last executing test programs: 4.542075445s ago: executing program 2 (id=1569): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x68d, &(0x7f0000000180)={0x0, 0x564e, 0x200, 0x2, 0x2c8}, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_setup(0x6db4, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x304, 0x0, r3}, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) ioctl$EXT4_IOC_GETSTATE(r4, 0x4008af10, &(0x7f0000000080)) 3.64007799s ago: executing program 4 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x1d48, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) 3.62214301s ago: executing program 2 (id=1579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000180)={'fscrypt:', @auto=[0x36, 0x33, 0x35, 0x38, 0x33, 0x37, 0x66, 0x34, 0x66, 0x30, 0x38, 0x34, 0x64, 0x62, 0x63, 0x61]}, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x39, 0x1a, r5, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, 0x0, 0x0}, 0x20) 2.797272842s ago: executing program 4 (id=1586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r0, 0x1) 2.756751903s ago: executing program 4 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xc, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x800, 0x3, 0x10e}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}}, 0xfffffffd, 0x10f, 0x2, 0x7, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2.708418486s ago: executing program 3 (id=1589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x68d, &(0x7f0000000180)={0x0, 0x564e, 0x200, 0x2, 0x2c8}, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_setup(0x6db4, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x304, 0x0, r3}, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) ioctl$EXT4_IOC_GETSTATE(r4, 0x4008af10, &(0x7f0000000080)) 2.506850106s ago: executing program 2 (id=1590): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x1b13, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.352106973s ago: executing program 0 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB=',\nN'], 0x6a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x6400480c) 1.880856547s ago: executing program 4 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x1d48, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) 1.764896222s ago: executing program 3 (id=1597): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000580)=""/145, 0x91) 1.446814429s ago: executing program 0 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x9, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x80000000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0xb, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x10001, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x90000001, 0x1, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x800, 0xd, 0x400, 0x0, 0xada, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2003, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0xb, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x81, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x40, 0x6, 0xd, 0x0, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x2, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0xfffffffe, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0xfffc, 0x8, 0x9, 0x2, 0x6, 0x7, 0xb28, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.383947032s ago: executing program 2 (id=1599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.383645432s ago: executing program 3 (id=1600): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000180)={'fscrypt:', @auto=[0x36, 0x33, 0x35, 0x38, 0x33, 0x37, 0x66, 0x34, 0x66, 0x30, 0x38, 0x34, 0x64, 0x62, 0x63, 0x61]}, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x39, 0x1a, r5, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, 0x0, 0x0}, 0x20) 1.280101457s ago: executing program 2 (id=1601): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x38, r4, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, {0x10, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x38}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, 0x0, 0x2404c085) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 1.200224491s ago: executing program 1 (id=1602): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x5}, 0x28) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x1000000000) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.062088158s ago: executing program 0 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.061787138s ago: executing program 1 (id=1604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x54, 0x0, &(0x7f0000000500)=[@acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000002c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.061102218s ago: executing program 1 (id=1605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x10, 0x0, &(0x7f0000000640)=[@clear_death], 0x0, 0x0, 0x0}) 995.005421ms ago: executing program 4 (id=1606): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x800, 0x3, 0x10e}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}}, 0xfffffffd, 0x10f, 0x2, 0x7, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 991.192641ms ago: executing program 1 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x68d, &(0x7f0000000180)={0x0, 0x564e, 0x200, 0x2, 0x2c8}, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_setup(0x6db4, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x304, 0x0, r3}, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) ioctl$EXT4_IOC_GETSTATE(r4, 0x4008af10, &(0x7f0000000080)) 408.28818ms ago: executing program 2 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB=',\nN'], 0x6a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x6400480c) 352.146283ms ago: executing program 0 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 310.895735ms ago: executing program 3 (id=1610): syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) 275.486197ms ago: executing program 3 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) 204.13903ms ago: executing program 0 (id=1612): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}) 203.90941ms ago: executing program 3 (id=1613): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 203.743811ms ago: executing program 0 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4012}, 0x4880) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 100.387725ms ago: executing program 1 (id=1615): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x5}, 0x28) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x1000000000) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 99.178056ms ago: executing program 4 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x1d48, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) 0s ago: executing program 1 (id=1617): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0xfffffffe}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) kernel console output (not intermixed with test programs): 'net' [ 24.378320][ T4302] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.626451][ T4302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.981209][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.986514][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.988553][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.990006][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.991555][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.994596][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.996308][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.997894][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.997986][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.999404][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.001537][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.001732][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.004347][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.004495][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.007244][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.007517][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.008631][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.010493][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.015514][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.016886][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.017521][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.021877][ T4324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.028728][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.030236][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.031498][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.035692][ T4322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.037364][ T4322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.053163][ T4322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.058320][ T4322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.060036][ T4322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.134032][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 26.191122][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 26.201337][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.202682][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.204243][ T4326] device bridge_slave_0 entered promiscuous mode [ 26.218519][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.219840][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.221320][ T4326] device bridge_slave_1 entered promiscuous mode [ 26.223188][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 26.232596][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.233846][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.235804][ T4331] device bridge_slave_0 entered promiscuous mode [ 26.238364][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.239620][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.241226][ T4331] device bridge_slave_1 entered promiscuous mode [ 26.254915][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.261111][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.274860][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.283341][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.296504][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.297614][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.299120][ T4321] device bridge_slave_0 entered promiscuous mode [ 26.301527][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.311030][ T4326] team0: Port device team_slave_0 added [ 26.321756][ T4331] team0: Port device team_slave_0 added [ 26.323542][ T4331] team0: Port device team_slave_1 added [ 26.327776][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.328898][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.330525][ T4321] device bridge_slave_1 entered promiscuous mode [ 26.333797][ T4326] team0: Port device team_slave_1 added [ 26.340825][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342004][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.343438][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.352020][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 26.354254][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.355819][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.357259][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.360982][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.362141][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.367894][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.376146][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.377178][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.380780][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.383509][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.386819][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.391306][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.392431][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.396851][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.402010][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.403142][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.408900][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.422081][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.423283][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.424828][ T4329] device bridge_slave_0 entered promiscuous mode [ 26.433142][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.436958][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.441559][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.442753][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.444295][ T4329] device bridge_slave_1 entered promiscuous mode [ 26.448586][ T4321] team0: Port device team_slave_0 added [ 26.486816][ T4326] device hsr_slave_0 entered promiscuous mode [ 26.535337][ T4326] device hsr_slave_1 entered promiscuous mode [ 26.580774][ T4321] team0: Port device team_slave_1 added [ 26.616432][ T4331] device hsr_slave_0 entered promiscuous mode [ 26.655361][ T4331] device hsr_slave_1 entered promiscuous mode [ 26.715304][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.716575][ T4331] Cannot create hsr debugfs directory [ 26.718405][ T4320] team0: Port device team_slave_0 added [ 26.720118][ T4320] team0: Port device team_slave_1 added [ 26.737883][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.741575][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.742657][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.749250][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.756829][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.758605][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.759715][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.763929][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.766369][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.767378][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.771230][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.773213][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.774338][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.778689][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.794200][ T4329] team0: Port device team_slave_0 added [ 26.796498][ T4329] team0: Port device team_slave_1 added [ 26.807821][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.809001][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.812786][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.815309][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.816472][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.820511][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.856268][ T4320] device hsr_slave_0 entered promiscuous mode [ 26.906067][ T4320] device hsr_slave_1 entered promiscuous mode [ 26.945173][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.946444][ T4320] Cannot create hsr debugfs directory [ 27.016362][ T4321] device hsr_slave_0 entered promiscuous mode [ 27.055378][ T4321] device hsr_slave_1 entered promiscuous mode [ 27.095255][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.096531][ T4321] Cannot create hsr debugfs directory [ 27.136384][ T4329] device hsr_slave_0 entered promiscuous mode [ 27.175397][ T4329] device hsr_slave_1 entered promiscuous mode [ 27.215169][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.216337][ T4329] Cannot create hsr debugfs directory [ 27.315026][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.356538][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.401446][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.436324][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.503464][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.542197][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.586311][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.629947][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.667242][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.716566][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.756418][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.797998][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.844112][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.862781][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.902480][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.948834][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.986123][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.025599][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 28.025603][ T4322] Bluetooth: hci4: command 0x0409 tx timeout [ 28.025712][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 28.029696][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.068362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.070913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.072703][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.105437][ T4322] Bluetooth: hci3: command 0x0409 tx timeout [ 28.105554][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 28.112067][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.147757][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.157541][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.159175][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.160834][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.162058][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.163743][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.191059][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.199451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.201209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.202632][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.203764][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.212651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.225021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.232255][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.234739][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.239455][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.244486][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.247818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.249520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.260130][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.261746][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.272450][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.274185][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.282425][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.292109][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.293711][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.298006][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.303947][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.307521][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.309774][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.311323][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.321764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.323381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.324902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.326178][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.338441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.340163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.342092][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.343383][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.352889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.354996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.357183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.365598][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.366762][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.368275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.369863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.376397][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.377546][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.378976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.380552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.382567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.384300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.386048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.387700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.389372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.390993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.392528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.393962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.403983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.405936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.410052][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.415059][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.417634][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.419603][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.423500][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.428347][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.429818][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.432019][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.434282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.436643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.438641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.440194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.441315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.451368][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.453118][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.457319][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.459119][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.460707][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.462204][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.463829][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.467329][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.476457][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.477992][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.479951][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.481505][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.482557][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.484610][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.489764][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.491276][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.492768][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.494324][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.499813][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.511002][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.519815][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.521394][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.522788][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.528080][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.529775][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.531885][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.533517][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.535060][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.538202][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.539374][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.540746][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.542808][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.544992][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.549724][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.551271][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.552486][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.553924][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.556432][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.558211][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.559973][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.561599][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.563290][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.564842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.571236][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.573065][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.574753][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.585100][ T4331] device veth0_vlan entered promiscuous mode [ 28.592485][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.598229][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.600231][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.601983][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.603535][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.605958][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.607661][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.608966][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.610258][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.611902][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.614934][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.617683][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.619257][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.644466][ T4320] device veth0_vlan entered promiscuous mode [ 28.647378][ T4331] device veth1_vlan entered promiscuous mode [ 28.650263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.651855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.653378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.654811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.658053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.659731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.661211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.674174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.677360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.678917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.680511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.682008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.683991][ T4320] device veth1_vlan entered promiscuous mode [ 28.688374][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.690040][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.691375][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.693662][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.700738][ T4331] device veth0_macvtap entered promiscuous mode [ 28.703324][ T4331] device veth1_macvtap entered promiscuous mode [ 28.710643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.712413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.714063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.716424][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.718803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.721532][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.738882][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.740546][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.744535][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.746661][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.751165][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.761749][ T4320] device veth0_macvtap entered promiscuous mode [ 28.764024][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.765713][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.767185][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.772968][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.774912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.777237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.783792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.785511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.787673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.789130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.793860][ T4320] device veth1_macvtap entered promiscuous mode [ 28.798238][ T4326] device veth0_vlan entered promiscuous mode [ 28.801464][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.804743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.806610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.808342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.814542][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.818394][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.819685][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.821169][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.824816][ T4326] device veth1_vlan entered promiscuous mode [ 28.840004][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.841638][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.843833][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.845000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.847079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.848537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.850043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.861040][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.862747][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.866164][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.870454][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.872269][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.879847][ T4326] device veth0_macvtap entered promiscuous mode [ 28.884981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.887190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.888796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.890003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.891817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.900711][ T4326] device veth1_macvtap entered promiscuous mode [ 28.911958][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.913437][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.914736][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.919285][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.929605][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.946643][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.948386][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.949901][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.951556][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.953854][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.959522][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.961143][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.962705][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.966169][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.967859][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.973927][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.977485][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.982979][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.984499][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.996353][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.998023][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.999535][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.001059][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.003178][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.004498][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.009238][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.011001][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.034174][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.036795][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.038343][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.039878][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.041435][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.042776][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.044288][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.049818][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.054131][ T4329] device veth0_vlan entered promiscuous mode [ 29.057516][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.058801][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.060320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.062608][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.063982][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.068053][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.069379][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.078418][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.079427][ T4321] device veth0_vlan entered promiscuous mode [ 29.079733][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.082918][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.093619][ T4329] device veth1_vlan entered promiscuous mode [ 29.097789][ T4321] device veth1_vlan entered promiscuous mode [ 29.150224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.151971][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.152497][ T4403] syz.2.3 (4403): attempted to duplicate a private mapping with mremap. This is not supported. [ 29.160759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.162419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.164054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.169889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.171329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.244844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.247138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.253669][ T4321] device veth0_macvtap entered promiscuous mode [ 29.264016][ T4321] device veth1_macvtap entered promiscuous mode [ 29.265822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.267458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.268903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.270338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.273144][ T4329] device veth0_macvtap entered promiscuous mode [ 29.277818][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.367191][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.569026][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.570716][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.604377][ T4329] device veth1_macvtap entered promiscuous mode [ 29.612405][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.614003][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.622931][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.624704][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.630483][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.632358][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.635760][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.641009][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.642873][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.644548][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.718858][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.720067][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.725610][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.730375][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.732008][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.733687][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.735529][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.737152][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.738722][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.740983][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.743655][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.745694][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.752052][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.756077][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.757854][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.759864][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.761397][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.763006][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.764542][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.869817][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.087128][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.105978][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 30.107047][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 30.107941][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 30.122269][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.123852][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.125247][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.126512][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.131566][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.133351][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.223011][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 30.224451][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 30.244043][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.246276][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.247736][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.249208][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.250661][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.252082][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.253523][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.256212][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.258855][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.261397][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.263100][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.689715][ T4421] loop0: detected capacity change from 0 to 256 [ 31.339970][ T4429] loop3: detected capacity change from 0 to 4096 [ 31.351797][ T4429] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 31.442580][ T4429] ntfs3: loop3: ino=5, "/" directory corrupted [ 31.695155][ T4435] binder: 4432:4435 ERROR: BC_REGISTER_LOOPER called without request [ 31.696691][ T4435] binder: 4432:4435 BC_INCREFS_DONE u0000000000000002 no match [ 31.698072][ T4435] binder: 4432:4435 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 31.699411][ T4435] binder: 4435 RLIMIT_NICE not set [ 31.707603][ T4435] Zero length message leads to an empty skb [ 31.971671][ T4435] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 31.973106][ T4435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 31.974572][ T4435] device batadv0 entered promiscuous mode [ 31.975901][ T4435] bridge0: port 3(batadv0) entered blocking state [ 31.976974][ T4435] bridge0: port 3(batadv0) entered disabled state [ 31.978813][ T4435] bridge0: port 3(batadv0) entered blocking state [ 31.979957][ T4435] bridge0: port 3(batadv0) entered forwarding state [ 31.997178][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004735][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.012944][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.015444][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.064618][ T4431] loop2: detected capacity change from 0 to 32768 [ 32.109367][ T4431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (4431) [ 32.111730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.113080][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.119265][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.132163][ T4431] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 32.134531][ T4431] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 32.136175][ T4431] BTRFS info (device loop2): setting nodatasum [ 32.137214][ T4431] BTRFS info (device loop2): force zlib compression, level 3 [ 32.138593][ T4431] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 32.140211][ T4431] BTRFS info (device loop2): use lzo compression, level 0 [ 32.141358][ T4431] BTRFS info (device loop2): turning on flush-on-commit [ 32.142494][ T4431] BTRFS info (device loop2): enabling auto defrag [ 32.146749][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.148215][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.176099][ T4431] BTRFS info (device loop2): max_inline at 4096 [ 32.185951][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 32.185975][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 32.188606][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 32.266317][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 32.282320][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 32.514287][ T4431] BTRFS info (device loop2): using free space tree [ 32.517409][ T4436] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 32.518797][ T4436] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 32.522901][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.524424][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.527675][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.529694][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.533834][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.538749][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.540547][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.542177][ T4447] loop3: detected capacity change from 0 to 24 [ 32.543633][ T4447] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 32.555279][ T4447] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 32.700007][ T4463] binder: 4455:4463 ioctl c0306201 0 returned -14 [ 32.701695][ T4463] binder: 4455:4463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.712103][ T4463] binder: 4463 RLIMIT_NICE not set [ 32.720792][ T4431] BTRFS info (device loop2): enabling ssd optimizations [ 33.309241][ T4484] loop1: detected capacity change from 0 to 512 [ 33.341733][ T4484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.343969][ T4484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.444326][ T4484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 33.445936][ T4484] System zones: 1-12 [ 33.456000][ T4484] EXT4-fs (loop1): 1 truncate cleaned up [ 33.456906][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.664097][ T4495] loop0: detected capacity change from 0 to 4096 [ 33.666863][ T4495] ntfs: (device loop0): parse_options(): Unrecognized mount option umask00000000(º€½è±ß000000000002. [ 33.744655][ T4331] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 33.763682][ T4312] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.831007][ T4500] virtio-fs: tag not found [ 34.112878][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 34.267459][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 34.268665][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 34.269594][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 34.305759][ T4511] loop0: detected capacity change from 0 to 64 [ 34.345807][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 34.345963][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 35.530447][ T4518] loop4: detected capacity change from 0 to 64 [ 35.540529][ T4520] loop2: detected capacity change from 0 to 256 [ 35.551467][ T4520] ======================================================= [ 35.551467][ T4520] WARNING: The mand mount option has been deprecated and [ 35.551467][ T4520] and is ignored by this kernel. Remove the mand [ 35.551467][ T4520] option from the mount to silence this warning. [ 35.551467][ T4520] ======================================================= [ 35.628839][ T4520] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 36.118461][ T4538] binder: 4532:4538 ERROR: BC_REGISTER_LOOPER called without request [ 36.119847][ T4538] binder: 4532:4538 BC_INCREFS_DONE u0000000000000002 no match [ 36.121174][ T4538] binder: 4532:4538 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 36.122332][ T4538] binder: 4538 RLIMIT_NICE not set [ 36.129439][ T4538] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 36.130721][ T4538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31'. [ 36.132748][ T4538] device batadv0 entered promiscuous mode [ 36.165524][ T4538] bridge0: port 3(batadv0) entered blocking state [ 36.168154][ T4538] bridge0: port 3(batadv0) entered disabled state [ 36.287765][ T4538] bridge0: port 3(batadv0) entered blocking state [ 36.288815][ T4538] bridge0: port 3(batadv0) entered forwarding state [ 36.875692][ T55] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 36.877254][ T55] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 37.010669][ T4531] loop0: detected capacity change from 0 to 32768 [ 37.013356][ T4531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.29 (4531) [ 37.980329][ T4555] hub 9-0:1.0: USB hub found [ 37.981758][ T4555] hub 9-0:1.0: 8 ports detected [ 38.382458][ T4531] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.384108][ T4531] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 38.393102][ T4531] BTRFS info (device loop0): force clearing of disk cache [ 38.394420][ T4531] BTRFS info (device loop0): force zlib compression, level 3 [ 38.407572][ T4531] BTRFS info (device loop0): enabling auto defrag [ 38.408649][ T4531] BTRFS info (device loop0): disabling free space tree [ 38.409769][ T4531] BTRFS info (device loop0): enabling disk space caching [ 38.410970][ T4531] BTRFS info (device loop0): disk space caching is enabled [ 38.520102][ T4570] netlink: 'syz.4.36': attribute type 12 has an invalid length. [ 38.983694][ T4563] binder: 4560:4563 tried to acquire reference to desc 0, got 1 instead [ 38.999583][ T4563] binder_alloc: 4560: binder_alloc_buf, no vma [ 39.001262][ T4563] binder: cannot allocate buffer: vma cleared, target dead or dying [ 39.001311][ T4563] binder: 4560:4563 transaction call to 4560:0 failed 5/29189/-3, size 0-0 line 3230 [ 39.055473][ T4499] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.685638][ T4531] BTRFS error (device loop0): open_ctree failed: -12 [ 40.523754][ T4308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4308) [ 40.709231][ T4615] syz.4.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.719773][ T4615] ubi31: attaching mtd0 [ 40.723348][ T4615] ubi31: scanning is finished [ 40.724182][ T4615] ubi31: empty MTD device detected [ 40.940362][ T4591] loop2: detected capacity change from 0 to 32768 [ 40.945758][ T4615] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 40.947054][ T4615] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 40.948247][ T4615] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 40.949375][ T4615] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 40.950571][ T4615] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 40.951669][ T4615] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 40.952895][ T4615] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3572676122 [ 40.954327][ T4615] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 40.966479][ T4617] ubi31: background thread "ubi_bgt31d" started, PID 4617 [ 40.970338][ T4618] loop1: detected capacity change from 0 to 2048 [ 40.971832][ T4618] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.049367][ T4566] loop3: detected capacity change from 0 to 40427 [ 41.063456][ T4591] JBD2: Ignoring recovery information on journal [ 41.070312][ T4566] F2FS-fs (loop3): invalid crc value [ 41.241632][ T4625] Bluetooth: MGMT ver 1.22 [ 41.407976][ T4566] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 41.452771][ T4618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.471841][ T4591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 41.493919][ T4628] loop4: detected capacity change from 0 to 128 [ 41.497958][ T4628] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 41.737977][ T4636] process 'syz.3.48' launched './file1' with NULL argv: empty string added [ 41.959047][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 42.316614][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 42.403023][ T4329] sysv_free_block: flc_count > flc_size [ 42.408466][ T4329] sysv_free_block: flc_count > flc_size [ 42.410590][ T4329] sysv_free_block: flc_count > flc_size [ 42.411820][ T4329] sysv_free_block: flc_count > flc_size [ 42.413049][ T4329] sysv_free_block: flc_count > flc_size [ 42.413986][ T4329] sysv_free_block: flc_count > flc_size [ 42.414576][ T4331] ocfs2: Unmounting device (7,2) on (node local) [ 42.415038][ T4329] sysv_free_block: flc_count > flc_size [ 42.416900][ T4329] sysv_free_block: flc_count > flc_size [ 42.417967][ T4329] sysv_free_block: flc_count > flc_size [ 42.421315][ T4329] sysv_free_block: flc_count > flc_size [ 42.423739][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 42.443191][ T4649] binder: 4648:4649 tried to acquire reference to desc 0, got 1 instead [ 42.445416][ T4649] binder_alloc: 4648: binder_alloc_buf, no vma [ 42.446470][ T4649] binder: cannot allocate buffer: vma cleared, target dead or dying [ 42.446510][ T4649] binder: 4648:4649 transaction call to 4648:0 failed 10/29189/-3, size 0-0 line 3230 [ 42.450096][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.363400][ T4662] netlink: 'syz.0.54': attribute type 12 has an invalid length. [ 43.430967][ T4668] loop1: detected capacity change from 0 to 64 [ 44.189901][ T4681] ubi: mtd0 is already attached to ubi31 [ 45.247737][ T4684] loop4: detected capacity change from 0 to 64 [ 46.020947][ T4700] loop2: detected capacity change from 0 to 2048 [ 46.026265][ T4700] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.077931][ T4700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.733936][ T4716] virtio-fs: tag not found [ 47.273818][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 48.275283][ T4728] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 48.529000][ T4735] loop0: detected capacity change from 0 to 64 [ 49.262080][ T4745] ubi: mtd0 is already attached to ubi31 [ 49.932161][ T4747] loop1: detected capacity change from 0 to 32768 [ 49.938719][ T4747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.76 (4747) [ 49.947574][ T4747] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.949591][ T4747] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 49.951355][ T4747] BTRFS info (device loop1): setting nodatasum [ 49.952478][ T4747] BTRFS info (device loop1): force zlib compression, level 3 [ 49.953716][ T4747] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 50.209055][ T4747] BTRFS info (device loop1): use lzo compression, level 0 [ 50.210334][ T4747] BTRFS info (device loop1): turning on flush-on-commit [ 50.211444][ T4747] BTRFS info (device loop1): enabling auto defrag [ 50.212643][ T4747] BTRFS info (device loop1): max_inline at 4096 [ 50.213671][ T4747] BTRFS info (device loop1): using free space tree [ 50.233304][ T4761] loop0: detected capacity change from 0 to 2048 [ 50.236482][ T4761] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.282319][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.355190][ T4747] BTRFS info (device loop1): enabling ssd optimizations [ 50.778897][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 51.279953][ T4791] binder: 4787:4791 ERROR: BC_REGISTER_LOOPER called without request [ 51.281280][ T4791] binder: 4787:4791 BC_INCREFS_DONE u0000000000000002 no match [ 51.282508][ T4791] binder: 4787:4791 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 51.283695][ T4791] binder: 4791 RLIMIT_NICE not set [ 51.285826][ T4791] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 51.287111][ T4791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.83'. [ 51.288463][ T4791] device batadv0 entered promiscuous mode [ 51.290955][ T4791] bridge0: port 3(batadv0) entered blocking state [ 51.292059][ T4791] bridge0: port 3(batadv0) entered disabled state [ 51.296292][ T4791] bridge0: port 3(batadv0) entered blocking state [ 51.297304][ T4791] bridge0: port 3(batadv0) entered forwarding state [ 51.681396][ T4487] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 51.682925][ T4487] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 51.889865][ T4801] virtio-fs: tag not found [ 53.097376][ T4808] loop3: detected capacity change from 0 to 128 [ 53.106923][ T4808] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 53.108527][ T4815] loop2: detected capacity change from 0 to 128 [ 53.112072][ T4815] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 53.763418][ T4320] sysv_free_block: flc_count > flc_size [ 53.770095][ T4320] sysv_free_block: flc_count > flc_size [ 53.780157][ T4320] sysv_free_block: flc_count > flc_size [ 53.781030][ T4320] sysv_free_block: flc_count > flc_size [ 53.782016][ T4320] sysv_free_block: flc_count > flc_size [ 53.801047][ T4321] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.802193][ T4320] sysv_free_block: flc_count > flc_size [ 53.808486][ T4331] sysv_free_block: flc_count > flc_size [ 53.809479][ T4331] sysv_free_block: flc_count > flc_size [ 53.810354][ T4331] sysv_free_block: flc_count > flc_size [ 53.814792][ T4320] sysv_free_block: flc_count > flc_size [ 53.815290][ T4331] sysv_free_block: flc_count > flc_size [ 53.817550][ T4331] sysv_free_block: flc_count > flc_size [ 53.817894][ T4320] sysv_free_block: flc_count > flc_size [ 53.818690][ T4331] sysv_free_block: flc_count > flc_size [ 53.820261][ T4331] sysv_free_block: flc_count > flc_size [ 53.821131][ T4331] sysv_free_block: flc_count > flc_size [ 53.824063][ T4320] sysv_free_block: flc_count > flc_size [ 53.824145][ T4331] sysv_free_block: flc_count > flc_size [ 53.826679][ T4331] sysv_free_block: flc_count > flc_size [ 53.827966][ T4331] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 53.834366][ T4320] sysv_free_block: flc_count > flc_size [ 53.841794][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 54.654461][ T4838] hub 9-0:1.0: USB hub found [ 54.656225][ T4838] hub 9-0:1.0: 8 ports detected [ 55.879636][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 56.276049][ T4866] virtio-fs: tag not found [ 56.602495][ T4867] binder: 4862:4867 ERROR: BC_REGISTER_LOOPER called without request [ 56.603976][ T4867] binder: 4862:4867 BC_INCREFS_DONE u0000000000000002 no match [ 56.605466][ T4867] binder: 4862:4867 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 56.606682][ T4867] binder: 4867 RLIMIT_NICE not set [ 56.608859][ T4867] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 56.610184][ T4867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.101'. [ 56.611790][ T4867] device batadv0 entered promiscuous mode [ 56.613192][ T4867] bridge0: port 3(batadv0) entered blocking state [ 56.614396][ T4867] bridge0: port 3(batadv0) entered disabled state [ 56.616183][ T4867] bridge0: port 3(batadv0) entered blocking state [ 56.617239][ T4867] bridge0: port 3(batadv0) entered forwarding state [ 57.021642][ T4487] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 57.023055][ T4487] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 57.039328][ T4873] loop1: detected capacity change from 0 to 128 [ 57.070398][ T4873] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 57.144170][ T4321] sysv_free_block: flc_count > flc_size [ 57.145302][ T4321] sysv_free_block: flc_count > flc_size [ 57.146115][ T4321] sysv_free_block: flc_count > flc_size [ 57.146967][ T4321] sysv_free_block: flc_count > flc_size [ 57.147839][ T4321] sysv_free_block: flc_count > flc_size [ 57.148813][ T4321] sysv_free_block: flc_count > flc_size [ 57.149661][ T4321] sysv_free_block: flc_count > flc_size [ 57.154027][ T4321] sysv_free_block: flc_count > flc_size [ 57.154950][ T4321] sysv_free_block: flc_count > flc_size [ 57.160540][ T4321] sysv_free_block: flc_count > flc_size [ 57.162220][ T4321] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 57.256105][ T4882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.117'. [ 57.558030][ T4879] loop0: detected capacity change from 0 to 32768 [ 57.568622][ T4879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.106 (4879) [ 57.594889][ T4879] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.600158][ T4879] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 57.601870][ T4879] BTRFS info (device loop0): setting nodatasum [ 57.602807][ T4879] BTRFS info (device loop0): force zlib compression, level 3 [ 57.603989][ T4879] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 57.610258][ T4879] BTRFS info (device loop0): use lzo compression, level 0 [ 57.612725][ T4879] BTRFS info (device loop0): turning on flush-on-commit [ 57.614523][ T4879] BTRFS info (device loop0): enabling auto defrag [ 57.616282][ T4879] BTRFS info (device loop0): max_inline at 4096 [ 57.617419][ T4879] BTRFS info (device loop0): using free space tree [ 58.010478][ T4879] BTRFS info (device loop0): enabling ssd optimizations [ 58.828901][ T4930] binder: 4923:4930 ERROR: BC_REGISTER_LOOPER called without request [ 58.830426][ T4930] binder: 4923:4930 BC_INCREFS_DONE u0000000000000002 no match [ 58.831711][ T4930] binder: 4923:4930 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 58.832984][ T4930] binder: 4930 RLIMIT_NICE not set [ 58.834995][ T4930] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 58.836467][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 58.837940][ T4930] device batadv0 entered promiscuous mode [ 58.839261][ T4930] bridge0: port 3(batadv0) entered blocking state [ 58.840402][ T4930] bridge0: port 3(batadv0) entered disabled state [ 58.842128][ T4930] bridge0: port 3(batadv0) entered blocking state [ 58.843233][ T4930] bridge0: port 3(batadv0) entered forwarding state [ 59.191426][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.193614][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.246907][ T4931] random: crng reseeded on system resumption [ 59.265284][ T1573] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 59.266912][ T1573] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 59.673890][ T4326] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.721098][ T4946] device vlan2 entered promiscuous mode [ 59.726945][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 59.809989][ T4949] fuse: Bad value for 'fd' [ 59.876176][ T4955] loop0: detected capacity change from 0 to 128 [ 59.889600][ T4955] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 59.913185][ T4326] sysv_free_block: flc_count > flc_size [ 59.915122][ T4326] sysv_free_block: flc_count > flc_size [ 59.916613][ T4326] sysv_free_block: flc_count > flc_size [ 59.917549][ T4326] sysv_free_block: flc_count > flc_size [ 59.918461][ T4326] sysv_free_block: flc_count > flc_size [ 59.919520][ T4326] sysv_free_block: flc_count > flc_size [ 59.920665][ T4326] sysv_free_block: flc_count > flc_size [ 59.921561][ T4326] sysv_free_block: flc_count > flc_size [ 59.922586][ T4326] sysv_free_block: flc_count > flc_size [ 59.923392][ T4326] sysv_free_block: flc_count > flc_size [ 59.924506][ T4326] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 60.045569][ T4938] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.046749][ T4938] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.057471][ T4938] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 60.058710][ T4938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.059693][ T4938] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.068651][ T4938] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 60.069957][ T4938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.070881][ T4938] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.072851][ T4938] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 60.073934][ T4938] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.074942][ T4938] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.076459][ T4938] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 60.077673][ T4938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.078648][ T4938] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.080457][ T4938] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 60.482856][ T4975] loop1: detected capacity change from 0 to 4096 [ 60.499394][ T4975] ntfs3: loop1: ino=3, Correct links count -> 2. [ 60.522079][ T4978] loop3: detected capacity change from 0 to 128 [ 60.528001][ T4978] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 60.552432][ T4320] sysv_free_block: flc_count > flc_size [ 60.553611][ T4320] sysv_free_block: flc_count > flc_size [ 60.554850][ T4320] sysv_free_block: flc_count > flc_size [ 60.559019][ T4320] sysv_free_block: flc_count > flc_size [ 60.559889][ T4320] sysv_free_block: flc_count > flc_size [ 60.562041][ T4320] sysv_free_block: flc_count > flc_size [ 60.562860][ T4320] sysv_free_block: flc_count > flc_size [ 60.564936][ T4320] sysv_free_block: flc_count > flc_size [ 60.566326][ T4320] sysv_free_block: flc_count > flc_size [ 60.567375][ T4320] sysv_free_block: flc_count > flc_size [ 60.569562][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 60.934935][ T4987] loop0: detected capacity change from 0 to 128 [ 60.937475][ T4987] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.019233][ T4326] sysv_free_block: flc_count > flc_size [ 61.022866][ T4326] sysv_free_block: flc_count > flc_size [ 61.026190][ T4326] sysv_free_block: flc_count > flc_size [ 61.028341][ T4326] sysv_free_block: flc_count > flc_size [ 61.030420][ T4326] sysv_free_block: flc_count > flc_size [ 61.033605][ T4326] sysv_free_block: flc_count > flc_size [ 61.035400][ T4326] sysv_free_block: flc_count > flc_size [ 61.037148][ T4326] sysv_free_block: flc_count > flc_size [ 61.043475][ T4326] sysv_free_block: flc_count > flc_size [ 61.045249][ T4326] sysv_free_block: flc_count > flc_size [ 61.047053][ T4326] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 61.540609][ T5011] loop1: detected capacity change from 0 to 128 [ 61.552007][ T5011] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 61.648400][ T5014] loop0: detected capacity change from 0 to 512 [ 61.705175][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.841780][ T5014] EXT4-fs: Mount option(s) incompatible with ext3 [ 61.867767][ T4321] sysv_free_block: flc_count > flc_size [ 61.868742][ T4321] sysv_free_block: flc_count > flc_size [ 61.869727][ T4321] sysv_free_block: flc_count > flc_size [ 61.870660][ T4321] sysv_free_block: flc_count > flc_size [ 61.871566][ T4321] sysv_free_block: flc_count > flc_size [ 61.872368][ T4321] sysv_free_block: flc_count > flc_size [ 61.873179][ T4321] sysv_free_block: flc_count > flc_size [ 61.873996][ T4321] sysv_free_block: flc_count > flc_size [ 61.874994][ T4321] sysv_free_block: flc_count > flc_size [ 61.877479][ T4321] sysv_free_block: flc_count > flc_size [ 61.878604][ T4321] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 61.930532][ T5019] input: syz1 as /devices/virtual/input/input2 [ 62.062926][ T5030] loop2: detected capacity change from 0 to 256 [ 62.082486][ T5030] exfat: Deprecated parameter 'namecase' [ 62.103291][ T5030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 62.105554][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.107702][ T4337] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.108696][ T4332] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.109640][ T4332] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.112093][ T5024] loop3: detected capacity change from 0 to 32768 [ 62.196385][ T5045] loop4: detected capacity change from 0 to 128 [ 62.202476][ T5024] XFS (loop3): Mounting V5 Filesystem [ 62.211351][ T5045] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 62.236591][ T4329] sysv_free_block: flc_count > flc_size [ 62.237821][ T4329] sysv_free_block: flc_count > flc_size [ 62.238752][ T4329] sysv_free_block: flc_count > flc_size [ 62.316782][ T4329] sysv_free_block: flc_count > flc_size [ 62.317737][ T4329] sysv_free_block: flc_count > flc_size [ 62.318642][ T4329] sysv_free_block: flc_count > flc_size [ 62.319492][ T4329] sysv_free_block: flc_count > flc_size [ 62.320376][ T4329] sysv_free_block: flc_count > flc_size [ 62.321190][ T4329] sysv_free_block: flc_count > flc_size [ 62.322044][ T4329] sysv_free_block: flc_count > flc_size [ 62.323171][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 62.641005][ T5024] XFS (loop3): Ending clean mount [ 62.691643][ T4320] XFS (loop3): Unmounting Filesystem [ 62.841376][ T5057] loop4: detected capacity change from 0 to 32768 [ 62.862183][ T5057] JBD2: Ignoring recovery information on journal [ 62.897477][ T5057] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 62.976677][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 63.132971][ T5068] loop3: detected capacity change from 0 to 256 [ 63.161902][ T5068] FAT-fs (loop3): Directory bread(block 64) failed [ 63.163195][ T5068] FAT-fs (loop3): Directory bread(block 65) failed [ 63.164180][ T5068] FAT-fs (loop3): Directory bread(block 66) failed [ 63.166867][ T5068] FAT-fs (loop3): Directory bread(block 67) failed [ 63.174510][ T5068] FAT-fs (loop3): Directory bread(block 68) failed [ 63.178439][ T5068] FAT-fs (loop3): Directory bread(block 69) failed [ 63.179496][ T5068] FAT-fs (loop3): Directory bread(block 70) failed [ 63.180482][ T5068] FAT-fs (loop3): Directory bread(block 71) failed [ 63.184773][ T5068] FAT-fs (loop3): Directory bread(block 72) failed [ 63.187229][ T5068] FAT-fs (loop3): Directory bread(block 73) failed [ 63.689991][ T5079] loop3: detected capacity change from 0 to 512 [ 63.785169][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 63.792157][ T5079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.065712][ T5079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 64.067319][ T5079] System zones: 1-12 [ 64.145175][ T5079] EXT4-fs (loop3): 1 truncate cleaned up [ 64.146206][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 64.185145][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 64.186204][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 64.186223][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 64.187101][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 64.302963][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 64.370454][ T5087] loop3: detected capacity change from 0 to 128 [ 64.374374][ T5087] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 64.499973][ T4320] sysv_free_block: flc_count > flc_size [ 64.500918][ T4320] sysv_free_block: flc_count > flc_size [ 64.501802][ T4320] sysv_free_block: flc_count > flc_size [ 64.502829][ T4320] sysv_free_block: flc_count > flc_size [ 64.503673][ T4320] sysv_free_block: flc_count > flc_size [ 64.504591][ T4320] sysv_free_block: flc_count > flc_size [ 64.507675][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.508742][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.570606][ T4320] sysv_free_block: flc_count > flc_size [ 65.571534][ T4320] sysv_free_block: flc_count > flc_size [ 65.572362][ T4320] sysv_free_block: flc_count > flc_size [ 65.589824][ T4320] sysv_free_block: flc_count > flc_size [ 65.590980][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 65.682555][ T5094] loop4: detected capacity change from 0 to 32768 [ 65.694541][ T5094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.179 (5094) [ 65.717364][ T5094] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.722850][ T5094] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.724232][ T5094] BTRFS info (device loop4): using free space tree [ 66.649377][ T5094] BTRFS info (device loop4): enabling ssd optimizations [ 66.685196][ T4329] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.293981][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.312389][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.468096][ T5167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 67.820133][ T5169] loop4: detected capacity change from 0 to 32768 [ 67.856310][ T5169] XFS (loop4): Mounting V5 Filesystem [ 67.894692][ T5169] XFS (loop4): Ending clean mount [ 68.972855][ T4329] XFS (loop4): Unmounting Filesystem [ 69.476163][ T4371] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 69.645588][ T114] cfg80211: failed to load regulatory.db [ 69.779633][ T5226] loop3: detected capacity change from 0 to 64 [ 69.791760][ T4371] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.793095][ T4371] usb 1-1: config 0 has no interface number 0 [ 69.796361][ T4371] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 69.797775][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.799053][ T4371] usb 1-1: Product: syz [ 69.799700][ T4371] usb 1-1: Manufacturer: syz [ 69.800421][ T4371] usb 1-1: SerialNumber: syz [ 69.808049][ T4371] usb 1-1: config 0 descriptor?? [ 69.823370][ T4371] usb 1-1: selecting invalid altsetting 1 [ 69.824629][ T4371] dvb_ttusb_budget: ttusb_init_controller: error [ 69.827659][ T4371] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 69.982217][ T4371] DVB: Unable to find symbol stv0299_attach() [ 70.001532][ T4371] DVB: Unable to find symbol tda8083_attach() [ 70.002544][ T4371] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 70.433829][ T4375] usb 1-1: USB disconnect, device number 2 [ 70.538362][ T5235] loop3: detected capacity change from 0 to 32768 [ 70.548777][ T5235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.218 (5235) [ 70.560325][ T5235] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.562694][ T5235] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 70.685440][ T5235] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 70.833244][ T5235] BTRFS info (device loop3): trying to use backup root at mount time [ 70.834786][ T5235] BTRFS info (device loop3): setting nodatasum [ 70.844443][ T5235] BTRFS info (device loop3): enabling ssd optimizations [ 70.851503][ T5235] BTRFS info (device loop3): using spread ssd allocation scheme [ 70.855276][ T5235] BTRFS info (device loop3): turning on flush-on-commit [ 70.856342][ T5235] BTRFS info (device loop3): force zlib compression, level 3 [ 70.857550][ T5235] BTRFS info (device loop3): using free space tree [ 70.940570][ T5256] fuse: Bad value for 'fd' [ 71.582402][ T4320] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.744381][ T5303] loop4: detected capacity change from 0 to 128 [ 72.761985][ T5307] fuse: Bad value for 'fd' [ 72.766025][ T5303] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 72.792066][ T4308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4308) [ 72.841496][ T4329] sysv_free_block: flc_count > flc_size [ 72.842630][ T4329] sysv_free_block: flc_count > flc_size [ 72.843517][ T4329] sysv_free_block: flc_count > flc_size [ 72.844377][ T4329] sysv_free_block: flc_count > flc_size [ 72.855903][ T4329] sysv_free_block: flc_count > flc_size [ 72.856943][ T4329] sysv_free_block: flc_count > flc_size [ 72.860112][ T4329] sysv_free_block: flc_count > flc_size [ 72.861015][ T4329] sysv_free_block: flc_count > flc_size [ 72.861781][ T4329] sysv_free_block: flc_count > flc_size [ 72.862624][ T4329] sysv_free_block: flc_count > flc_size [ 72.863968][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 73.871892][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.874831][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.299424][ T5364] fuse: Bad value for 'fd' [ 75.324009][ T5367] loop0: detected capacity change from 0 to 128 [ 75.332774][ T5367] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.334929][ T5367] hpfs: filesystem error: improperly stopped [ 75.340827][ T5367] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.343573][ T5367] hpfs: You really don't want any checks? You are crazy... [ 75.385454][ T5367] hpfs: Code page index out of array [ 75.389794][ T5367] hpfs: code page support is disabled [ 75.391363][ T5367] hpfs: hpfs_map_4sectors(): unaligned read [ 75.397105][ T5367] hpfs: hpfs_map_4sectors(): unaligned read [ 75.400033][ T5367] hpfs: filesystem error: unable to find root dir [ 76.630510][ T5397] hub 9-0:1.0: USB hub found [ 76.632142][ T5397] hub 9-0:1.0: 8 ports detected [ 76.850999][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.852852][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.120674][ T5426] loop4: detected capacity change from 0 to 128 [ 78.130079][ T5426] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 78.197592][ T4329] sysv_free_block: flc_count > flc_size [ 78.199882][ T4329] sysv_free_block: flc_count > flc_size [ 78.200717][ T4329] sysv_free_block: flc_count > flc_size [ 78.204095][ T4329] sysv_free_block: flc_count > flc_size [ 78.208317][ T4329] sysv_free_block: flc_count > flc_size [ 78.209187][ T4329] sysv_free_block: flc_count > flc_size [ 78.211186][ T4329] sysv_free_block: flc_count > flc_size [ 78.212130][ T4329] sysv_free_block: flc_count > flc_size [ 78.214337][ T4329] sysv_free_block: flc_count > flc_size [ 78.216799][ T4329] sysv_free_block: flc_count > flc_size [ 78.219138][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 79.171907][ T5460] loop0: detected capacity change from 0 to 128 [ 79.173996][ T5460] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 79.219605][ T4326] sysv_free_block: flc_count > flc_size [ 79.221135][ T4326] sysv_free_block: flc_count > flc_size [ 79.230536][ T4326] sysv_free_block: flc_count > flc_size [ 79.231468][ T4326] sysv_free_block: flc_count > flc_size [ 79.232442][ T4326] sysv_free_block: flc_count > flc_size [ 79.233300][ T4326] sysv_free_block: flc_count > flc_size [ 79.234197][ T4326] sysv_free_block: flc_count > flc_size [ 79.235440][ T4326] sysv_free_block: flc_count > flc_size [ 79.236400][ T4326] sysv_free_block: flc_count > flc_size [ 79.237268][ T4326] sysv_free_block: flc_count > flc_size [ 79.238836][ T4326] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 80.018513][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.023751][ T5454] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.026602][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.228831][ T5503] loop3: detected capacity change from 0 to 128 [ 80.254579][ T5503] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 80.356122][ T4320] sysv_free_block: flc_count > flc_size [ 80.357307][ T4320] sysv_free_block: flc_count > flc_size [ 80.358343][ T4320] sysv_free_block: flc_count > flc_size [ 80.359165][ T4320] sysv_free_block: flc_count > flc_size [ 80.360106][ T4320] sysv_free_block: flc_count > flc_size [ 80.361068][ T4320] sysv_free_block: flc_count > flc_size [ 80.361951][ T4320] sysv_free_block: flc_count > flc_size [ 80.362795][ T4320] sysv_free_block: flc_count > flc_size [ 80.363679][ T4320] sysv_free_block: flc_count > flc_size [ 80.364493][ T4320] sysv_free_block: flc_count > flc_size [ 80.395700][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 80.672858][ T5518] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 81.619663][ T5511] loop4: detected capacity change from 0 to 32768 [ 81.634886][ T5511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.295 (5511) [ 81.674361][ T5511] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.715329][ T5511] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 81.716843][ T5511] BTRFS info (device loop4): using free space tree [ 81.830035][ T5567] loop1: detected capacity change from 0 to 128 [ 81.843517][ T5567] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 81.903405][ T4321] sysv_free_block: flc_count > flc_size [ 81.904237][ T4321] sysv_free_block: flc_count > flc_size [ 81.910524][ T4321] sysv_free_block: flc_count > flc_size [ 81.911950][ T4321] sysv_free_block: flc_count > flc_size [ 81.913776][ T4321] sysv_free_block: flc_count > flc_size [ 81.914643][ T4321] sysv_free_block: flc_count > flc_size [ 81.922467][ T4321] sysv_free_block: flc_count > flc_size [ 81.923402][ T4321] sysv_free_block: flc_count > flc_size [ 81.924259][ T4321] sysv_free_block: flc_count > flc_size [ 81.942954][ T4321] sysv_free_block: flc_count > flc_size [ 81.944198][ T4321] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 81.973936][ T5588] loop3: detected capacity change from 0 to 128 [ 81.991383][ T5511] BTRFS info (device loop4): enabling ssd optimizations [ 82.038666][ T4329] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.212392][ T5629] loop3: detected capacity change from 0 to 128 [ 83.228018][ T5629] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 83.262766][ T4320] sysv_free_block: flc_count > flc_size [ 83.264694][ T4320] sysv_free_block: flc_count > flc_size [ 83.266954][ T4320] sysv_free_block: flc_count > flc_size [ 83.267814][ T4320] sysv_free_block: flc_count > flc_size [ 83.269564][ T4320] sysv_free_block: flc_count > flc_size [ 83.271709][ T4320] sysv_free_block: flc_count > flc_size [ 83.273867][ T4320] sysv_free_block: flc_count > flc_size [ 83.274809][ T4320] sysv_free_block: flc_count > flc_size [ 83.282272][ T4320] sysv_free_block: flc_count > flc_size [ 83.283193][ T4320] sysv_free_block: flc_count > flc_size [ 83.286496][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.319432][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.324491][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.873899][ T4369] kernel read not supported for file /dsp (pid: 4369 comm: kworker/1:4) [ 85.289991][ T5684] netlink: 84 bytes leftover after parsing attributes in process `syz.1.340'. [ 85.542188][ T5684] device vlan0 entered promiscuous mode [ 86.044844][ T5698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.046692][ T5698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.084001][ T5701] loop0: detected capacity change from 0 to 128 [ 86.086149][ T5701] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 86.118637][ T4326] sysv_free_block: flc_count > flc_size [ 86.119616][ T4326] sysv_free_block: flc_count > flc_size [ 86.120843][ T4326] sysv_free_block: flc_count > flc_size [ 86.121684][ T4326] sysv_free_block: flc_count > flc_size [ 86.122567][ T4326] sysv_free_block: flc_count > flc_size [ 86.123548][ T4326] sysv_free_block: flc_count > flc_size [ 86.124400][ T4326] sysv_free_block: flc_count > flc_size [ 86.126628][ T4326] sysv_free_block: flc_count > flc_size [ 86.127525][ T4326] sysv_free_block: flc_count > flc_size [ 86.128359][ T4326] sysv_free_block: flc_count > flc_size [ 86.129459][ T4326] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.992200][ T5784] ubi31: detaching mtd0 [ 88.996158][ T5784] ubi31: mtd0 is detached [ 89.018599][ T5791] loop0: detected capacity change from 0 to 128 [ 90.101020][ T5805] hub 9-0:1.0: USB hub found [ 90.102007][ T5805] hub 9-0:1.0: 8 ports detected [ 90.818940][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.822117][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.923252][ T5835] loop1: detected capacity change from 0 to 4096 [ 90.926198][ T5835] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 90.932182][ T5835] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.440264][ T5848] hub 9-0:1.0: USB hub found [ 91.444947][ T5848] hub 9-0:1.0: 8 ports detected [ 92.058630][ T5867] loop4: detected capacity change from 0 to 32768 [ 92.068287][ T5867] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.411 (5867) [ 92.073100][ T5867] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.074721][ T5867] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 92.076225][ T5867] BTRFS info (device loop4): setting nodatacow, compression disabled [ 92.077471][ T5867] BTRFS info (device loop4): force clearing of disk cache [ 92.078545][ T5867] BTRFS info (device loop4): enabling ssd optimizations [ 92.079606][ T5867] BTRFS info (device loop4): using spread ssd allocation scheme [ 92.080771][ T5867] BTRFS info (device loop4): turning off barriers [ 92.081746][ T5867] BTRFS info (device loop4): use no compression [ 92.082660][ T5867] BTRFS info (device loop4): disabling free space tree [ 92.083723][ T5867] BTRFS info (device loop4): not using ssd optimizations [ 92.084854][ T5867] BTRFS info (device loop4): not using spread ssd allocation scheme [ 92.183909][ T5896] loop3: detected capacity change from 0 to 128 [ 92.203100][ T5867] BTRFS info (device loop4): rebuilding free space tree [ 92.223037][ T5867] BTRFS info (device loop4): disabling free space tree [ 92.224204][ T5867] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.225986][ T5867] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.525449][ T5896] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 92.571467][ T5867] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.588939][ T4329] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.603728][ T4320] sysv_free_block: flc_count > flc_size [ 92.608436][ T4320] sysv_free_block: flc_count > flc_size [ 92.609744][ T4320] sysv_free_block: flc_count > flc_size [ 92.610755][ T4320] sysv_free_block: flc_count > flc_size [ 92.611565][ T4320] sysv_free_block: flc_count > flc_size [ 92.613773][ T4320] sysv_free_block: flc_count > flc_size [ 92.677022][ T4320] sysv_free_block: flc_count > flc_size [ 92.679317][ T4320] sysv_free_block: flc_count > flc_size [ 92.680616][ T4320] sysv_free_block: flc_count > flc_size [ 92.682347][ T4320] sysv_free_block: flc_count > flc_size [ 92.691106][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.848856][ T5906] hub 9-0:1.0: USB hub found [ 92.850863][ T5906] hub 9-0:1.0: 8 ports detected [ 93.163471][ T5916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input3 [ 94.297368][ T5935] trusted_key: encrypted_key: insufficient parameters specified [ 94.642014][ T5950] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 95.139870][ T5964] loop1: detected capacity change from 0 to 8 [ 95.302565][ T5968] o2cb: This node has not been configured. [ 95.303666][ T5968] o2cb: Cluster check failed. Fix errors before retrying. [ 95.305045][ T5968] (syz.2.438,5968,1):user_dlm_register:674 ERROR: status = -22 [ 95.306311][ T5968] (syz.2.438,5968,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 96.375297][ T5993] loop4: detected capacity change from 0 to 128 [ 96.384781][ T5993] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 96.404388][ T4329] sysv_free_block: flc_count > flc_size [ 96.406496][ T4329] sysv_free_block: flc_count > flc_size [ 96.408311][ T4329] sysv_free_block: flc_count > flc_size [ 96.409295][ T4329] sysv_free_block: flc_count > flc_size [ 96.411838][ T4329] sysv_free_block: flc_count > flc_size [ 96.412879][ T4329] sysv_free_block: flc_count > flc_size [ 96.413725][ T4329] sysv_free_block: flc_count > flc_size [ 96.414735][ T4329] sysv_free_block: flc_count > flc_size [ 96.423231][ T4329] sysv_free_block: flc_count > flc_size [ 96.424128][ T4329] sysv_free_block: flc_count > flc_size [ 96.429883][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 96.500140][ T6003] fuse: Bad value for 'fd' [ 96.553084][ T6006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.448'. [ 96.635469][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.448'. [ 97.050551][ T6001] loop0: detected capacity change from 0 to 32768 [ 97.123025][ T6001] XFS (loop0): Mounting V5 Filesystem [ 97.435540][ T6001] XFS (loop0): Ending clean mount [ 97.487825][ T4326] XFS (loop0): Unmounting Filesystem [ 97.979350][ T6041] loop4: detected capacity change from 0 to 128 [ 98.027364][ T6049] fuse: Bad value for 'fd' [ 98.053019][ T6041] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 98.072692][ T4329] sysv_free_block: flc_count > flc_size [ 98.073768][ T4329] sysv_free_block: flc_count > flc_size [ 98.074572][ T4329] sysv_free_block: flc_count > flc_size [ 98.075813][ T4329] sysv_free_block: flc_count > flc_size [ 98.079258][ T4329] sysv_free_block: flc_count > flc_size [ 98.080217][ T4329] sysv_free_block: flc_count > flc_size [ 98.081256][ T4329] sysv_free_block: flc_count > flc_size [ 98.082151][ T4329] sysv_free_block: flc_count > flc_size [ 98.083163][ T4329] sysv_free_block: flc_count > flc_size [ 98.084063][ T4329] sysv_free_block: flc_count > flc_size [ 98.085556][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 98.391054][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 98.428004][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 99.263479][ T6082] fuse: Bad value for 'fd' [ 99.291438][ T6084] loop4: detected capacity change from 0 to 128 [ 99.293958][ T6084] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 99.336701][ T4329] sysv_free_block: flc_count > flc_size [ 99.338480][ T4329] sysv_free_block: flc_count > flc_size [ 99.340047][ T4329] sysv_free_block: flc_count > flc_size [ 99.341991][ T4329] sysv_free_block: flc_count > flc_size [ 99.355419][ T4329] sysv_free_block: flc_count > flc_size [ 99.356527][ T4329] sysv_free_block: flc_count > flc_size [ 99.357413][ T4329] sysv_free_block: flc_count > flc_size [ 99.358636][ T4329] sysv_free_block: flc_count > flc_size [ 99.359692][ T4329] sysv_free_block: flc_count > flc_size [ 99.360534][ T4329] sysv_free_block: flc_count > flc_size [ 99.361864][ T4329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 99.829769][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.474'. [ 99.906797][ T6097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.474'. [ 99.958045][ T6092] loop3: detected capacity change from 0 to 32768 [ 99.963978][ T6092] XFS: attr2 mount option is deprecated. [ 100.301140][ T6106] loop4: detected capacity change from 0 to 64 [ 100.371365][ T6092] XFS (loop3): Mounting V5 Filesystem [ 100.401608][ T6092] XFS (loop3): Ending clean mount [ 100.683187][ T6092] XFS (loop3): Quotacheck needed: Please wait. [ 100.747143][ T6092] XFS (loop3): Quotacheck: Done. [ 100.794447][ T4320] XFS (loop3): Unmounting Filesystem [ 101.428535][ T6123] loop1: detected capacity change from 0 to 131072 [ 101.439293][ T6123] F2FS-fs (loop1): invalid crc value [ 101.451429][ T6123] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.462790][ T6123] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.599138][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 101.668608][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 102.369032][ T6148] o2cb: This node has not been configured. [ 102.370133][ T6148] o2cb: Cluster check failed. Fix errors before retrying. [ 102.371438][ T6148] (syz.0.489,6148,0):user_dlm_register:674 ERROR: status = -22 [ 102.372703][ T6148] (syz.0.489,6148,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 102.508531][ T6158] binder: 6152:6158 ERROR: BC_REGISTER_LOOPER called without request [ 102.510066][ T6158] binder: 6152:6158 BC_INCREFS_DONE u0000000000000002 no match [ 102.511386][ T6158] binder: 6152:6158 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 102.512688][ T6158] binder: 6158 RLIMIT_NICE not set [ 102.519156][ T6158] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 102.520448][ T6158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 103.298126][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.493'. [ 103.306508][ T6161] bridge0: port 3(batadv0) entered disabled state [ 103.307660][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.308907][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.390625][ T6173] ntfs3: loop4: try to read out of volume at offset 0x0 [ 104.491013][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 104.813266][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 105.407115][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.412090][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.959359][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 106.009283][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 106.929538][ T6255] loop0: detected capacity change from 0 to 128 [ 107.004005][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.013174][ T6255] EXT4-fs (loop0): shut down requested (2) [ 107.032881][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 107.365348][ T6265] loop4: detected capacity change from 0 to 128 [ 108.202574][ T6273] binder: 6264:6273 ERROR: BC_REGISTER_LOOPER called without request [ 108.203938][ T6273] binder: 6264:6273 BC_INCREFS_DONE u0000000000000002 no match [ 108.205161][ T6273] binder: 6264:6273 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 108.206331][ T6273] binder: 6273 RLIMIT_NICE not set [ 108.605188][ T6273] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 108.606460][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.524'. [ 108.613942][ T6279] syz.1.529 uses obsolete (PF_INET,SOCK_PACKET) [ 109.600570][ T6298] netlink: 'syz.0.536': attribute type 12 has an invalid length. [ 110.673276][ T6333] loop4: detected capacity change from 0 to 512 [ 110.987599][ T6333] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.547: invalid indirect mapped block 256 (level 2) [ 110.995064][ T6333] EXT4-fs (loop4): 2 truncates cleaned up [ 110.998561][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.026236][ T6342] loop1: detected capacity change from 0 to 2048 [ 111.092542][ T6342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.526518][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 114.823127][ T6438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.582'. [ 116.642262][ T6471] loop3: detected capacity change from 0 to 128 [ 117.956211][ T6488] hub 9-0:1.0: USB hub found [ 117.957495][ T6488] hub 9-0:1.0: 8 ports detected [ 117.973713][ T6495] netlink: 104 bytes leftover after parsing attributes in process `syz.3.601'. [ 119.399803][ T6510] netlink: 'syz.3.607': attribute type 12 has an invalid length. [ 119.719443][ T6535] hub 9-0:1.0: USB hub found [ 119.720447][ T6535] hub 9-0:1.0: 8 ports detected [ 120.133539][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 120.141380][ T6552] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 120.268761][ T6556] netlink: 'syz.2.622': attribute type 12 has an invalid length. [ 120.352542][ T6563] binder: 6562:6563 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 120.353996][ T6563] binder: 6562:6563 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 121.456326][ T6586] netlink: 'syz.2.634': attribute type 12 has an invalid length. [ 121.497459][ T6592] binder: 6590:6592 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 121.499234][ T6592] binder: 6590:6592 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 121.651664][ T6597] hub 9-0:1.0: USB hub found [ 121.652717][ T6597] hub 9-0:1.0: 8 ports detected [ 121.664719][ T6601] loop4: detected capacity change from 0 to 512 [ 121.754883][ T6601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.772946][ T6601] autofs4:pid:6601:autofs_fill_super: pipe file descriptor does not contain proper ops [ 121.787595][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 123.558946][ T6654] loop4: detected capacity change from 0 to 2048 [ 123.574863][ T6654] hpfs: hpfs_map_sector(): read error [ 123.744441][ T4308] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.754857][ T6626] netlink: 'syz.3.649': attribute type 12 has an invalid length. [ 124.038978][ T6666] loop1: detected capacity change from 0 to 1764 [ 124.286253][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.289495][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.423169][ T6683] hub 9-0:1.0: USB hub found [ 124.424178][ T6683] hub 9-0:1.0: 8 ports detected [ 124.678846][ T6697] loop0: detected capacity change from 0 to 1024 [ 124.709430][ T6697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.756180][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 125.116086][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.118840][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.195546][ T6706] netlink: 'syz.2.667': attribute type 12 has an invalid length. [ 125.854747][ T6729] loop0: detected capacity change from 0 to 2048 [ 125.864658][ T6729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.955507][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.956655][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.001697][ T6735] hub 9-0:1.0: USB hub found [ 126.002593][ T6735] hub 9-0:1.0: 8 ports detected [ 126.328493][ T6737] netlink: 'syz.1.678': attribute type 12 has an invalid length. [ 126.378156][ T6743] bridge0: port 3(batadv0) entered disabled state [ 126.379549][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.381624][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.394152][ T6743] bridge0: port 3(batadv0) entered blocking state [ 126.395332][ T6743] bridge0: port 3(batadv0) entered forwarding state [ 126.396401][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.397543][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.398768][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.399968][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.406108][ T6743] device bridge0 entered promiscuous mode [ 126.736051][ T6759] loop0: detected capacity change from 0 to 64 [ 127.334052][ T6768] netlink: 'syz.1.690': attribute type 12 has an invalid length. [ 127.730480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.822772][ T6781] loop1: detected capacity change from 0 to 8192 [ 127.836562][ T6781] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.838979][ T6781] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 127.843750][ T6781] REISERFS (device loop1): using ordered data mode [ 127.844847][ T6781] reiserfs: using flush barriers [ 127.847566][ T6781] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.850501][ T6781] REISERFS (device loop1): checking transaction log (loop1) [ 127.855198][ T6781] REISERFS (device loop1): Using r5 hash to sort names [ 127.856684][ T6781] REISERFS (device loop1): using 3.5.x disk format [ 127.859337][ T6781] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 128.119881][ T6796] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 128.809221][ T6810] misc userio: Invalid payload size [ 129.164266][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.168758][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.210761][ T6813] netlink: 'syz.2.704': attribute type 12 has an invalid length. [ 129.492750][ T6838] fuse: Bad value for 'fd' [ 129.569649][ T6844] netlink: 'syz.3.716': attribute type 12 has an invalid length. [ 129.693125][ T6851] hub 9-0:1.0: USB hub found [ 129.694057][ T6851] hub 9-0:1.0: 8 ports detected [ 129.695742][ T6852] loop1: detected capacity change from 0 to 64 [ 130.890909][ T6873] loop0: detected capacity change from 0 to 512 [ 130.898748][ T6873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.568853][ T6873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 131.570178][ T6873] System zones: 1-12 [ 131.626097][ T6873] EXT4-fs (loop0): 1 truncate cleaned up [ 131.627132][ T6873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.794759][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 132.021084][ T6887] netlink: 'syz.4.730': attribute type 12 has an invalid length. [ 132.110450][ T6897] hub 9-0:1.0: USB hub found [ 132.111523][ T6897] hub 9-0:1.0: 8 ports detected [ 132.201488][ T4330] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 134.343220][ T6933] netlink: 'syz.3.746': attribute type 12 has an invalid length. [ 135.101188][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.103449][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.167423][ T6959] loop1: detected capacity change from 0 to 1024 [ 135.181274][ T6959] hfsplus: invalid length 32517 has been corrected to 255 [ 135.216821][ T4422] hfsplus: b-tree write err: -5, ino 20 [ 136.437143][ T6989] loop1: detected capacity change from 0 to 2048 [ 136.543093][ T6989] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 136.551467][ T6989] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 136.557930][ T4308] udevd[4308]: incorrect ext4 checksum on /dev/loop1 [ 136.950084][ T7000] hub 9-0:1.0: USB hub found [ 136.951100][ T7000] hub 9-0:1.0: 8 ports detected [ 137.010289][ T6996] netlink: 'syz.3.765': attribute type 12 has an invalid length. [ 138.233562][ T7033] fuse: Bad value for 'fd' [ 138.776371][ T7046] netlink: 'syz.1.780': attribute type 12 has an invalid length. [ 138.924369][ T7049] netlink: 'syz.0.792': attribute type 12 has an invalid length. [ 139.307712][ T7062] hub 9-0:1.0: USB hub found [ 139.308722][ T7062] hub 9-0:1.0: 8 ports detected [ 140.221083][ T7086] fuse: Bad value for 'fd' [ 140.339141][ T7084] netlink: 'syz.4.794': attribute type 12 has an invalid length. [ 141.139420][ T7120] fuse: Bad value for 'fd' [ 141.644006][ T7125] netlink: 'syz.4.809': attribute type 12 has an invalid length. [ 142.266377][ T7150] fuse: Bad value for 'fd' [ 142.704157][ T7156] netlink: 'syz.3.821': attribute type 12 has an invalid length. [ 142.711782][ T7160] fuse: Bad value for 'fd' [ 143.770178][ T7195] fuse: Bad value for 'fd' [ 143.850891][ T7197] netlink: 'syz.3.837': attribute type 12 has an invalid length. [ 144.814099][ T7226] fuse: Bad value for 'fd' [ 144.882282][ T7222] hub 9-0:1.0: USB hub found [ 144.883291][ T7222] hub 9-0:1.0: 8 ports detected [ 144.927266][ T7231] netlink: 'syz.0.851': attribute type 12 has an invalid length. [ 145.933752][ T7256] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.935828][ T7256] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.938278][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.940755][ T7256] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.942423][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 145.944121][ T7256] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.945643][ T7256] UDF-fs: Scanning with blocksize 512 failed [ 145.947609][ T7256] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.949353][ T7256] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.950988][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.952753][ T7256] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.954561][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 145.956187][ T7256] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.957472][ T7256] UDF-fs: Scanning with blocksize 1024 failed [ 145.958889][ T7256] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.960736][ T7256] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.962327][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.964030][ T7256] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.965526][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 145.967172][ T7256] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.968484][ T7256] UDF-fs: Scanning with blocksize 2048 failed [ 145.969832][ T7256] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 145.971893][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.973712][ T7256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 145.975411][ T7256] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.976794][ T7256] UDF-fs: Scanning with blocksize 4096 failed [ 145.977691][ T7256] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 146.355590][ T7266] fuse: Bad value for 'fd' [ 146.630895][ T7276] netlink: 'syz.0.863': attribute type 12 has an invalid length. [ 147.051900][ T7282] hub 9-0:1.0: USB hub found [ 147.053047][ T7282] hub 9-0:1.0: 8 ports detected [ 147.864913][ T7305] fuse: Bad value for 'fd' [ 148.051422][ T7312] netlink: 'syz.0.878': attribute type 12 has an invalid length. [ 148.505657][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 148.633202][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 148.634395][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 148.634417][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 148.824448][ T7335] fuse: Bad value for 'fd' [ 148.844250][ T7327] loop0: detected capacity change from 0 to 32768 [ 148.876658][ T7329] hub 9-0:1.0: USB hub found [ 148.877534][ T7329] hub 9-0:1.0: 8 ports detected [ 149.021119][ T7344] fuse: Bad value for 'fd' [ 150.084625][ T7380] fuse: Bad value for 'fd' [ 150.093373][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.097812][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.400455][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.407052][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.680484][ T7400] binder: 7399:7400 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 150.682498][ T7400] binder: 7399:7400 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 150.683791][ T7400] binder: 7399:7400 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 150.713180][ T7403] loop1: detected capacity change from 0 to 128 [ 150.751857][ T7401] hub 9-0:1.0: USB hub found [ 150.752969][ T7401] hub 9-0:1.0: 8 ports detected [ 152.090266][ T7430] binder: 7429:7430 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 152.092722][ T7430] binder: 7429:7430 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 152.093951][ T7430] binder: 7429:7430 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 153.034399][ T7457] loop4: detected capacity change from 0 to 2048 [ 153.125324][ T7457] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.127100][ T7457] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.133119][ T7457] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 153.139361][ T7457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.208455][ T7467] fuse: Bad value for 'fd' [ 153.255984][ T7472] binder: 7471:7472 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 153.261508][ T7472] binder: 7471:7472 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.262730][ T7472] binder: 7471:7472 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 153.758401][ T7480] hub 9-0:1.0: USB hub found [ 153.760463][ T7480] hub 9-0:1.0: 8 ports detected [ 155.809076][ T7530] loop0: detected capacity change from 0 to 128 [ 155.821703][ T7530] ufs: You didn't specify the type of your ufs filesystem [ 155.821703][ T7530] [ 155.821703][ T7530] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.821703][ T7530] [ 155.821703][ T7530] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.837831][ T7530] ufs: ufs_fill_super(): bad magic number [ 155.870218][ T4308] blk_print_req_error: 2 callbacks suppressed [ 155.870235][ T4308] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.638895][ T7597] binder: 7596:7597 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 159.176636][ T7611] fuse: Bad value for 'fd' [ 159.956003][ T7634] loop0: detected capacity change from 0 to 64 [ 160.448378][ T7641] binder: 7640:7641 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 162.408009][ T7683] binder: 7682:7683 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 164.526880][ T7724] binder: 7721:7724 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 165.443649][ T7742] hub 9-0:1.0: USB hub found [ 165.444698][ T7742] hub 9-0:1.0: 8 ports detected [ 165.630742][ T7750] loop4: detected capacity change from 0 to 4096 [ 165.668178][ T7750] ntfs: volume version 3.1. [ 165.692520][ T7753] fuse: Bad value for 'fd' [ 166.832724][ T7785] binder: 7784:7785 ioctl 4018620d 0 returned -22 [ 166.838516][ T7785] binder: 7784:7785 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 166.840572][ T7785] binder: 7784:7785 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 166.841935][ T7785] binder: 7784:7785 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 166.943768][ T7791] fuse: Bad value for 'fd' [ 167.294340][ T7805] hub 9-0:1.0: USB hub found [ 167.295356][ T7805] hub 9-0:1.0: 8 ports detected [ 167.351806][ T7815] binder: 7814:7815 ioctl 4018620d 0 returned -22 [ 167.354498][ T7815] binder: 7814:7815 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 167.358271][ T7815] binder: 7814:7815 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 167.359589][ T7815] binder: 7814:7815 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 169.097897][ T7854] binder: 7852:7854 ioctl 4018620d 0 returned -22 [ 169.100004][ T7854] binder: 7852:7854 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 169.102887][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.107267][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.109240][ T7854] binder: 7852:7854 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 169.110573][ T7854] binder: 7852:7854 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 169.236887][ T7858] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1066'. [ 169.610940][ T7867] hub 9-0:1.0: USB hub found [ 169.612031][ T7867] hub 9-0:1.0: 8 ports detected [ 171.389128][ T7918] loop3: detected capacity change from 0 to 128 [ 171.441606][ T7918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.938304][ T7933] hub 9-0:1.0: USB hub found [ 171.939290][ T7933] hub 9-0:1.0: 8 ports detected [ 172.172421][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 173.756511][ T7969] tipc: Started in network mode [ 173.758591][ T7969] tipc: Node identity ac14140f, cluster identity 4711 [ 173.760169][ T7969] tipc: New replicast peer: 255.255.255.255 [ 173.761607][ T7969] tipc: Enabled bearer , priority 10 [ 174.355979][ T7978] hub 9-0:1.0: USB hub found [ 174.357095][ T7978] hub 9-0:1.0: 8 ports detected [ 174.846929][ T114] tipc: Node number set to 2886997007 [ 175.338937][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.345854][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.003008][ T8025] binder: 8024:8025 ioctl c0306201 0 returned -14 [ 176.067351][ T8025] binder: 8024:8025 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 176.068642][ T8025] binder: 8024:8025 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 176.650710][ T8039] hub 9-0:1.0: USB hub found [ 176.652645][ T8039] hub 9-0:1.0: 8 ports detected [ 176.708620][ T8042] fuse: Bad value for 'fd' [ 176.716690][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.721976][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.736905][ T8071] netlink: 'syz.3.1137': attribute type 3 has an invalid length. [ 177.767318][ T8074] binder: 8067:8074 ioctl c0306201 0 returned -14 [ 177.769112][ T8074] binder: 8067:8074 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 177.770425][ T8074] binder: 8067:8074 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 178.053426][ T8081] hub 9-0:1.0: USB hub found [ 178.054514][ T8081] hub 9-0:1.0: 8 ports detected [ 179.423901][ T8111] binder: 8110:8111 ioctl c0306201 0 returned -14 [ 179.427224][ T8111] binder: 8110:8111 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 179.428571][ T8111] binder: 8110:8111 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 180.808120][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 180.809673][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.901611][ T8151] binder: 8150:8151 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 180.903016][ T8151] binder: 8150:8151 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 180.956395][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.702671][ T8197] hub 9-0:1.0: USB hub found [ 182.703573][ T8197] hub 9-0:1.0: 8 ports detected [ 183.456148][ T8215] binder: 8210:8215 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 183.457878][ T8215] binder: 8210:8215 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 184.037012][ T4330] Bluetooth: hci3: command 0x0405 tx timeout [ 184.219441][ T8240] loop3: detected capacity change from 0 to 64 [ 185.565515][ T8266] binder: 8265:8266 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 185.566946][ T8266] binder: 8265:8266 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 187.056393][ T8286] loop4: detected capacity change from 0 to 131072 [ 187.070830][ T8286] F2FS-fs (loop4): invalid crc value [ 187.391750][ T8286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.396432][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.397642][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.442068][ T8286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 187.639476][ T8324] hub 9-0:1.0: USB hub found [ 187.640409][ T8324] hub 9-0:1.0: 8 ports detected [ 187.842796][ T8332] binder: 8331:8332 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 187.844998][ T8332] binder: 8331:8332 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 189.895051][ T8381] loop0: detected capacity change from 0 to 128 [ 189.899885][ T8381] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 191.104364][ T8407] binder: 8404:8407 ioctl c0306201 0 returned -14 [ 191.248945][ T8415] loop0: detected capacity change from 0 to 32768 [ 191.316388][ T8415] JBD2: Ignoring recovery information on journal [ 191.518901][ T8423] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.904212][ T8415] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 191.931435][ T4559] (kworker/u4:13,4559,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 191.994136][ T4326] ocfs2: Unmounting device (7,0) on (node local) [ 192.122415][ T8432] hub 9-0:1.0: USB hub found [ 192.123414][ T8432] hub 9-0:1.0: 8 ports detected [ 193.066381][ T8450] binder: 8447:8450 ioctl c0306201 0 returned -14 [ 195.228772][ T8455] loop4: detected capacity change from 0 to 40427 [ 195.247306][ T8455] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 195.251020][ T8455] F2FS-fs (loop4): invalid crc value [ 195.270689][ T8455] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.296901][ T8455] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.369963][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.371455][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.473964][ T8484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.740674][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 196.363458][ T4329] syz-executor: attempt to access beyond end of device [ 196.363458][ T4329] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.495790][ T8496] hub 9-0:1.0: USB hub found [ 196.496825][ T8496] hub 9-0:1.0: 8 ports detected [ 197.322251][ T8514] loop0: detected capacity change from 0 to 8192 [ 197.479855][ T8518] syz.0.1280: attempt to access beyond end of device [ 197.479855][ T8518] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 197.492365][ T8518] Buffer I/O error on dev loop0, logical block 57847, async page read [ 199.386093][ T8564] netlink: 'syz.4.1297': attribute type 3 has an invalid length. [ 200.255656][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.260050][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.878038][ T8629] syz.4.1319 (8629): drop_caches: 0 [ 201.914449][ T8631] bond1: (slave geneve3): Error -99 calling set_mac_address [ 203.719088][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.724475][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.695194][ T4330] Bluetooth: hci4: command 0x2021 tx timeout [ 207.460008][ T8765] misc userio: No port type given on /dev/userio [ 207.479653][ T8765] misc userio: The device must be registered before sending interrupts [ 207.722228][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'. [ 207.788202][ T8790] block device autoloading is deprecated and will be removed. [ 208.059942][ T8796] hub 9-0:1.0: USB hub found [ 208.060999][ T8796] hub 9-0:1.0: 8 ports detected [ 208.345203][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 211.954534][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.956098][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.166195][ T8898] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 212.455951][ T8841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.155148][ T7445] batman_adv: batadv0: IGMP Querier appeared [ 214.110912][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 215.017988][ T8969] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1435'. [ 215.102741][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.104371][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.314804][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 215.338103][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.339586][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.484281][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1456'. [ 217.320397][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.322186][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.473364][ T9074] hub 9-0:1.0: USB hub found [ 217.474307][ T9074] hub 9-0:1.0: 8 ports detected [ 218.096985][ T9091] Bluetooth: hci0: unsupported parameter 255 [ 218.097972][ T9091] Bluetooth: hci0: unsupported parameter 255 [ 218.174412][ T9096] netlink: 'syz.2.1479': attribute type 2 has an invalid length. [ 218.176148][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 218.371195][ T9102] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 218.393279][ T9104] UHID_CREATE from different security context by process 857 (syz.4.1482), this is not allowed. [ 218.410751][ T9102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.464545][ T9102] bond1: (slave vlan2): making interface the new active one [ 218.473872][ T9102] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 218.478201][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 218.591468][ T9112] device syzkaller0 entered promiscuous mode [ 219.027709][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.030477][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.175639][ T9134] hub 9-0:1.0: USB hub found [ 219.176760][ T9134] hub 9-0:1.0: 8 ports detected [ 219.235102][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.236646][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.195237][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 220.481438][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 221.063417][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.065029][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.150241][ T9185] hub 9-0:1.0: USB hub found [ 221.151128][ T9185] hub 9-0:1.0: 8 ports detected [ 221.469521][ T4337] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 221.473811][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.502738][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.715444][ T4337] Bluetooth: hci3: unexpected event for opcode 0x080d [ 222.097808][ T9215] hub 9-0:1.0: USB hub found [ 222.098843][ T9215] hub 9-0:1.0: 8 ports detected [ 223.364543][ T9247] hub 9-0:1.0: USB hub found [ 223.365564][ T9247] hub 9-0:1.0: 8 ports detected [ 224.677631][ T9283] mmap: syz.4.1545 (9283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.632920][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 226.423409][ T4337] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 226.561920][ T9344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1564'. [ 226.632645][ T9345] hub 9-0:1.0: USB hub found [ 226.633732][ T9345] hub 9-0:1.0: 8 ports detected [ 227.586241][ T9378] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1576'. [ 228.575629][ T9406] binder: 9405:9406 unknown command 1074553620 [ 228.576710][ T9406] binder: 9405:9406 ioctl c0306201 20000180 returned -22 [ 229.889395][ T9439] device syzkaller0 entered promiscuous mode [ 231.128825][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 231.317162][ T9489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1613'. [ 231.318814][ T9489] ------------[ cut here ]------------ [ 231.319709][ T9489] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:854 (size 16) [ 231.322169][ T9489] WARNING: CPU: 1 PID: 9489 at net/sched/cls_u32.c:854 u32_change+0x1698/0x1f18 [ 231.323624][ T9489] Modules linked in: [ 231.324215][ T9489] CPU: 1 PID: 9489 Comm: syz.3.1613 Not tainted syzkaller #0 [ 231.325521][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 231.327045][ T9489] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 231.328421][ T9489] pc : u32_change+0x1698/0x1f18 [ 231.329269][ T9489] lr : u32_change+0x1698/0x1f18 [ 231.329960][ T9489] sp : ffff800021886be0 [ 231.330597][ T9489] x29: ffff800021886d40 x28: ffff0000c9fd6800 x27: 0000000000000000 [ 231.331930][ T9489] x26: 1fffe000193fad0d x25: ffff0000c9fd7800 x24: ffff0000fb35fe00 [ 231.333246][ T9489] x23: 0000000000000010 x22: ffff700004310d8c x21: dfff800000000000 [ 231.334706][ T9489] x20: ffff800021887400 x19: ffff800017bda000 x18: ffff800011b8bf60 [ 231.335982][ T9489] x17: 1fffe00033eac97e x16: ffff8000082d91a4 x15: 0000000040000000 [ 231.337264][ T9489] x14: 0000000000000001 x13: 1fffe00033eaf030 x12: 0000000000ff0100 [ 231.338701][ T9489] x11: ff0080000a8db964 x10: 0000000000000003 x9 : 7f889e00fe8eb900 [ 231.339967][ T9489] x8 : 7f889e00fe8eb900 x7 : ffff80000825796c x6 : 0000000000000000 [ 231.341260][ T9489] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 231.342565][ T9489] x2 : 0000000000000006 x1 : ffff800011b8da80 x0 : ffff80018a3ff000 [ 231.343854][ T9489] Call trace: [ 231.344379][ T9489] u32_change+0x1698/0x1f18 [ 231.345094][ T9489] tc_new_tfilter+0xc28/0x1370 [ 231.345872][ T9489] rtnetlink_rcv_msg+0x6d8/0xcdc [ 231.346613][ T9489] netlink_rcv_skb+0x218/0x3e8 [ 231.347360][ T9489] rtnetlink_rcv+0x28/0x38 [ 231.348122][ T9489] netlink_unicast+0x60c/0x814 [ 231.348909][ T9489] netlink_sendmsg+0x6f4/0x9c0 [ 231.349778][ T9489] ____sys_sendmsg+0x5c8/0x938 [ 231.350607][ T9489] __sys_sendmmsg+0x344/0x834 [ 231.351422][ T9489] __arm64_sys_sendmmsg+0xa0/0xbc [ 231.352260][ T9489] invoke_syscall+0x98/0x2b4 [ 231.352994][ T9489] el0_svc_common+0x138/0x258 [ 231.353768][ T9489] do_el0_svc+0x58/0x130 [ 231.354447][ T9489] el0_svc+0x58/0x128 [ 231.355128][ T9489] el0t_64_sync_handler+0x84/0xf0 [ 231.355963][ T9489] el0t_64_sync+0x18c/0x190 [ 231.356724][ T9489] irq event stamp: 968 [ 231.357416][ T9489] hardirqs last enabled at (967): [] finish_lock_switch+0xb0/0x1c4 [ 231.358977][ T9489] hardirqs last disabled at (968): [] el1_dbg+0x24/0x80 [ 231.360365][ T9489] softirqs last enabled at (916): [] local_bh_enable+0x10/0x34 [ 231.361832][ T9489] softirqs last disabled at (910): [] local_bh_disable+0x10/0x34 [ 231.363237][ T9489] ---[ end trace 0000000000000000 ]---