth0_vlan entered promiscuous mode [ 36.001470][ T4321] device veth1_vlan entered promiscuous mode [ 36.003079][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.004436][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.005876][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.007406][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.009682][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.015998][ T4330] device veth0_macvtap entered promiscuous mode [ 36.017938][ T4327] device veth1_vlan entered promiscuous mode [ 36.025359][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.026815][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.029558][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.032640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.034234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.035611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.036893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.038404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.040326][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.041552][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.043047][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.044536][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.049667][ T4330] device veth1_macvtap entered promiscuous mode [ 36.051599][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.053121][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.055386][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.056843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.058331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.060369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.066845][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.068356][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.076558][ T4327] device veth0_macvtap entered promiscuous mode [ 36.078433][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.082273][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.083853][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.085379][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.087553][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.091005][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.092441][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.093834][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.095175][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.097134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.098431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.101356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.105989][ T4327] device veth1_macvtap entered promiscuous mode [ 36.107426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.108985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.110579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.113142][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.114688][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.116116][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.117728][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.122740][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.125876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.127456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.142995][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.144480][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.145752][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.147138][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.148419][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.151252][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.153662][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.155759][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.157694][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.161870][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.163215][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.166169][ T4321] device veth0_macvtap entered promiscuous mode [ 36.171647][ T4432] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 36.173201][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.174691][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.176165][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.178286][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.180992][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.182629][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.184141][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.185592][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.187135][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.189526][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.195931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.197591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.200683][ T4321] device veth1_macvtap entered promiscuous mode [ 36.204461][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.205940][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.207367][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.209091][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.265301][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.266907][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.268317][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.270511][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.271763][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.275632][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.277370][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.279597][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.281422][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.283020][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.285336][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.287895][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.290085][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.291543][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.293107][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.294568][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.296141][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.297591][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.302225][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.307297][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.310137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.311585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.312949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.314505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.316403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.317856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.335476][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.336664][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.338265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.352984][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.354370][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.357801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.367149][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.369239][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.370628][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.371967][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.374541][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.375717][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.377436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.453977][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.455271][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.457755][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.471087][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.472350][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.475974][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.486342][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.494734][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.996475][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.001913][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.007872][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.018646][ T183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.310639][ T4440] kexec: Could not allocate swap buffer [ 37.505288][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 37.506280][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 37.507381][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 37.508473][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 37.559430][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 39.346421][ T4481] device wg1 entered promiscuous mode [ 39.577366][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 39.579146][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 39.580709][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 39.584078][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 39.602132][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 41.310769][ T4511] Zero length message leads to an empty skb [ 41.658815][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 41.658845][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 41.660936][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 41.662176][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 41.679595][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 42.529387][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 42.724765][ T4538] netlink: 'syz.4.32': attribute type 3 has an invalid length. [ 42.726534][ T4538] netlink: 'syz.4.32': attribute type 3 has an invalid length. [ 42.728185][ T4539] 8021q: VLANs not supported on nlmon0 [ 43.541221][ T4560] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 43.544052][ T4560] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.046975][ T4603] netlink: 168 bytes leftover after parsing attributes in process `syz.0.48'. [ 46.386448][ T4574] loop3: detected capacity change from 0 to 65536 [ 46.484955][ T4574] XFS (loop3): Mounting V5 Filesystem [ 46.511772][ T4574] XFS (loop3): Ending clean mount [ 46.952219][ T4623] ªªªªªª: renamed from vlan0 [ 47.027604][ T4320] XFS (loop3): Unmounting Filesystem [ 47.428924][ T4629] loop4: detected capacity change from 0 to 128 [ 47.430326][ T4629] ======================================================= [ 47.430326][ T4629] WARNING: The mand mount option has been deprecated and [ 47.430326][ T4629] and is ignored by this kernel. Remove the mand [ 47.430326][ T4629] option from the mount to silence this warning. [ 47.430326][ T4629] ======================================================= [ 47.477189][ T4619] loop2: detected capacity change from 0 to 32768 [ 47.478455][ T4629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.484422][ T4619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.52 (4619) [ 47.500903][ T4619] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.502545][ T4619] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 47.503808][ T4619] BTRFS info (device loop2): allowing degraded mounts [ 47.508912][ T4619] BTRFS info (device loop2): turning on sync discard [ 47.510034][ T4619] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 47.511540][ T4619] BTRFS info (device loop2): allowing degraded mounts [ 47.512545][ T4619] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 47.514069][ T4619] BTRFS info (device loop2): force clearing of disk cache [ 47.515126][ T4619] BTRFS info (device loop2): using free space tree [ 47.562979][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 47.591316][ T4631] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 47.597892][ T4631] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 47.737798][ T4619] BTRFS info (device loop2): enabling ssd optimizations [ 47.741603][ T4619] BTRFS info (device loop2): rebuilding free space tree [ 47.784066][ T4656] netlink: 72 bytes leftover after parsing attributes in process `syz.1.58'. [ 47.927674][ T4330] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.354617][ T4670] loop0: detected capacity change from 0 to 128 [ 48.566880][ T4670] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 48.569334][ T4670] hpfs: filesystem error: improperly stopped [ 48.570177][ T4670] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 48.571255][ T4670] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 48.572660][ T4670] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 49.005613][ T4686] device syzkaller0 entered promiscuous mode [ 49.134506][ T4693] loop3: detected capacity change from 0 to 4096 [ 49.158327][ T4693] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 49.160137][ T4693] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 49.169392][ T4693] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 49.171379][ T4693] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 49.209651][ T4693] ntfs: volume version 3.1. [ 49.215411][ T4693] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 49.217085][ T4693] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 49.219185][ T4693] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 49.521030][ T4693] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 49.524867][ T4693] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 50.245143][ T4717] sctp: [Deprecated]: syz.1.74 (pid 4717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.245143][ T4717] Use struct sctp_sack_info instead [ 50.272763][ T4722] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 50.787983][ T4329] Bluetooth: hci0: command 0x0401 tx timeout [ 51.176733][ T4737] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.178327][ T4737] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.179642][ T4737] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.181043][ T4737] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.183730][ T4737] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 51.192373][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 53.478883][ T4740] netlink: 1032 bytes leftover after parsing attributes in process `syz.4.79'. [ 56.200030][ T4779] tipc: Started in network mode [ 56.201088][ T4779] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.203648][ T4779] tipc: Enabled bearer , priority 10 [ 56.207650][ T4779] tipc: Enabled bearer , priority 0 [ 56.261207][ T4781] loop0: detected capacity change from 0 to 1024 [ 56.263138][ T4781] EXT4-fs: Ignoring removed bh option [ 56.264038][ T4781] EXT4-fs: Ignoring removed nobh option [ 56.264882][ T4781] EXT4-fs: Ignoring removed bh option [ 56.273055][ T4781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.674949][ T4792] netlink: 300 bytes leftover after parsing attributes in process `syz.3.94'. [ 57.202964][ T4679] tipc: Node number set to 2886997162 [ 57.265965][ T4798] loop2: detected capacity change from 0 to 128 [ 57.270949][ T4781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.347069][ T4804] loop3: detected capacity change from 0 to 8 [ 57.348451][ T4804] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 57.364585][ T4798] befs: (loop2): invalid magic header [ 57.518417][ T4807] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.91: Allocating blocks 497-513 which overlap fs metadata [ 57.581523][ T4807] EXT4-fs (loop0): pa 00000000f5b966c4: logic 256, phys. 385, len 8 [ 57.582750][ T4807] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 57.653508][ T4699] udevd[4699]: incorrect cramfs checksum on /dev/loop3 [ 57.700721][ T4699] udevd[4699]: incorrect cramfs checksum on /dev/loop3 [ 57.738711][ T4312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.780925][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 57.858080][ T4815] process 'syz.3.97' launched './file2' with NULL argv: empty string added [ 57.865308][ T4815] cramfs: Error -5 while decompressing! [ 57.866242][ T4815] cramfs: 0000000038742226(26)->0000000062f06662(4096) [ 57.867413][ T4815] cramfs: Error -3 while decompressing! [ 57.868308][ T4815] cramfs: 000000006ee01a23(26)->0000000058e274c0(4096) [ 57.869591][ T4815] cramfs: Error -3 while decompressing! [ 57.870448][ T4815] cramfs: 00000000baa7e071(16)->000000005dd6b16a(4096) [ 57.871929][ T4815] cramfs: Error -5 while decompressing! [ 57.872840][ T4815] cramfs: 0000000038742226(26)->0000000062f06662(4096) [ 61.766767][ T27] audit: type=1326 audit(61.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4855 comm="syz.1.111" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x0 [ 61.950359][ T4854] loop0: detected capacity change from 0 to 65536 [ 62.025460][ T4854] XFS (loop0): Mounting V5 Filesystem [ 62.047373][ T4854] XFS (loop0): Ending clean mount [ 63.328500][ C0] sched: RT throttling activated [ 63.405075][ T4325] XFS (loop0): Unmounting Filesystem [ 63.933532][ T4886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.390768][ T4894] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 64.396359][ T4894] device bond1 entered promiscuous mode [ 64.397608][ T4894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.403678][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 64.411025][ T4894] bond1: (slave bridge1): making interface the new active one [ 64.412294][ T4894] device bridge1 entered promiscuous mode [ 64.414293][ T4894] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 64.415720][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 64.511194][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.512477][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.514324][ T1965] cfg80211: failed to load regulatory.db [ 64.887992][ T27] audit: type=1326 audit(64.870:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.124" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd5b9e8 code=0x0 [ 65.778105][ T4917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.787573][ T4917] team0: Port device bond1 added [ 65.867204][ T4847] team0: Failed to send port change of device bond1 via netlink (err -105) [ 66.289424][ T4931] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 68.246429][ T4329] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 68.247813][ T4329] Bluetooth: hci0: Injecting HCI hardware error event [ 68.250480][ T4329] Bluetooth: hci0: hardware error 0x00 [ 68.444658][ T4961] netlink: 'syz.2.140': attribute type 5 has an invalid length. [ 68.753083][ T4963] device syzkaller0 entered promiscuous mode [ 68.853183][ T4971] loop0: detected capacity change from 0 to 8 [ 68.859580][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop0 [ 68.861101][ T4971] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 68.971150][ T4969] loop2: detected capacity change from 0 to 32768 [ 69.254354][ T4969] XFS (loop2): Mounting V5 Filesystem [ 69.382003][ T4969] XFS (loop2): Ending clean mount [ 69.386543][ T4969] XFS (loop2): Quotacheck needed: Please wait. [ 69.410105][ T4969] XFS (loop2): Quotacheck: Done. [ 69.830942][ T4330] XFS (loop2): Unmounting Filesystem [ 69.847719][ T4992] loop3: detected capacity change from 0 to 4096 [ 71.338541][ T4329] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 71.343319][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 71.368974][ T5004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.869836][ T5004] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 71.889773][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 72.313275][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 72.315877][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 72.486863][ T5032] loop3: detected capacity change from 0 to 8 [ 72.501907][ T5032] unable to read inode lookup table [ 75.021613][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 75.057882][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 75.085590][ T5072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.087543][ T5070] tipc: Started in network mode [ 75.088443][ T5070] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 75.091726][ T5070] tipc: Enabled bearer , priority 10 [ 75.129606][ T5072] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 75.132586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 75.263101][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 75.320301][ T5079] HTB: quantum of class 80030008 is small. Consider r2q change. [ 76.209910][ T1965] tipc: Node number set to 1 [ 76.827027][ T5113] device syzkaller0 entered promiscuous mode [ 76.979644][ T5115] binder: 5114:5115 tried to acquire reference to desc 0, got 1 instead [ 76.982571][ T5115] binder_alloc: 5114: pid 5114 spamming oneway? 2 buffers allocated for a total size of 5120 [ 76.984788][ T5115] binder_alloc: 5114: pid 5114 spamming oneway? 3 buffers allocated for a total size of 5128 [ 76.987540][ T14] binder: undelivered TRANSACTION_COMPLETE [ 76.988662][ T14] binder: undelivered TRANSACTION_COMPLETE [ 76.989523][ T14] binder: undelivered TRANSACTION_COMPLETE [ 77.003169][ T14] binder: undelivered transaction 6, process died. [ 77.004203][ T14] binder: undelivered transaction 7, process died. [ 77.005149][ T14] binder: undelivered transaction 5, process died. [ 77.084495][ T5119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 77.089092][ T5119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 77.467542][ T5127] loop2: detected capacity change from 0 to 64 [ 81.153649][ T5179] syz.0.200 sent an empty control message without MSG_MORE. [ 81.960205][ T5186] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 81.972634][ T5186] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.011920][ T5189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'. [ 82.593666][ T5204] set match dimension is over the limit! [ 82.998799][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 83.009621][ T5216] syz.3.209 uses obsolete (PF_INET,SOCK_PACKET) [ 83.031389][ T5218] loop0: detected capacity change from 0 to 256 [ 83.096468][ T5223] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 83.129334][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.156726][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.433910][ T5223] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.436497][ T5223] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.444791][ T5227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.446486][ T5227] device batadv_slave_1 entered promiscuous mode [ 83.454687][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.462159][ T5227] bond1: (slave batadv_slave_1): making interface the new active one [ 83.464160][ T5227] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 83.468139][ T5227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.214'. [ 83.479713][ T5227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.486379][ T5208] loop3: detected capacity change from 0 to 32768 [ 83.582301][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 83.585270][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 83.590110][ T5208] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 83.602309][ T5238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.216'. [ 83.608244][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 84.145844][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 84.495803][ T5268] xt_bpf: check failed: parse error [ 85.181966][ T5272] device syzkaller0 entered promiscuous mode [ 85.565060][ T5282] loop1: detected capacity change from 0 to 256 [ 86.073689][ T27] audit: type=1326 audit(86.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.080505][ T27] audit: type=1326 audit(86.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.086160][ T5272] tipc: Enabled bearer , priority 0 [ 86.638276][ T27] audit: type=1326 audit(86.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.651479][ T5270] tipc: Resetting bearer [ 86.654115][ T27] audit: type=1326 audit(86.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.675166][ T27] audit: type=1326 audit(86.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.686989][ T27] audit: type=1326 audit(86.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.699443][ T27] audit: type=1326 audit(86.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.703035][ T27] audit: type=1326 audit(86.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.706537][ T27] audit: type=1326 audit(86.630:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.723441][ T27] audit: type=1326 audit(86.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x7fc00000 [ 86.769618][ T5270] tipc: Disabling bearer [ 87.672936][ T5300] netlink: 165 bytes leftover after parsing attributes in process `syz.2.230'. [ 88.766651][ T5320] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 88.803676][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 89.366645][ T5326] loop1: detected capacity change from 0 to 512 [ 89.401242][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.952513][ T5330] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 89.980716][ T5330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.019055][ T5330] bond2: (slave ip6gretap1): making interface the new active one [ 90.021751][ T5330] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.084536][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 90.596370][ T5353] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 90.598781][ T5353] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 90.942332][ T5358] MPTCP: kernel_bind error, err=-98 [ 93.677526][ T5414] binder: 5413:5414 tried to acquire reference to desc 0, got 1 instead [ 93.733305][ T5419] binder: 5413:5419 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.735316][ T5419] binder: 5419 RLIMIT_NICE not set [ 93.736094][ T5419] binder: 5419 RLIMIT_NICE not set [ 93.737300][ T5419] binder: 5419 RLIMIT_NICE not set [ 93.737858][ T5418] loop2: detected capacity change from 0 to 512 [ 93.738144][ T5419] binder_alloc: 5413: binder_alloc_buf, no vma [ 93.743446][ T5419] binder: cannot allocate buffer: vma cleared, target dead or dying [ 93.743483][ T5419] binder: 5413:5419 transaction reply to 5413:5414 failed 13/29189/-3, size 0-0 line 3230 [ 93.749084][ T5419] binder: send failed reply for transaction 12 to 5413:5414 [ 93.749803][ T5418] EXT4-fs: Ignoring removed nobh option [ 93.751147][ T5414] binder: 5413:5414 ioctl c0306201 20000580 returned -14 [ 93.767803][ T5418] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.768722][ T4368] binder: undelivered TRANSACTION_ERROR: 29189 [ 93.786710][ T4368] binder: undelivered TRANSACTION_ERROR: 29190 [ 93.791304][ T5418] EXT4-fs error (device loop2): __ext4_iget:5091: inode #11: block 1: comm syz.2.263: invalid block [ 93.794002][ T5418] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.263: couldn't read orphan inode 11 (err -117) [ 93.795971][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.344857][ T5432] set match dimension is over the limit! [ 94.730407][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 94.770472][ T5437] loop1: detected capacity change from 0 to 1024 [ 94.777046][ T5437] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 95.261273][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 95.317433][ T5447] bridge1: port 1(veth3) entered blocking state [ 95.336943][ T5447] bridge1: port 1(veth3) entered disabled state [ 95.366030][ T5447] device veth3 entered promiscuous mode [ 95.451730][ T5447] bridge1: port 2(veth5) entered blocking state [ 95.454422][ T5447] bridge1: port 2(veth5) entered disabled state [ 95.456384][ T5447] device veth5 entered promiscuous mode [ 95.466277][ T5453] device syzkaller0 entered promiscuous mode [ 95.555583][ T5460] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 95.568858][ T5460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.582360][ T5460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.583755][ T5460] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.586198][ T5460] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.033468][ T5460] device gretap1 entered promiscuous mode [ 96.037681][ T5460] bond1: (slave gretap1): making interface the new active one [ 96.040630][ T5460] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 96.046183][ T5460] device macvlan2 entered promiscuous mode [ 96.047665][ T5460] device bond1 entered promiscuous mode [ 96.049402][ T5460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.153653][ T5460] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 96.226585][ T5460] device bond1 left promiscuous mode [ 96.629827][ T5474] device syzkaller0 entered promiscuous mode [ 97.148759][ T5487] capability: warning: `syz.3.281' uses deprecated v2 capabilities in a way that may be insecure [ 97.939547][ T5493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 99.036596][ T5514] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 99.045889][ T5514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.048078][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 99.131134][ T5519] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 99.394352][ T5514] bond2: (slave veth3): Enslaving as an active interface with a down link [ 99.438413][ T5514] device veth0_to_bond entered promiscuous mode [ 99.440014][ T5514] device veth0_to_bond left promiscuous mode [ 99.442219][ T5514] bond2: (slave vlan0): making interface the new active one [ 99.444214][ T5514] device veth0_to_bond entered promiscuous mode [ 99.445881][ T5514] device vlan0 entered promiscuous mode [ 99.447049][ T5514] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 100.101088][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 102.417824][ T5585] netlink: 'syz.1.308': attribute type 10 has an invalid length. [ 102.431630][ T5584] loop2: detected capacity change from 0 to 256 [ 102.449132][ T5584] exFAT-fs (loop2): invalid fs_name [ 102.450181][ T5584] exFAT-fs (loop2): failed to read boot sector [ 102.451148][ T5584] exFAT-fs (loop2): failed to recognize exfat type [ 102.465681][ T5562] loop3: detected capacity change from 0 to 32768 [ 102.465845][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.485460][ T5585] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.493984][ T4312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.507761][ T5588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.578378][ T5585] device bond_slave_0 entered promiscuous mode [ 102.579523][ T5585] device bond_slave_1 entered promiscuous mode [ 102.580470][ T5585] device wlan1 entered promiscuous mode [ 102.581666][ T5585] device team_slave_0 entered promiscuous mode [ 102.582539][ T5585] device team_slave_1 entered promiscuous mode [ 102.587807][ T5585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.591523][ T5585] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 102.837773][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 102.894375][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 102.919433][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 103.117757][ T5601] loop3: detected capacity change from 0 to 2048 [ 103.217825][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.241764][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 103.334679][ T5612] binder: 5611:5612 ioctl c00c620f 0 returned -14 [ 104.280710][ T5629] Bluetooth: MGMT ver 1.22 [ 104.628195][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 104.683627][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 105.093983][ T5640] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.447051][ T5663] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 107.223667][ T5663] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.225983][ T5663] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 107.278353][ T5678] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 107.284109][ T5678] device macvlan3 entered promiscuous mode [ 107.285745][ T5678] device bond4 entered promiscuous mode [ 107.287931][ T5678] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.370427][ T5678] device bond4 left promiscuous mode [ 108.866388][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 109.334757][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 109.532826][ T5726] device syzkaller0 entered promiscuous mode [ 110.344374][ T5749] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.345785][ T5749] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.347043][ T5749] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.348284][ T5749] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.355798][ T5749] team0: Port device vxlan0 added [ 113.676008][ T5805] loop4: detected capacity change from 0 to 256 [ 113.771137][ T5805] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.782349][ T5805] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.873828][ T5812] IPv6: NLM_F_REPLACE set, but no existing node found! [ 114.176879][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 114.183466][ T5811] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 114.261018][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 114.333684][ T5820] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 114.346146][ T5820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.409624][ T5820] bond2: (slave veth7): Enslaving as an active interface with a down link [ 114.443149][ T5820] device gretap1 entered promiscuous mode [ 114.450201][ T5820] bond2: (slave gretap1): making interface the new active one [ 114.452486][ T5820] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 114.454964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 115.441170][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 115.734506][ T5843] loop3: detected capacity change from 0 to 512 [ 115.736087][ T5843] EXT4-fs: Ignoring removed i_version option [ 115.955552][ T5843] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 115.956957][ T5843] System zones: 0-2, 18-18, 34-35 [ 116.035874][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.649011][ T9] device vlan0 left promiscuous mode [ 117.940883][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 118.989679][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 119.114253][ T5910] loop3: detected capacity change from 0 to 128 [ 119.395313][ T5910] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.437078][ T5910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.450446][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 119.467465][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 119.960402][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 120.028564][ T5924] loop0: detected capacity change from 0 to 8192 [ 120.085380][ T5924] loop0: p2 p3 p4[EZD] [ 120.090428][ T5924] loop0: p3 start 360447 is beyond EOD, truncated [ 120.091531][ T5924] loop0: p4 size 264072 extends beyond EOD, truncated [ 120.441542][ T5876] loop2: detected capacity change from 0 to 131072 [ 120.543865][ T5876] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.562526][ T5876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.848290][ T5876] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 121.011553][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 121.021532][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 121.080798][ T5955] dns_resolver: Unsupported server list version (0) [ 122.934175][ T5984] loop2: detected capacity change from 0 to 8 [ 122.953605][ T5984] SQUASHFS error: Unable to read inode 0x0 [ 122.976619][ T5984] loop2: detected capacity change from 0 to 128 [ 122.987428][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.991585][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.051500][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 125.946351][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.947356][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.115605][ T6035] loop0: detected capacity change from 0 to 8 [ 126.155581][ T6035] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 126.264452][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 126.277287][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 126.282381][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop0 [ 126.819939][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop0 [ 127.299707][ T6051] cramfs: Error -5 while decompressing! [ 127.300664][ T6051] cramfs: 0000000038742226(26)->0000000071d94b55(4096) [ 127.301747][ T6051] cramfs: Error -3 while decompressing! [ 127.302535][ T6051] cramfs: 000000006ee01a23(26)->000000002c41a662(4096) [ 127.303532][ T6051] cramfs: Error -3 while decompressing! [ 127.304471][ T6051] cramfs: 00000000baa7e071(16)->00000000293e8d8f(4096) [ 127.305488][ T6051] cramfs: Error -5 while decompressing! [ 127.306286][ T6051] cramfs: 0000000038742226(26)->0000000071d94b55(4096) [ 127.321544][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop0 [ 127.550899][ T6057] binder: 6056:6057 tried to acquire reference to desc 0, got 1 instead [ 127.553061][ T6057] binder: release 6056:6057 transaction 18 out, still active [ 127.554437][ T6057] binder: undelivered TRANSACTION_COMPLETE [ 127.555810][ T6057] binder: 6056:6057 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.557836][ T6057] binder: 6057 RLIMIT_NICE not set [ 127.559745][ T6057] binder: 6057 RLIMIT_NICE not set [ 127.560932][ T6057] binder: 6057 RLIMIT_NICE not set [ 127.561768][ T6057] binder: 6057:6056 reply target not found [ 127.562706][ T6057] binder: 6056:6057 transaction reply to 0:0 failed 19/29189/0, size 0-0 line 2975 [ 127.564244][ T6057] binder: send failed reply for transaction 18, target dead [ 127.574820][ T112] binder: undelivered TRANSACTION_ERROR: 29190 [ 130.096278][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 130.322475][ T6108] binder: 6104:6108 tried to acquire reference to desc 0, got 1 instead [ 130.376573][ T6108] binder: release 6104:6108 transaction 24 out, still active [ 130.960299][ T6108] binder: undelivered TRANSACTION_COMPLETE [ 131.528661][ T6108] binder: 6104:6108 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.530580][ T6108] binder: 6108 RLIMIT_NICE not set [ 131.531361][ T6108] binder: 6108 RLIMIT_NICE not set [ 131.559971][ T6108] binder: 6108 RLIMIT_NICE not set [ 131.560829][ T6108] binder: 6108:6104 reply target not found [ 131.561734][ T6108] binder: 6104:6108 transaction reply to 0:0 failed 25/29189/0, size 0-0 line 2975 [ 131.985707][ T6121] loop3: detected capacity change from 0 to 8192 [ 132.793447][ T6121] loop3: p2 p3 p4[EZD] [ 132.821757][ T6121] loop3: p3 start 360447 is beyond EOD, truncated [ 132.826291][ T6121] loop3: p4 size 264072 extends beyond EOD, truncated [ 133.215369][ T6148] IPv6: NLM_F_REPLACE set, but no existing node found! [ 133.422454][ T6150] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.448987][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 134.957273][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 134.971652][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 135.582657][ T6178] loop3: detected capacity change from 0 to 1024 [ 135.584306][ T6178] EXT4-fs: Ignoring removed bh option [ 135.585294][ T6178] EXT4-fs: Ignoring removed nobh option [ 135.586092][ T6178] EXT4-fs: Ignoring removed bh option [ 135.587775][ T6178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.607576][ T6178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.731715][ T6184] loop4: detected capacity change from 0 to 512 [ 135.958846][ T6184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.971521][ T6184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.976026][ T6184] __quota_error: 60 callbacks suppressed [ 135.976043][ T6184] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 135.978569][ T6184] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.979888][ T6184] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.475: Failed to acquire dquot type 1 [ 135.986391][ T6184] EXT4-fs (loop4): 1 truncate cleaned up [ 136.024679][ T4329] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 136.026135][ T4329] Bluetooth: hci2: Injecting HCI hardware error event [ 136.033989][ T4329] Bluetooth: hci2: hardware error 0x00 [ 136.125098][ T6188] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.477: Allocating blocks 497-513 which overlap fs metadata [ 136.283518][ T6188] EXT4-fs (loop3): pa 00000000c7cdceef: logic 256, phys. 385, len 8 [ 136.284882][ T6188] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 136.320165][ T6184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.780831][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 136.811903][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 136.925583][ T6211] MPTCP: kernel_bind error, err=-98 [ 137.294994][ T6216] loop3: detected capacity change from 0 to 2048 [ 137.342376][ T6216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.102793][ T6225] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.480: bg 0: block 234: padding at end of block bitmap is not set [ 138.107576][ T6225] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.109677][ T6225] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.109677][ T6225] [ 138.111129][ T6225] EXT4-fs (loop3): Total free blocks count 0 [ 138.111956][ T6225] EXT4-fs (loop3): Free/Dirty block details [ 138.113152][ T6225] EXT4-fs (loop3): free_blocks=0 [ 138.113919][ T6225] EXT4-fs (loop3): dirty_blocks=8192 [ 138.114794][ T6225] EXT4-fs (loop3): Block reservation details [ 138.115663][ T6225] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 138.162293][ T183] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 138.271972][ T6235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.287010][ T6233] loop0: detected capacity change from 0 to 4096 [ 139.386906][ T4329] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 140.888376][ T6271] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 140.925892][ T6271] device bond3 entered promiscuous mode [ 140.930973][ T6271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.952197][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.495'. [ 140.970555][ T6271] bond3: (slave bridge4): making interface the new active one [ 140.971868][ T6271] device bridge4 entered promiscuous mode [ 140.976065][ T6271] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 140.977613][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 141.928383][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 141.938439][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 142.107451][ T27] audit: type=1326 audit(143.080:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.496" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195b9e8 code=0x0 [ 144.016229][ T6321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.021055][ T6321] team0: Port device bond4 added [ 144.023245][ T4847] team0: Failed to send port change of device bond4 via netlink (err -105) [ 144.476082][ T6325] loop3: detected capacity change from 0 to 32768 [ 144.570335][ T6325] XFS (loop3): Mounting V5 Filesystem [ 144.572121][ T6339] netlink: 76 bytes leftover after parsing attributes in process `syz.2.516'. [ 144.605309][ T6325] XFS (loop3): Ending clean mount [ 145.592729][ T6325] XFS (loop3): Quotacheck needed: Please wait. [ 145.633530][ T6325] XFS (loop3): Quotacheck: Done. [ 146.306342][ T6353] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.718891][ T4320] XFS (loop3): Unmounting Filesystem [ 148.813647][ T27] audit: type=1326 audit(149.790:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.0.526" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x0 [ 149.477579][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 149.482425][ T6409] tipc: Started in network mode [ 149.483212][ T6409] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 149.484941][ T6409] tipc: Enabled bearer , priority 10 [ 150.719400][ T4682] tipc: Node number set to 1 [ 151.002756][ T6438] loop4: detected capacity change from 0 to 512 [ 151.004231][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.005206][ T6438] EXT4-fs: Ignoring removed bh option [ 151.011690][ T6438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.013301][ T6438] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.015205][ T6438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.018931][ T6438] EXT4-fs (loop4): 1 truncate cleaned up [ 151.019834][ T6438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.412086][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 153.136513][ T6475] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.547374][ T6489] loop4: detected capacity change from 0 to 64 [ 154.628736][ T6492] binder: 6485:6492 tried to acquire reference to desc 0, got 1 instead [ 154.659312][ T6492] binder_alloc: 6485: pid 6485 spamming oneway? 2 buffers allocated for a total size of 5120 [ 154.671446][ T6492] binder_alloc: 6485: pid 6485 spamming oneway? 3 buffers allocated for a total size of 5128 [ 154.679078][ T112] binder_debug: 2 callbacks suppressed [ 154.679087][ T112] binder: undelivered TRANSACTION_COMPLETE [ 154.680828][ T112] binder: undelivered TRANSACTION_COMPLETE [ 154.682650][ T112] binder: undelivered TRANSACTION_COMPLETE [ 154.767733][ T6488] loop3: detected capacity change from 0 to 512 [ 154.770074][ T6488] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.771160][ T6488] EXT4-fs: Ignoring removed bh option [ 154.772564][ T6488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.774265][ T6488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.781780][ T5529] binder: undelivered transaction 31, process died. [ 154.782834][ T5529] binder: undelivered transaction 32, process died. [ 154.783837][ T5529] binder: undelivered transaction 30, process died. [ 154.789999][ T6488] EXT4-fs (loop3): 1 truncate cleaned up [ 154.790873][ T6488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.223740][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 155.262579][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 156.414843][ T6524] device syzkaller0 entered promiscuous mode [ 156.946941][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 156.952885][ T6534] tipc: Enabled bearer , priority 10 [ 157.461353][ T6544] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.567274][ T27] audit: type=1326 audit(158.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.4.562" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd5b9e8 code=0x0 [ 157.906366][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 158.978923][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 159.602389][ T6576] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 159.605474][ T6576] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.060834][ T6584] loop2: detected capacity change from 0 to 2048 [ 160.101149][ T6584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.132291][ T6604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.581: bg 0: block 234: padding at end of block bitmap is not set [ 161.164244][ T6605] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 161.212451][ T6604] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 30 with error 28 [ 161.214424][ T6604] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.214424][ T6604] [ 161.215891][ T6604] EXT4-fs (loop2): Total free blocks count 0 [ 161.216834][ T6604] EXT4-fs (loop2): Free/Dirty block details [ 161.217758][ T6604] EXT4-fs (loop2): free_blocks=0 [ 161.218538][ T6604] EXT4-fs (loop2): dirty_blocks=32 [ 161.219312][ T6604] EXT4-fs (loop2): Block reservation details [ 161.220166][ T6604] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 161.464879][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 162.424220][ T6624] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 162.434156][ T6624] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.435602][ T6624] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.437049][ T6624] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.438377][ T6624] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.440589][ T6624] bond5: (slave geneve2): making interface the new active one [ 162.443303][ T6624] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 162.447639][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'. [ 162.452315][ T6624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.544358][ T6629] loop4: detected capacity change from 0 to 128 [ 164.523891][ T27] audit: type=1326 audit(165.500:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d5b9e8 code=0x0 [ 164.530636][ T6658] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 165.145948][ T6672] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 165.154250][ T6672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.176746][ T6672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.453420][ T6672] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 165.455958][ T6672] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 165.472298][ T6677] netlink: 'syz.1.604': attribute type 10 has an invalid length. [ 165.476432][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.478238][ T6678] device batadv_slave_1 entered promiscuous mode [ 165.492780][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.499509][ T6680] loop4: detected capacity change from 0 to 2048 [ 165.503771][ T6678] bond3: (slave batadv_slave_1): making interface the new active one [ 165.505837][ T6678] bond3: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 165.534757][ T6680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.537214][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 165.539473][ T6672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.999909][ T6683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 166.124349][ T6690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.605: bg 0: block 234: padding at end of block bitmap is not set [ 166.211990][ T6690] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 166.213999][ T6690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.213999][ T6690] [ 166.466441][ T4794] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 166.468476][ T4794] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.468476][ T4794] [ 166.476551][ T4794] EXT4-fs (loop4): Total free blocks count 0 [ 166.477643][ T4794] EXT4-fs (loop4): Free/Dirty block details [ 166.478939][ T4794] EXT4-fs (loop4): free_blocks=0 [ 166.479738][ T4794] EXT4-fs (loop4): dirty_blocks=6144 [ 166.480747][ T4794] EXT4-fs (loop4): Block reservation details [ 170.199155][ T27] audit: type=1326 audit(171.180:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.202784][ T27] audit: type=1326 audit(171.180:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.207742][ T27] audit: type=1326 audit(171.180:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.212386][ T27] audit: type=1326 audit(171.180:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.215811][ T27] audit: type=1326 audit(171.180:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.219534][ T27] audit: type=1326 audit(171.200:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ed59dd4 code=0x7ffc0000 [ 170.222916][ T27] audit: type=1326 audit(171.200:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.226224][ T27] audit: type=1326 audit(171.200:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.230658][ T27] audit: type=1326 audit(171.200:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.234056][ T27] audit: type=1326 audit(171.200:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5b9e8 code=0x7ffc0000 [ 170.744360][ T6761] binder: 6760:6761 tried to acquire reference to desc 0, got 1 instead [ 171.501377][ T6775] binder: 6760:6775 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 171.505838][ T6779] binder: 6760:6779 got reply transaction with no transaction stack [ 171.589969][ T6779] binder: 6760:6779 transaction reply to 0:0 failed 38/29201/-71, size 0-0 line 2946 [ 171.591722][ T6775] binder: 6775 RLIMIT_NICE not set [ 171.592454][ T6775] binder: 6775 RLIMIT_NICE not set [ 171.973376][ T5529] binder: release 6760:6761 transaction 37 out, still active [ 171.978054][ T5529] binder: undelivered TRANSACTION_COMPLETE [ 172.018216][ T5529] binder: release 6760:6775 transaction 37 in, still active [ 172.019934][ T5529] binder: send failed reply for transaction 37, target dead [ 172.021846][ T5529] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.033342][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 173.035301][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 173.036728][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 173.038680][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 173.040147][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 173.650195][ T6818] loop4: detected capacity change from 0 to 256 [ 174.517156][ T4333] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 174.524927][ T6829] device syzkaller0 entered promiscuous mode [ 175.778257][ T6844] netlink: 165 bytes leftover after parsing attributes in process `syz.1.646'. [ 176.154486][ T6855] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 176.627965][ T6855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.638138][ T6867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.640132][ T6867] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.642767][ T6867] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 176.683042][ T6855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.685051][ T6855] device batadv_slave_1 entered promiscuous mode [ 176.696612][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.699724][ T6855] bond3: (slave batadv_slave_1): making interface the new active one [ 176.701574][ T6855] bond3: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 176.713390][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 176.715420][ T6855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.062893][ T6879] device syzkaller0 entered promiscuous mode [ 177.070455][ T6876] loop3: detected capacity change from 0 to 1024 [ 177.079718][ T6876] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 177.513975][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.516623][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.546231][ T6888] device syzkaller0 entered promiscuous mode [ 177.731008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 177.797549][ T6890] loop0: detected capacity change from 0 to 2048 [ 177.887175][ T6890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.310715][ T6900] loop4: detected capacity change from 0 to 32768 [ 178.318219][ T6900] XFS: ikeep mount option is deprecated. [ 178.319352][ T6900] XFS: attr2 mount option is deprecated. [ 178.361878][ T6900] XFS (loop4): Mounting V5 Filesystem [ 178.395664][ T6900] XFS (loop4): Ending clean mount [ 178.404056][ T6900] XFS (loop4): Quotacheck needed: Please wait. [ 178.426325][ T6900] XFS (loop4): Quotacheck: Done. [ 178.699719][ T9] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 234: padding at end of block bitmap is not set [ 178.706425][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 178.708730][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 178.708730][ T9] [ 178.710340][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 178.717632][ T9] EXT4-fs (loop0): Free/Dirty block details [ 178.725432][ T9] EXT4-fs (loop0): free_blocks=0 [ 178.726275][ T9] EXT4-fs (loop0): dirty_blocks=8192 [ 178.727280][ T9] EXT4-fs (loop0): Block reservation details [ 178.728249][ T9] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 178.773265][ T4327] XFS (loop4): Unmounting Filesystem [ 178.776988][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 180.056743][ T6951] binder: 6946:6951 ioctl c00c620f 0 returned -14 [ 180.119320][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 180.143526][ T6956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.146689][ T6956] bond2: (slave bond3): Enslaving as an active interface with an up link [ 180.148148][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 180.502696][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 180.515870][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.678'. [ 180.518758][ T6956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.961580][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 180.961591][ T27] audit: type=1326 audit(182.949:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 180.986895][ T27] audit: type=1326 audit(182.959:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 180.992839][ T27] audit: type=1326 audit(182.959:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 181.000380][ T27] audit: type=1326 audit(182.969:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 181.005907][ T27] audit: type=1326 audit(182.979:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 181.323158][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 181.443196][ T27] audit: type=1326 audit(183.429:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7fc00000 [ 181.447591][ T27] audit: type=1326 audit(183.429:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa2b5b9e8 code=0x7fc00000 [ 181.456515][ T27] audit: type=1326 audit(183.429:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7fc00000 [ 181.461316][ T27] audit: type=1326 audit(183.429:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7fc00000 [ 181.464560][ T27] audit: type=1326 audit(183.429:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7fc00000 [ 181.519223][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.521967][ T6992] tipc: Started in network mode [ 181.522720][ T6992] tipc: Node identity 7f000001, cluster identity 4711 [ 181.524256][ T6992] tipc: Enabled bearer , priority 10 [ 181.528446][ T6992] netlink: 104 bytes leftover after parsing attributes in process `syz.2.688'. [ 181.532818][ T6992] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 181.539204][ T6992] tipc: Enabled bearer , priority 10 [ 182.814714][ T4679] tipc: Node number set to 2130706433 [ 182.910372][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.189954][ T7028] netlink: 'syz.0.698': attribute type 11 has an invalid length. [ 183.190429][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 183.192714][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 183.212055][ T7027] netlink: 'syz.3.697': attribute type 10 has an invalid length. [ 183.213559][ T7027] bridge0: port 3(team0) entered blocking state [ 183.214700][ T7027] bridge0: port 3(team0) entered disabled state [ 183.216503][ T7027] device team0 entered promiscuous mode [ 183.217442][ T7027] device team_slave_0 entered promiscuous mode [ 183.222917][ T7027] device team_slave_1 entered promiscuous mode [ 183.224506][ T7027] bridge0: port 3(team0) entered blocking state [ 183.225725][ T7027] bridge0: port 3(team0) entered forwarding state [ 183.372532][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.667386][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.039048][ T3899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.384653][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.385918][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.387801][ T7040] device bridge_slave_0 left promiscuous mode [ 184.406445][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.533872][ T7040] device bridge_slave_1 left promiscuous mode [ 184.534983][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.877699][ T7040] bond0: (slave bond_slave_0): Releasing backup interface [ 184.915035][ T7040] bond0: (slave bond_slave_1): Releasing backup interface [ 184.975009][ T7040] team0: Port device team_slave_0 removed [ 184.982877][ T7040] team0: Port device team_slave_1 removed [ 184.984494][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.985798][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.987791][ T7040] bond1: (slave batadv_slave_1): Releasing active interface [ 185.038769][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.049855][ T7040] device veth3 left promiscuous mode [ 185.051109][ T7040] bridge1: port 1(veth3) entered disabled state [ 185.099334][ T7040] device veth5 left promiscuous mode [ 185.101400][ T7040] bridge1: port 2(veth5) entered disabled state [ 185.140597][ T7040] bond2: (slave veth7): Releasing active interface [ 185.141825][ T7040] bond2: (slave veth7): the permanent HWaddr of slave - 9a:ea:75:62:80:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 185.192946][ T7040] bond2: (slave gretap1): Releasing active interface [ 185.233714][ T7040] bond3: (slave bridge4): Releasing backup interface [ 185.234933][ T7040] device bridge4 left promiscuous mode [ 185.306356][ T7040] team0: Port device bond4 removed [ 185.308851][ T7041] device geneve2 entered promiscuous mode [ 185.378135][ T7048] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 185.396499][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.400782][ T7065] loop0: detected capacity change from 0 to 256 [ 185.402414][ T7048] bond0: (slave wlan1): Opening slave failed [ 185.417560][ T7065] exFAT-fs (loop0): invalid fs_name [ 185.418393][ T7065] exFAT-fs (loop0): failed to read boot sector [ 185.434321][ T7065] exFAT-fs (loop0): failed to recognize exfat type [ 186.287342][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.693526][ T7086] binder: 7080:7086 ioctl c00c620f 0 returned -14 [ 186.719732][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.721439][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.123239][ T7094] loop0: detected capacity change from 0 to 2048 [ 187.192274][ T7094] Alternate GPT is invalid, using primary GPT. [ 187.194233][ T7094] loop0: p2 p3 p7 [ 187.337532][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 187.338085][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 187.340876][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 187.360071][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.361412][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.362868][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.655750][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.847840][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.265443][ T7134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.741856][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.744117][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.745768][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.747306][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.048746][ T7145] netlink: 165 bytes leftover after parsing attributes in process `syz.4.729'. [ 191.726379][ T7156] device syzkaller0 entered promiscuous mode [ 192.060055][ T4679] net_ratelimit: 227 callbacks suppressed [ 192.060069][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.113730][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 193.340313][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.499043][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.560105][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.634434][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.715802][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 196.048633][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 196.434680][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.437679][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.549015][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 196.628473][ T7220] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.638488][ T7220] bond5: (slave bond6): Enslaving as an active interface with an up link [ 196.639305][ T3899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.647453][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 196.914657][ T7226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.603043][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 197.679129][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.753462][ T3899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.997685][ T7247] loop2: detected capacity change from 0 to 40427 [ 198.999509][ T7247] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 199.000794][ T7247] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 199.003131][ T7247] F2FS-fs (loop2): invalid crc value [ 199.021040][ T7247] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 199.759718][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.808970][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.932189][ T7247] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.933376][ T7247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.049544][ T7284] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 200.799918][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.149922][ T7284] bridge0: port 3(team0) entered disabled state [ 201.154312][ T7284] device team0 left promiscuous mode [ 201.155672][ T7284] device team_slave_0 left promiscuous mode [ 201.160023][ T7284] device team_slave_1 left promiscuous mode [ 201.162987][ T7284] bridge0: port 3(team0) entered disabled state [ 201.431550][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.433634][ T7284] bond0: (slave team0): Enslaving as an active interface with an up link [ 201.511589][ T7295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.517082][ T7301] device bond_slave_0 entered promiscuous mode [ 201.518122][ T7301] device bond_slave_1 entered promiscuous mode [ 201.519194][ T7301] device wlan1 entered promiscuous mode [ 201.521621][ T7301] device team_slave_0 entered promiscuous mode [ 201.522511][ T7301] device team_slave_1 entered promiscuous mode [ 201.524598][ T7301] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.528402][ T7301] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 201.530316][ T7306] tipc: Enabling of bearer rejected, failed to enable media [ 201.671101][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 201.838975][ T4682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.842444][ T5528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.846002][ T4682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.848540][ T4682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.904646][ T7321] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 201.906466][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.907693][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.924233][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.925438][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.927787][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.928905][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.933482][ T7321] device bridge0 entered promiscuous mode [ 201.934896][ T7321] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 201.936438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 201.963352][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 201.964952][ T7321] device bridge_slave_1 left promiscuous mode [ 201.966079][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.029400][ T7321] device bridge_slave_0 left promiscuous mode [ 202.030500][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.473410][ T7321] bond0: (slave bridge0): Releasing backup interface [ 203.046672][ T4682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.067828][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.511325][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 203.516848][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.783'. [ 203.518244][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 203.523904][ T7342] netlink: 'syz.4.783': attribute type 10 has an invalid length. [ 203.528864][ T7342] bridge0: port 1(team0) entered blocking state [ 203.529943][ T7342] bridge0: port 1(team0) entered disabled state [ 205.159956][ T4682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.230839][ T7363] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 205.232294][ T7363] tipc: Resetting bearer [ 205.244493][ T7363] tipc: Resetting bearer [ 205.246020][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.247957][ T7363] bond0: (slave team0): Enslaving as an active interface with an up link [ 205.274721][ T7363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.292944][ T7363] device bond_slave_0 entered promiscuous mode [ 205.293979][ T7363] device bond_slave_1 entered promiscuous mode [ 205.294833][ T7363] device wlan1 entered promiscuous mode [ 205.295662][ T7363] device team_slave_0 entered promiscuous mode [ 205.296640][ T7363] device team_slave_1 entered promiscuous mode [ 205.297697][ T7363] device vxlan0 entered promiscuous mode [ 205.301602][ T7363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.305157][ T7363] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 205.397050][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 205.990810][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.081175][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.095056][ T7383] loop0: detected capacity change from 0 to 256 [ 206.272297][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.754028][ T7388] loop3: detected capacity change from 0 to 4096 [ 207.412749][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.481662][ T7388] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 207.547722][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 207.569176][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 207.578357][ T7397] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 207.584084][ T7397] bond0: (slave team0): Releasing backup interface [ 207.629353][ T7397] device team_slave_0 left promiscuous mode [ 207.630538][ T7397] device team_slave_1 left promiscuous mode [ 207.631704][ T7397] device vxlan0 left promiscuous mode [ 207.632754][ T7397] tipc: Resetting bearer [ 207.639568][ T7397] tipc: Resetting bearer [ 207.644088][ T7397] bridge0: port 3(team0) entered blocking state [ 207.645085][ T7397] bridge0: port 3(team0) entered disabled state [ 207.647001][ T7397] device team0 entered promiscuous mode [ 207.647752][ T7397] device team_slave_0 entered promiscuous mode [ 207.811564][ T7412] MPTCP: kernel_bind error, err=-99 [ 208.284302][ T7397] device team_slave_1 entered promiscuous mode [ 208.327829][ T7397] device vxlan0 entered promiscuous mode [ 208.331036][ T7401] device vlan2 entered promiscuous mode [ 208.474801][ T7421] tipc: Enabled bearer , priority 0 [ 208.476349][ T7421] device syzkaller0 entered promiscuous mode [ 208.481619][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.492132][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 208.494299][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 208.843380][ T7423] tipc: Resetting bearer [ 208.853062][ T7418] tipc: Resetting bearer [ 208.969351][ T7418] tipc: Disabling bearer [ 209.052351][ T7429] loop0: detected capacity change from 0 to 128 [ 209.119362][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.816611][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.132409][ T4320] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 210.417422][ T7458] device geneve3 entered promiscuous mode [ 210.673543][ T7460] loop2: detected capacity change from 0 to 128 [ 210.884068][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.226762][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'. [ 211.228254][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 211.298912][ T7470] loop3: detected capacity change from 0 to 256 [ 212.134476][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.169210][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.257717][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.271950][ T7468] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 213.314984][ T7468] bond0: (slave team0): Releasing backup interface [ 213.351522][ T7468] device team_slave_0 left promiscuous mode [ 213.352588][ T7468] device team_slave_1 left promiscuous mode [ 213.360008][ T7468] bridge0: port 3(team0) entered blocking state [ 213.361043][ T7468] bridge0: port 3(team0) entered disabled state [ 213.363124][ T7468] device team0 entered promiscuous mode [ 213.364006][ T7468] device team_slave_0 entered promiscuous mode [ 213.365099][ T7468] device team_slave_1 entered promiscuous mode [ 213.366091][ T7468] device bond1 entered promiscuous mode [ 214.210736][ T7491] loop0: detected capacity change from 0 to 512 [ 214.475982][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.481179][ T7491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.711755][ T7491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.722390][ T7491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.819: bg 0: block 248: padding at end of block bitmap is not set [ 214.727938][ T7491] __quota_error: 63 callbacks suppressed [ 214.727958][ T7491] Quota error (device loop0): write_blk: dquota write failed [ 214.730327][ T7491] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 214.732580][ T7491] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.819: Failed to acquire dquot type 1 [ 214.740833][ T7491] EXT4-fs (loop0): 1 truncate cleaned up [ 214.745830][ T7491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 215.537206][ T7499] fuse: Bad value for 'fd' [ 216.144846][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.146288][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.147562][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.162206][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 217.124674][ T7527] device geneve2 entered promiscuous mode [ 217.942102][ T7528] loop2: detected capacity change from 0 to 512 [ 217.943946][ T7528] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.878163][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.468884][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.480665][ T7526] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 219.523807][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.525810][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.549305][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.886589][ T7534] netlink: 'syz.0.839': attribute type 16 has an invalid length. [ 219.887921][ T7534] netlink: 'syz.0.839': attribute type 17 has an invalid length. [ 219.895381][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 219.902601][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.903844][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.907548][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.909398][ T7534] tipc: Resetting bearer [ 219.910756][ T7534] tipc: Resetting bearer [ 219.919339][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.960922][ T7534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.828979][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.388609][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.418296][ T7561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.651915][ T7572] loop2: detected capacity change from 0 to 4096 [ 221.714444][ T7572] ntfs3: loop2: Failed to load $MFT. [ 221.773647][ T4699] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.303523][ T7573] loop3: detected capacity change from 0 to 32768 [ 222.752828][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.754139][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.256188][ T4333] Bluetooth: Unexpected continuation frame (len 16) [ 224.300375][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.484340][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.504648][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 226.630558][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.649287][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.861433][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.912514][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.920002][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.947815][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.418856][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.420524][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.532345][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.534054][ T4594] bridge0: port 3(team0) entered blocking state [ 230.535134][ T4594] bridge0: port 3(team0) entered forwarding state [ 230.978597][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.041326][ T7694] loop2: detected capacity change from 0 to 32768 [ 231.046217][ T7694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.876 (7694) [ 231.070329][ T7694] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.071906][ T7694] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 231.073377][ T7694] BTRFS info (device loop2): setting nodatacow, compression disabled [ 231.074695][ T7694] BTRFS info (device loop2): max_inline at 0 [ 231.075578][ T7694] BTRFS info (device loop2): using free space tree [ 231.571668][ T7721] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.601913][ T7721] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 232.050733][ T7733] loop0: detected capacity change from 0 to 1764 [ 232.082383][ T4678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.172332][ T4699] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.223178][ T4330] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.113978][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.117286][ T7751] device syzkaller0 entered promiscuous mode [ 233.738897][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.806275][ T7762] loop0: detected capacity change from 0 to 2048 [ 234.290307][ T7762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.421750][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.517259][ T7785] tipc: Enabling of bearer rejected, failed to enable media [ 235.587747][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 235.925059][ T7795] device syzkaller0 entered promiscuous mode [ 236.120459][ T4333] Bluetooth: Unexpected continuation frame (len 16) [ 236.159052][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.479523][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.658318][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.802257][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 238.736848][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.758389][ T7852] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 238.770796][ T7856] bond7: (slave gretap2): making interface the new active one [ 238.773206][ T7856] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 238.774640][ T7855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 239.699078][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.718458][ T7852] device macvlan2 entered promiscuous mode [ 239.736316][ T7852] device bond7 entered promiscuous mode [ 239.737221][ T7852] device gretap2 entered promiscuous mode [ 239.740809][ T7852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.742561][ T7852] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 239.745478][ T7852] device bond7 left promiscuous mode [ 239.746276][ T7852] device gretap2 left promiscuous mode [ 239.825912][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.847632][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.132544][ T7874] loop3: detected capacity change from 0 to 2048 [ 241.918865][ T4679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.942280][ T7874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.719592][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.971105][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.002663][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.219912][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 245.928092][ T7942] device syzkaller0 entered promiscuous mode [ 246.015605][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.167070][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.168485][ T4688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.602631][ T7956] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 247.607143][ T7971] loop2: detected capacity change from 0 to 1024 [ 247.922689][ T7959] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.924760][ T7959] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 247.926454][ T7959] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 248.108623][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 248.133857][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 248.529942][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.799271][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.800402][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.130722][ T7994] tipc: Enabling of bearer rejected, failed to enable media [ 249.301708][ T8001] loop3: detected capacity change from 0 to 512 [ 249.314089][ T8001] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.659834][ T8000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.734280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.239771][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.540664][ T8001] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 251.374552][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.376155][ T4402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.414924][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.630650][ T8012] qnx4: no qnx4 filesystem (no root dir). [ 252.641940][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.678433][ T8025] loop3: detected capacity change from 0 to 2048 [ 253.335243][ T8025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.352005][ T8030] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 253.353780][ T8030] Mem abort info: [ 253.354334][ T8030] ESR = 0x0000000086000006 [ 253.355050][ T8030] EC = 0x21: IABT (current EL), IL = 32 bits [ 253.355997][ T8030] SET = 0, FnV = 0 [ 253.356698][ T8030] EA = 0, S1PTW = 0 [ 253.357301][ T8030] FSC = 0x06: level 2 translation fault [ 253.358160][ T8030] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010b281000 [ 253.359318][ T8030] [0000000000000000] pgd=080000013d715003, p4d=080000013d715003, pud=0800000118ae2003, pmd=0000000000000000 [ 253.361116][ T8030] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 253.362100][ T8030] Modules linked in: [ 253.362672][ T8030] CPU: 0 PID: 8030 Comm: syz.2.952 Not tainted syzkaller #0 [ 253.363685][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 253.365206][ T8030] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 253.366298][ T8030] pc : 0x0 [ 253.366770][ T8030] lr : bond_xdp_xmit+0x27c/0x45c [ 253.367534][ T8030] sp : ffff8000222b7020 [ 253.368169][ T8030] x29: ffff8000222b70e0 x28: 000000000000000f x27: ffff8000222b7048 [ 253.369363][ T8030] x26: dfff800000000000 x25: ffff800012b67cd8 x24: ffff0000dbab8000 [ 253.370598][ T8030] x23: fffffbffeff98df0 x22: ffff0000d9988000 x21: fffffbffeff98df0 [ 253.371811][ T8030] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 253.373080][ T8030] x17: 0000000000000000 x16: ffff8000082d10fc x15: 0000000000000002 [ 253.374240][ T8030] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 253.375484][ T8030] x11: 0000000000004cc1 x10: ffff8000298ed000 x9 : ffff8000222b7080 [ 253.376655][ T8030] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 253.377803][ T8030] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 253.378978][ T8030] x2 : ffff8000222b70a0 x1 : 0000000000000001 x0 : ffff0000dbab8000 [ 253.380071][ T8030] Call trace: [ 253.380549][ T8030] 0x0 [ 253.380909][ T8030] bq_xmit_all+0xab0/0xf10 [ 253.381525][ T8030] bq_enqueue+0x288/0x30c [ 253.382215][ T8030] dev_map_enqueue_multi+0x9c8/0xd8c [ 253.382979][ T8030] xdp_do_redirect_frame+0x3e4/0x578 [ 253.383777][ T8030] bpf_test_run_xdp_live+0x840/0x1544 [ 253.384536][ T8030] bpf_prog_test_run_xdp+0x560/0xb88 [ 253.385231][ T8030] bpf_prog_test_run+0x2dc/0x364 [ 253.385962][ T8030] __sys_bpf+0x4ec/0x634 [ 253.386627][ T8030] __arm64_sys_bpf+0x80/0x98 [ 253.387334][ T8030] invoke_syscall+0x98/0x2bc [ 253.387981][ T8030] el0_svc_common+0x138/0x258 [ 253.388663][ T8030] do_el0_svc+0x58/0x13c [ 253.389342][ T8030] el0_svc+0x58/0x138 [ 253.389904][ T8030] el0t_64_sync_handler+0x84/0xf0 [ 253.390666][ T8030] el0t_64_sync+0x18c/0x190 [ 253.391324][ T8030] Code: bad PC value [ 253.391856][ T8030] ---[ end trace 0000000000000000 ]--- [ 253.728961][ T8030] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 253.730082][ T8030] SMP: stopping secondary CPUs [ 253.730824][ T8030] Kernel Offset: disabled [ 253.731482][ T8030] CPU features: 0x080000,000f0097,a65bfea7 [ 253.732340][ T8030] Memory Limit: none [ 254.023192][ T8030] Rebooting in 86400 seconds..