last executing test programs: 22.991200237s ago: executing program 1 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 21.953326914s ago: executing program 1 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x4004001) 19.2104974s ago: executing program 1 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) shutdown(r3, 0x1) 17.067293596s ago: executing program 1 (id=979): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast1}, 0x1, 0x4, 0x4}}, 0x26) 14.370387961s ago: executing program 3 (id=976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x7a00}, 0x4000000) 9.723683658s ago: executing program 2 (id=986): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0xd, 0x20041) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), 0x0}, 0x20) socket(0x11, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9.459125123s ago: executing program 3 (id=988): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffe, 0xfef) bpf$MAP_CREATE(0x0, 0x0, 0x50) fremovexattr(0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5a8) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8.019183347s ago: executing program 4 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xc, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 7.173398521s ago: executing program 2 (id=990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x248b8, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.892056655s ago: executing program 0 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) dup(0xffffffffffffffff) 6.58111582s ago: executing program 4 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) 4.623918704s ago: executing program 4 (id=994): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4.623065224s ago: executing program 0 (id=995): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0x802c, @mcast1, 0x7}, 0xfffffffffffffe20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 4.564922934s ago: executing program 3 (id=996): socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffc, 0x13b}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x2b76, 0x0, 0x0, 0x0, 0x0) 4.398641687s ago: executing program 0 (id=997): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0x3) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000000) 4.331470768s ago: executing program 3 (id=998): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 4.271981259s ago: executing program 4 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000040)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x63, 0x20000000005, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) socket(0x10, 0x3, 0x0) 3.514910242s ago: executing program 2 (id=1000): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xe8ed, @private1, 0x80}}, 0x4, 0x8000}, &(0x7f0000000080)=0x90) 3.492438752s ago: executing program 1 (id=1001): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b3019c28", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000bc0)=""/68, 0x44}], 0x2}}], 0x1, 0x140, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.420008513s ago: executing program 0 (id=1002): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$eJzs3U1sHGf9B/DvrDdrO/+/UrdN2oKQGjUigkYkdpaSIEAEhFAOFYrEpRcOVuI0VjZp5bjIrRB1eb1y7KGHIhQOPaEekIo4VJQzEhInLrlH4u4Ti2Z2dr3Oxo43b7uBz0eanWfmeZnf/PzM7JusDfA/6/xrObCZIudPvLpRbt+62e7cutm+1i8nmU3SSJq9VYrrSfFZci69JZ8rd9bDFbsd55Xbn3xw/P2P2r2tZr1U7Rt79Rtx15ab9ZKjSWbq9QPYMd7FBx6vGMRdJuxYP3Ewad0Rm+N03/91C0ytove8OWIhOZhkrn4dkPru0Hi80T18Y93lAAAA4An11Fa2spFDk44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAniT17/8X9dLol4+m6P/+f6va16qatyYd74P6dNIBAAAAAAAAAMBD8OJWtrKRQ/3tblF95/9StXG4evy/vJUbWclaTmYjy1nPetaylGShqn+vemxtLK+vry3t1rPb7b7bnal6nh70zFDP0yOhFXtH3p194JMHAAAAAAAAgCfMHl+W/yznt7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkM71VtRzulxfSaCaZS9Iq220mf+6Xn2SfTjoAAAAAeAye2spWNnKo+Hdvu1tU7/mfq973z+WtXM96VrOeTlZyqfosoPeuv/H3zXbn1s32tXIZHfc7/xorjGrE9D57uPuRF6sWR+r2m0m+nx/mRI7mQtaymh9nOetZydF8ryotp8hCNdY/v5XUcY7EO1s+nNsRyoV7xfpCFcl8Lme1iu1kLg4+Bmn02wwd7Y+tZEeGGnmvzE7x7do+c3SpXpd/g9/U6+mwUJ3UgUFGFuvcl9l4+tZuua/05sns+Edq1nsag8+gDu91pPvM+cF6Xeb6V8M5f3G/ET8qwzkvozqdxmD2Pbd3zpMv/+MvF650rl+9cvnGiemZRrvqdrvv7l575+xrDzIxl+f3n4nNXTLx8c7Nmbu1mRvzhB6RVp2NXozbd8vk/PDdsttNRu6WL1V9D2U1P8gbuZSVnMlilnI2i/l6Tqe9Y4Yd2Tuv1bXWGO9aO/alujCf5Nf1ejqUeX16KK/Dd7qFqm54z3aWntlHlsa8IzU/XxfKY/x86Bln8u7MxNJQJp7dOxO/LWdkbnSuX127svzmPo93vF6Xl+0vdz4f/u5hnM/9K+fLM+Ufq9raOTvKumfvWrdU1R0e1DVG6o4M6u51pbbq13CjI/Xqnr9rXbuqe2GobsernLyRzuBVCADToju66+DLB1vzt+f/Nv/h/C/mr8y/Ovfd2bOzX2jlwF+bf5r5Q+P3jW8WL+fD/DSHJhEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8t7nx9jtXlzudlbUpLKQxXq/yfCYd89QWZpOM26toPtwwPk5y3937vxXY3/PFzkr+f49ezaEZvt1rKv4WD174xo/qZNyjcXO8y3y+HnB6flwMeHROrV9789SNt9/5yuq15ddXXl+5fvrsmbNn2l9b+uqpy6udlcXe46SjBB6F7Wf/SUcCAAAAAAAAAAAA7Nfj+I+FSZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GQ7/1oObKbI0uLJxXL71s12p1z65e2WzSSNJMVPkuKz5Fx6SxaGhit2O84rtz/54Pj7H7W3x2r22zf26rc/m/WSo0lm6vWdDUbN7mu8i8PjNe4nvGJwhmXCjvUTB5P2nwAAAP//euIAEg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x840000000002, 0x3, 0xff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x497c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.416224923s ago: executing program 4 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x29, 0x4000, @fd_index=0x5, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, r8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x1469, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47e9, 0xeb13, 0x6, 0x0, 0x0) 3.402936534s ago: executing program 3 (id=1004): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x20800, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r3) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x2000c12, &(0x7f0000000280)=ANY=[@ANYBLOB='hide,check=relaxed,iocharset=macturki00000000000023b3,overriderockperm,map=normal,unhide,hide,iocharset=cp437,iocharset=iso8859-2,unhide,cruft,mode=0x0000000000000008,sbsector=0x0000000000008001,\x00'], 0x4, 0xa27, &(0x7f0000003500)="$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") 2.996885951s ago: executing program 1 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r4, 0x0) 1.756247681s ago: executing program 0 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000400)) unshare(0x4020400) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 1.674394723s ago: executing program 4 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) connect$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x2711}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) 1.032031243s ago: executing program 2 (id=1008): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) userfaultfd(0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) socket(0x28, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 917.449445ms ago: executing program 3 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r1, 0x4, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 786.002488ms ago: executing program 0 (id=1010): socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 0s ago: executing program 2 (id=1011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) kernel console output (not intermixed with test programs): [ 39.431291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.439566][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.448783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.451156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.454507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.458231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.460756][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.462765][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.475722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.478488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.481188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.484287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.486743][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.488672][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.491958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.494777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.497792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.506510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.509008][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.511565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.515038][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.517020][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.528679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.531492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.540939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.544534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.556483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.559204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.561739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.570677][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.575491][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.579573][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.586980][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.598020][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.601249][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.611871][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.615619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.618349][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.621049][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.623968][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.626320][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.631217][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.634605][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.644748][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.661044][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.664471][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.667110][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.669503][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.672054][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.685252][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.691823][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.694859][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.697344][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.699287][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.701831][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.705622][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.708336][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.710251][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.713617][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.716017][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.733105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.735814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.738809][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.740765][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.752889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.761952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.765765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.768171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.770140][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.773271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.798741][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.808346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.811401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.820738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.824096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.826870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.829450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.831558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.836049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.838554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.841013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.843917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.846942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.849356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.851706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.854815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.859042][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.861583][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.866716][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.869922][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.895495][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.897930][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.900742][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.907426][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.909378][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.911660][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.919428][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.921918][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.923941][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.927913][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.930689][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.939150][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.941764][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.959777][ T4297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.963878][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.979787][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.982659][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.985999][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.989232][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.995404][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.997971][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.000527][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.004156][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.006715][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.009194][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.011869][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.021773][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.024562][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.026938][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.029431][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.031940][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.034842][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.041662][ T4303] device veth0_vlan entered promiscuous mode [ 40.048999][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.051565][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.055931][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.058062][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.062602][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.065028][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.069150][ T4303] device veth1_vlan entered promiscuous mode [ 40.081406][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.096906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.099744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.164777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.167531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.170197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.174043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.183556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.186941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.190888][ T4303] device veth0_macvtap entered promiscuous mode [ 40.201924][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.205258][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.207379][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.209582][ T4295] device veth0_vlan entered promiscuous mode [ 40.213730][ T4303] device veth1_macvtap entered promiscuous mode [ 40.249765][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.258618][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.261150][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.264605][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.275794][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.295990][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.298780][ T4295] device veth1_vlan entered promiscuous mode [ 40.301706][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.306963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.309634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.327106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.329264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.349918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.352106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.358686][ T4303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.361164][ T4303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.366089][ T4303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.368483][ T4303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.380805][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.403176][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.424179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.426700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.429338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.434541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.437281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.457265][ T4295] device veth0_macvtap entered promiscuous mode [ 40.461274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.466406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.469007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.484417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.486826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.490167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.494270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.500604][ T4295] device veth1_macvtap entered promiscuous mode [ 40.506533][ T4296] device veth0_vlan entered promiscuous mode [ 40.525931][ T4296] device veth1_vlan entered promiscuous mode [ 40.530342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.533364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.536865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.539633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.544778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.547399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.550321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.553058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.555922][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.558887][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.563080][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.567955][ T4297] device veth0_vlan entered promiscuous mode [ 40.571478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.574797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.586194][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.589024][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.593536][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.609820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.613550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.616225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.624387][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.626780][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.629082][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.631409][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.644734][ T4297] device veth1_vlan entered promiscuous mode [ 40.652544][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 40.652568][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 40.654219][ T4308] Bluetooth: hci2: command 0x041b tx timeout [ 40.655849][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 40.679102][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.681535][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.683949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.686806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.689398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.696385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.709525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.713180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.715769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.718357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.720903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.724261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.726739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.731313][ T4297] device veth0_macvtap entered promiscuous mode [ 40.734060][ T4308] Bluetooth: hci4: command 0x041b tx timeout [ 40.735923][ T4297] device veth1_macvtap entered promiscuous mode [ 40.766510][ T4304] device veth0_vlan entered promiscuous mode [ 40.786480][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.788656][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.791803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.795639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.798514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.802158][ T4296] device veth0_macvtap entered promiscuous mode [ 40.809219][ T4304] device veth1_vlan entered promiscuous mode [ 40.816052][ T4296] device veth1_macvtap entered promiscuous mode [ 40.818743][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.821625][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.824717][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.827469][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.831139][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.836369][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.839353][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.842061][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.847245][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.851326][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.856328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.858524][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.870908][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.873925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.876439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.879067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.882148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.885978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.888693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.891641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.909046][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.911414][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.918925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.921492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.926485][ T4297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.928890][ T4297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.931279][ T4297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.935483][ T4297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.940575][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.948110][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.950876][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.956633][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.959333][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.962100][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.993722][ T27] audit: type=1326 audit(40.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 40.999397][ T27] audit: type=1326 audit(40.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.000438][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.010558][ T27] audit: type=1326 audit(40.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.017377][ T27] audit: type=1326 audit(40.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.023742][ T27] audit: type=1326 audit(40.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.030304][ T27] audit: type=1326 audit(40.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.041594][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.044854][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.050213][ T27] audit: type=1326 audit(40.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.076746][ T27] audit: type=1326 audit(40.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.084128][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.087428][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.090013][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.097252][ T27] audit: type=1326 audit(40.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.105132][ T27] audit: type=1326 audit(40.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 41.111290][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.117021][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.119818][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.125603][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.131824][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.135514][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.138185][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.141300][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.150423][ T4304] device veth0_macvtap entered promiscuous mode [ 41.190574][ T4304] device veth1_macvtap entered promiscuous mode [ 41.210347][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.218122][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.220484][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.247249][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.295586][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.297775][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.328325][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.330912][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.333769][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.358780][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.361696][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.364953][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.368074][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.370863][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.375201][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.378089][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.381005][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.386397][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.400234][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.403603][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.445680][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.447857][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.450740][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.621579][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.624569][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.627347][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.631025][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.635193][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.638024][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.640628][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.644918][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.648914][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.656478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.659278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.830804][ T4400] loop0: detected capacity change from 0 to 8192 [ 42.055850][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.068936][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.072471][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.355533][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.357892][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.402719][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.405206][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.407527][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.409822][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.425087][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.675983][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.678237][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.689795][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.742636][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 42.742962][ T4312] Bluetooth: hci2: command 0x040f tx timeout [ 42.746643][ T4312] Bluetooth: hci1: command 0x040f tx timeout [ 42.812832][ T4308] Bluetooth: hci4: command 0x040f tx timeout [ 43.432551][ T4301] Bluetooth: hci3: command 0x040f tx timeout [ 43.454956][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.457128][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.483485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.499598][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.501794][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.505668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.696133][ T4433] bridge0: port 3(vlan2) entered blocking state [ 44.697949][ T4433] bridge0: port 3(vlan2) entered disabled state [ 44.717969][ T4433] device vlan2 entered promiscuous mode [ 44.719554][ T4433] device bond0 entered promiscuous mode [ 44.720974][ T4433] device bond_slave_0 entered promiscuous mode [ 44.740873][ T4433] device bond_slave_1 entered promiscuous mode [ 44.809736][ T4437] loop2: detected capacity change from 0 to 512 [ 44.812806][ T4308] Bluetooth: hci0: command 0x0419 tx timeout [ 44.814570][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 44.816217][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 44.828057][ T4437] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 44.893151][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 45.903066][ T4449] loop0: detected capacity change from 0 to 512 [ 45.982162][ T4449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.452208][ C0] sched: RT throttling activated [ 46.460549][ T4308] Bluetooth: hci3: command 0x0419 tx timeout [ 47.440954][ T4449] EXT4-fs (loop0): 1 orphan inode deleted [ 47.442620][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.365766][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 48.409130][ T4467] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 48.425484][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.429176][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1 [ 48.710784][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 48.961533][ T4478] tipc: Started in network mode [ 48.978785][ T4478] tipc: Node identity 461508974df7, cluster identity 4711 [ 48.980827][ T4478] tipc: Enabled bearer , priority 0 [ 49.010425][ T4478] device syzkaller0 entered promiscuous mode [ 49.816501][ T4478] tipc: Resetting bearer [ 49.823685][ T4482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33'. [ 49.833474][ T4482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33'. [ 49.835980][ T4482] Zero length message leads to an empty skb [ 49.929555][ T4477] tipc: Resetting bearer [ 50.013592][ T4477] tipc: Disabling bearer [ 50.037940][ T4488] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 50.213051][ T4502] loop2: detected capacity change from 0 to 128 [ 50.226709][ T4504] loop3: detected capacity change from 0 to 1024 [ 50.231238][ T4500] binder: 4499:4500 tried to acquire reference to desc 0, got 1 instead [ 50.238503][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.242113][ T4500] binder: 4499:4500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.261279][ T4500] binder: 4500 RLIMIT_NICE not set [ 50.262364][ T4504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.262725][ T4500] binder: 4500 RLIMIT_NICE not set [ 50.318750][ T4345] binder: release 4499:4500 transaction 5 out, still active [ 50.320905][ T4345] binder: undelivered TRANSACTION_COMPLETE [ 50.334820][ T4345] binder: release 4499:4500 transaction 5 in, still active [ 50.336788][ T4345] binder: send failed reply for transaction 5, target dead [ 51.546576][ T4515] mmap: syz.4.43 (4515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.595564][ T4504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.816917][ T4515] loop4: detected capacity change from 0 to 256 [ 51.819300][ T4515] exfat: Deprecated parameter 'namecase' [ 52.449950][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 52.570667][ T4526] loop0: detected capacity change from 0 to 164 [ 52.594636][ T4515] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 52.613983][ T4526] rock: directory entry would overflow storage [ 52.615805][ T4526] rock: sig=0x5053, size=7, remaining=4 [ 52.617307][ T4526] isofs_fill_super: root inode is not a directory. Corrupted media? [ 52.699460][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 53.806689][ T4547] loop3: detected capacity change from 0 to 128 [ 55.282795][ T4547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.608108][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 57.314748][ T4591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'. [ 57.778550][ T4592] loop3: detected capacity change from 0 to 8 [ 58.877811][ T4609] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 59.962489][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 59.988597][ T4613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.73'. [ 60.285727][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 63.105930][ T4645] loop4: detected capacity change from 0 to 32768 [ 63.131153][ T4337] kernel write not supported for file bpf-prog (pid: 4337 comm: kworker/0:4) [ 63.347973][ T4661] capability: warning: `syz.3.87' uses deprecated v2 capabilities in a way that may be insecure [ 63.756056][ T4665] loop0: detected capacity change from 0 to 1024 [ 63.758407][ T4665] EXT4-fs: Ignoring removed orlov option [ 63.787417][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 63.855972][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.878107][ T4672] loop1: detected capacity change from 0 to 128 [ 63.934397][ T4672] FAT-fs (loop1): bogus logical sector size 0 [ 63.936321][ T4672] FAT-fs (loop1): Can't find a valid FAT filesystem [ 64.496525][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498809][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.191340][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 66.248080][ T4695] loop3: detected capacity change from 0 to 512 [ 66.250275][ T4695] ======================================================= [ 66.250275][ T4695] WARNING: The mand mount option has been deprecated and [ 66.250275][ T4695] and is ignored by this kernel. Remove the mand [ 66.250275][ T4695] option from the mount to silence this warning. [ 66.250275][ T4695] ======================================================= [ 66.291303][ T4695] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 66.302364][ T4695] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 67.372456][ T4707] loop0: detected capacity change from 0 to 8 [ 67.427844][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 67.449548][ T4707] SQUASHFS error: zlib decompression failed, data probably corrupt [ 67.451979][ T4707] SQUASHFS error: Failed to read block 0x9b: -5 [ 67.457453][ T4707] SQUASHFS error: Unable to read metadata cache entry [99] [ 67.459566][ T4707] SQUASHFS error: Unable to read inode 0x127 [ 67.613082][ T4719] loop0: detected capacity change from 0 to 2048 [ 68.415479][ T4719] loop0: p2 p3 < > p4 < p5 > [ 68.417053][ T4719] loop0: partition table partially beyond EOD, truncated [ 68.421575][ T4719] loop0: p3 start 4284289 is beyond EOD, truncated [ 68.688741][ T4729] loop3: detected capacity change from 0 to 256 [ 68.720815][ T4729] FAT-fs (loop3): Directory bread(block 64) failed [ 68.742486][ T4729] FAT-fs (loop3): Directory bread(block 65) failed [ 68.744542][ T4729] FAT-fs (loop3): Directory bread(block 66) failed [ 68.746389][ T4729] FAT-fs (loop3): Directory bread(block 67) failed [ 68.748132][ T4729] FAT-fs (loop3): Directory bread(block 68) failed [ 68.749880][ T4729] FAT-fs (loop3): Directory bread(block 69) failed [ 68.751692][ T4729] FAT-fs (loop3): Directory bread(block 70) failed [ 68.782387][ T4729] FAT-fs (loop3): Directory bread(block 71) failed [ 68.784310][ T4729] FAT-fs (loop3): Directory bread(block 72) failed [ 68.797547][ T4729] FAT-fs (loop3): Directory bread(block 73) failed [ 69.642817][ T113] cfg80211: failed to load regulatory.db [ 69.880285][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 70.893006][ T4745] tipc: Started in network mode [ 70.894380][ T4745] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.896894][ T4745] tipc: Enabled bearer , priority 10 [ 70.935477][ T4745] tipc: Enabled bearer , priority 0 [ 71.975590][ T4347] tipc: Node number set to 2886997162 [ 72.384464][ T4762] loop0: detected capacity change from 0 to 256 [ 72.421828][ T4762] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.632313][ T4762] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 72.640566][ T4762] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.396913][ T4769] loop1: detected capacity change from 0 to 2048 [ 73.400842][ T4769] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 73.548481][ T4769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.020174][ T4807] device ip6tnl1 entered promiscuous mode [ 79.169740][ T4808] loop1: detected capacity change from 0 to 4096 [ 79.197095][ T4808] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 80.895087][ T4808] ntfs3: loop1: Failed to load $Secure. [ 81.173841][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 84.390779][ T4853] loop3: detected capacity change from 0 to 1024 [ 84.510575][ T4853] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.514304][ T4853] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.516915][ T4853] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.143: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.543971][ T4853] EXT4-fs (loop3): 1 orphan inode deleted [ 84.545571][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.613529][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 86.319478][ T4878] loop2: detected capacity change from 0 to 2048 [ 86.510666][ T4878] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 86.512922][ T4878] UDF-fs: Scanning with blocksize 512 failed [ 86.586929][ T4878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.748142][ T4893] netlink: 165 bytes leftover after parsing attributes in process `syz.3.152'. [ 89.807178][ T4913] loop0: detected capacity change from 0 to 1024 [ 89.834255][ T4913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.137825][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 91.181147][ T4915] loop2: detected capacity change from 0 to 32768 [ 91.227350][ T4915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.162 (4915) [ 91.295556][ T4915] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.302581][ T4915] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 91.304940][ T4915] BTRFS info (device loop2): using free space tree [ 92.311607][ T4915] BTRFS info (device loop2): enabling ssd optimizations [ 92.499063][ T4297] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.558216][ T4994] tipc: Started in network mode [ 94.559622][ T4994] tipc: Node identity 1274cf6224f2, cluster identity 4711 [ 94.561519][ T4994] tipc: Enabled bearer , priority 0 [ 94.583893][ T4994] device syzkaller0 entered promiscuous mode [ 94.638185][ T4994] tipc: Resetting bearer [ 94.662127][ T4993] tipc: Resetting bearer [ 94.733118][ T4993] tipc: Disabling bearer [ 95.071315][ T4990] loop1: detected capacity change from 0 to 32768 [ 95.137442][ T4990] XFS (loop1): Mounting V5 Filesystem [ 95.189538][ T4990] XFS (loop1): Ending clean mount [ 95.208427][ T4990] XFS (loop1): Quotacheck needed: Please wait. [ 95.251774][ T4990] XFS (loop1): Quotacheck: Done. [ 95.331194][ T4296] XFS (loop1): Unmounting Filesystem [ 96.410552][ T5029] loop3: detected capacity change from 0 to 512 [ 96.413336][ T5029] EXT4-fs: Ignoring removed i_version option [ 96.422850][ T5029] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.698373][ T5029] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.040254][ T5029] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 98.057487][ T5029] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.061775][ T5029] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 98.115044][ T5029] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 98.132990][ T5029] EXT4-fs (loop3): Remounting filesystem read-only [ 98.152754][ T5029] EXT4-fs (loop3): 1 truncate cleaned up [ 98.154411][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.158637][ T5040] loop0: detected capacity change from 0 to 2048 [ 98.260369][ T5029] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 98.372878][ T5051] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.756294][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 100.244840][ T5064] loop3: detected capacity change from 0 to 512 [ 101.782770][ T5064] EXT4-fs (loop3): 1 orphan inode deleted [ 101.784597][ T5064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.423652][ T4401] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.426474][ T4401] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 1 [ 104.410199][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 104.433719][ T5078] loop4: detected capacity change from 0 to 128 [ 104.485520][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 104.491259][ T5082] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 104.500873][ T5086] loop0: detected capacity change from 0 to 128 [ 104.516004][ T5078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.527387][ T5086] FAT-fs (loop0): bogus logical sector size 0 [ 104.541614][ T5086] FAT-fs (loop0): Can't find a valid FAT filesystem [ 104.633418][ T5082] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.649066][ T5082] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.656889][ T5082] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.668876][ T5082] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.678249][ T5082] bond1: (slave geneve2): making interface the new active one [ 104.688259][ T5082] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.694648][ T5090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.767105][ T5095] loop1: detected capacity change from 0 to 512 [ 104.800277][ T5095] EXT4-fs: Ignoring removed i_version option [ 104.818138][ T5095] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.831892][ T5095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.837699][ T5095] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 104.840433][ T5095] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.840905][ T5099] netlink: 'syz.3.208': attribute type 13 has an invalid length. [ 104.851012][ T5095] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 104.853810][ T5095] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 104.862786][ T5095] EXT4-fs (loop1): Remounting filesystem read-only [ 104.864943][ T5095] EXT4-fs (loop1): 1 truncate cleaned up [ 104.866448][ T5095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.894270][ T5095] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 107.589370][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 107.670289][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.673499][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.104570][ T5131] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.111730][ T5131] CIFS mount error: No usable UNC path provided in device string! [ 109.111730][ T5131] [ 109.114687][ T5131] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 117.236618][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.560941][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.722856][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 118.206443][ T5099] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.208896][ T5099] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.211339][ T5099] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.213863][ T5099] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.469248][ T5099] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.472422][ T5099] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.475095][ T5099] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.477730][ T5099] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.529977][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 118.568220][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 118.650594][ T5210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 118.661398][ T5210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 118.756547][ T5216] loop0: detected capacity change from 0 to 128 [ 118.800509][ T5216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.972078][ T5216] process 'syz.0.243' launched '/dev/fd/3' with NULL argv: empty string added [ 119.073550][ T5226] loop3: detected capacity change from 0 to 256 [ 119.088081][ T5226] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.091205][ T5226] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 119.414923][ T5226] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 121.051521][ T5237] No such timeout policy "syz1" [ 121.833064][ T5230] loop4: detected capacity change from 0 to 131072 [ 121.931181][ T5230] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.950044][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 121.974384][ T5230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.870793][ T5258] loop3: detected capacity change from 0 to 8 [ 123.886453][ T5258] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 124.217333][ T5258] cramfs: Error -5 while decompressing! [ 124.219074][ T5258] cramfs: 00000000033595b2(26)->00000000c7b8b2a0(4096) [ 124.221293][ T5258] cramfs: Error -3 while decompressing! [ 124.222972][ T5258] cramfs: 00000000ed03f4e1(26)->00000000dcc09d07(4096) [ 124.224950][ T5258] cramfs: Error -3 while decompressing! [ 124.226479][ T5258] cramfs: 000000005c171c7a(16)->00000000ed236ed9(4096) [ 124.228968][ T5258] cramfs: Error -5 while decompressing! [ 124.230528][ T5258] cramfs: 00000000033595b2(26)->00000000c7b8b2a0(4096) [ 124.687553][ T4287] udevd[4287]: incorrect cramfs checksum on /dev/loop3 [ 124.920844][ T5270] loop3: detected capacity change from 0 to 256 [ 124.936872][ T5270] exfat: Deprecated parameter 'namecase' [ 124.938432][ T5270] exfat: Deprecated parameter 'codepage' [ 124.939978][ T5270] exfat: Bad value for 'codepage' [ 125.125610][ T5270] loop3: detected capacity change from 0 to 1024 [ 125.141777][ T5270] EXT4-fs: Ignoring removed nobh option [ 125.156186][ T5270] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.194453][ T5270] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 125.281104][ T5272] loop0: detected capacity change from 0 to 2048 [ 125.395603][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.429886][ T5277] loop4: detected capacity change from 0 to 128 [ 125.574064][ T5277] syz.4.252: attempt to access beyond end of device [ 125.574064][ T5277] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 125.669299][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 125.782751][ T5277] syz.4.252: attempt to access beyond end of device [ 125.782751][ T5277] loop4: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 125.845065][ T5277] syz.4.252: attempt to access beyond end of device [ 125.845065][ T5277] loop4: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 125.881530][ T5277] syz.4.252: attempt to access beyond end of device [ 125.881530][ T5277] loop4: rw=0, sector=241, nr_sectors = 8 limit=128 [ 125.898946][ T5277] syz.4.252: attempt to access beyond end of device [ 125.898946][ T5277] loop4: rw=0, sector=241, nr_sectors = 8 limit=128 [ 125.930258][ T5277] syz.4.252: attempt to access beyond end of device [ 125.930258][ T5277] loop4: rw=0, sector=241, nr_sectors = 8 limit=128 [ 125.933067][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935529][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.937755][ T27] audit: type=1326 audit(125.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa215a7a8 code=0x7fc00000 [ 125.942055][ T5283] syz.4.252: attempt to access beyond end of device [ 125.942055][ T5283] loop4: rw=0, sector=241, nr_sectors = 1 limit=128 [ 125.957642][ T5277] syz.4.252: attempt to access beyond end of device [ 125.957642][ T5277] loop4: rw=0, sector=241, nr_sectors = 1 limit=128 [ 125.961318][ T5277] Buffer I/O error on dev loop4, logical block 241, async page read [ 125.985015][ T5277] syz.4.252: attempt to access beyond end of device [ 125.985015][ T5277] loop4: rw=0, sector=242, nr_sectors = 1 limit=128 [ 126.011487][ T5277] Buffer I/O error on dev loop4, logical block 242, async page read [ 126.014157][ T5277] syz.4.252: attempt to access beyond end of device [ 126.014157][ T5277] loop4: rw=0, sector=243, nr_sectors = 1 limit=128 [ 126.017916][ T5277] Buffer I/O error on dev loop4, logical block 243, async page read [ 126.020394][ T5277] Buffer I/O error on dev loop4, logical block 244, async page read [ 126.028428][ T5277] Buffer I/O error on dev loop4, logical block 245, async page read [ 126.030833][ T5277] Buffer I/O error on dev loop4, logical block 246, async page read [ 126.033748][ T5277] Buffer I/O error on dev loop4, logical block 247, async page read [ 126.036080][ T5277] Buffer I/O error on dev loop4, logical block 248, async page read [ 126.039160][ T5276] Buffer I/O error on dev loop4, logical block 241, async page read [ 126.041542][ T5276] Buffer I/O error on dev loop4, logical block 242, async page read [ 126.985714][ T27] audit: type=1326 audit(126.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa215a7a8 code=0x7fc00000 [ 129.160832][ T5330] No such timeout policy "syz1" [ 130.028212][ T4308] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 130.032075][ T4308] Bluetooth: hci2: Injecting HCI hardware error event [ 130.035511][ T4301] Bluetooth: hci2: hardware error 0x00 [ 130.828627][ T5350] loop3: detected capacity change from 0 to 2048 [ 130.854754][ T5350] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 130.856972][ T5350] UDF-fs: Scanning with blocksize 512 failed [ 130.878553][ T5350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.769094][ T4301] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.802385][ T5384] No such timeout policy "syz1" [ 135.024206][ T5380] loop4: detected capacity change from 0 to 128 [ 137.380294][ T5407] loop0: detected capacity change from 0 to 2048 [ 137.411377][ T5407] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 137.413653][ T5407] UDF-fs: Scanning with blocksize 512 failed [ 137.437875][ T5407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.119917][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 138.206952][ T5414] bridge1: port 1(ip6gretap1) entered blocking state [ 138.219694][ T5414] bridge1: port 1(ip6gretap1) entered disabled state [ 138.226828][ T5414] device ip6gretap1 entered promiscuous mode [ 139.073030][ T5416] device veth3 entered promiscuous mode [ 139.091794][ T5416] bridge1: port 2(veth3) entered blocking state [ 139.101114][ T5416] bridge1: port 2(veth3) entered disabled state [ 140.850228][ T5434] loop4: detected capacity change from 0 to 128 [ 140.861060][ T5434] FAT-fs (loop4): bogus logical sector size 0 [ 140.862904][ T5434] FAT-fs (loop4): Can't find a valid FAT filesystem [ 140.865767][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.881828][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.667345][ T5447] loop1: detected capacity change from 0 to 256 [ 142.289454][ T5447] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.292564][ T5447] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 142.390173][ T5447] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.967052][ T4872] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.060765][ T5437] Bluetooth: MGMT ver 1.22 [ 145.055449][ T5475] loop0: detected capacity change from 0 to 1024 [ 145.958671][ T5478] loop1: detected capacity change from 0 to 2048 [ 146.086329][ T5478] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 146.088680][ T5478] UDF-fs: Scanning with blocksize 512 failed [ 146.111615][ T5478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.616612][ T5475] EXT4-fs: Ignoring removed nobh option [ 146.618228][ T5475] EXT4-fs: Ignoring removed bh option [ 146.655819][ T5475] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.743480][ T5475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.941727][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 146.958216][ T5493] bridge1: port 1(ip6gretap1) entered blocking state [ 146.960232][ T5493] bridge1: port 1(ip6gretap1) entered disabled state [ 146.962900][ T5493] device ip6gretap1 entered promiscuous mode [ 148.135586][ T5493] device veth3 entered promiscuous mode [ 148.140098][ T5493] bridge1: port 2(veth3) entered blocking state [ 148.150212][ T5493] bridge1: port 2(veth3) entered disabled state [ 148.232961][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 148.264533][ T5499] loop1: detected capacity change from 0 to 128 [ 148.536955][ T5499] bio_check_eod: 5421 callbacks suppressed [ 148.536969][ T5499] syz.1.330: attempt to access beyond end of device [ 148.536969][ T5499] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 149.483552][ T5511] loop4: detected capacity change from 0 to 256 [ 150.171747][ T5511] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.175059][ T5511] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 150.248019][ T5511] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 150.772006][ T5515] loop2: detected capacity change from 0 to 1024 [ 150.799341][ T5515] EXT4-fs: Ignoring removed orlov option [ 150.830542][ T5515] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 150.843000][ T5515] EXT4-fs (loop2): invalid journal inode [ 150.844702][ T5515] EXT4-fs (loop2): can't get journal size [ 150.919217][ T4663] kworker/u4:14: attempt to access beyond end of device [ 150.919217][ T4663] loop1: rw=1, sector=241, nr_sectors = 1 limit=128 [ 150.927747][ T4663] buffer_io_error: 5414 callbacks suppressed [ 150.927757][ T4663] Buffer I/O error on dev loop1, logical block 241, lost async page write [ 150.946247][ T5515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.932180][ T5528] loop0: detected capacity change from 0 to 8 [ 151.940177][ T5528] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 152.019250][ T5528] cramfs: Error -5 while decompressing! [ 152.020904][ T5528] cramfs: 00000000232a574c(26)->0000000097abae1d(4096) [ 152.023050][ T5528] cramfs: Error -3 while decompressing! [ 152.024595][ T5528] cramfs: 0000000071419e8d(26)->00000000be78ee71(4096) [ 152.026606][ T5528] cramfs: Error -3 while decompressing! [ 152.028169][ T5528] cramfs: 00000000d7941e5f(16)->0000000079be1b5b(4096) [ 152.030637][ T5528] cramfs: Error -5 while decompressing! [ 152.032275][ T5528] cramfs: 00000000232a574c(26)->0000000097abae1d(4096) [ 154.381365][ T5546] loop4: detected capacity change from 0 to 2048 [ 154.544050][ T5546] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 154.546226][ T5546] UDF-fs: Scanning with blocksize 512 failed [ 154.568100][ T5546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.243573][ T5536] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 155.376127][ T5536] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.378611][ T5536] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.380974][ T5536] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.398827][ T5536] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.408077][ T5536] bond1: (slave geneve2): making interface the new active one [ 155.415377][ T5538] loop0: detected capacity change from 0 to 32768 [ 155.417794][ T5536] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 155.439405][ T5536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.470175][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 155.493921][ T5538] XFS (loop0): Mounting V5 Filesystem [ 155.497655][ T5554] loop4: detected capacity change from 0 to 256 [ 155.547399][ T5554] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.550467][ T5554] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 157.027133][ T5538] XFS (loop0): AIL initialisation failed: error -12 [ 157.042503][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.064140][ T5554] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.146033][ T5538] XFS (loop0): log mount failed [ 158.579241][ T5587] loop1: detected capacity change from 0 to 1024 [ 158.676926][ T5587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.656746][ T5595] loop4: detected capacity change from 0 to 512 [ 163.840261][ T4312] Bluetooth: hci3: command 0x0406 tx timeout [ 163.841981][ T4312] Bluetooth: hci1: command 0x0406 tx timeout [ 163.842675][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 163.845117][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 163.872678][ T5587] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 163.877056][ T5595] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 164.160684][ T5607] loop1: detected capacity change from 0 to 8 [ 165.511101][ T5613] loop3: detected capacity change from 0 to 2048 [ 165.615977][ T5613] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.618266][ T5613] UDF-fs: Scanning with blocksize 512 failed [ 165.649125][ T5613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.593716][ T5634] loop2: detected capacity change from 0 to 2048 [ 168.600695][ T5634] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 168.624914][ T5634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.400262][ T5639] syz.4.355 sent an empty control message without MSG_MORE. [ 170.535949][ T5646] netlink: 'syz.4.357': attribute type 13 has an invalid length. [ 170.855556][ T5656] loop0: detected capacity change from 0 to 1024 [ 170.884674][ T5656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.967385][ T5656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.673651][ T5665] loop2: detected capacity change from 0 to 512 [ 173.287757][ T5669] loop1: detected capacity change from 0 to 2048 [ 174.466341][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 175.182072][ T5669] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 175.184396][ T5669] UDF-fs: Scanning with blocksize 512 failed [ 175.207929][ T5669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.271096][ T5665] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 177.246854][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.249159][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.757915][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.787954][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.224836][ T5646] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.227372][ T5646] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.229765][ T5646] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.232142][ T5646] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.550916][ T5679] tipc: Enabling of bearer rejected, failed to enable media [ 178.748252][ T5700] loop3: detected capacity change from 0 to 2048 [ 178.750862][ T5700] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 179.109028][ T5701] loop2: detected capacity change from 0 to 8 [ 179.119569][ T5701] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 179.289769][ T5701] cramfs: Error -5 while decompressing! [ 179.291572][ T5701] cramfs: 00000000033595b2(26)->0000000022afc686(4096) [ 179.294034][ T5701] cramfs: Error -3 while decompressing! [ 179.295610][ T5701] cramfs: 00000000ed03f4e1(26)->00000000319cd1e9(4096) [ 179.297778][ T5701] cramfs: Error -3 while decompressing! [ 179.299308][ T5701] cramfs: 000000005c171c7a(16)->00000000fe4098bc(4096) [ 179.302550][ T5701] cramfs: Error -5 while decompressing! [ 179.304055][ T5701] cramfs: 00000000033595b2(26)->0000000022afc686(4096) [ 180.004031][ T4287] udevd[4287]: incorrect cramfs checksum on /dev/loop2 [ 180.021680][ T5700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.509502][ T4287] udevd[4287]: incorrect cramfs checksum on /dev/loop2 [ 183.097084][ T5720] binder: 5706:5720 tried to acquire reference to desc 0, got 1 instead [ 183.123255][ T5720] binder: release 5706:5720 transaction 10 out, still active [ 183.222808][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 183.237546][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 183.275307][ T5720] binder: undelivered TRANSACTION_COMPLETE [ 183.350121][ T4345] binder: send failed reply for transaction 10, target dead [ 183.607802][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.373'. [ 185.291728][ T5746] netlink: 96 bytes leftover after parsing attributes in process `syz.2.378'. [ 186.923708][ T5766] loop4: detected capacity change from 0 to 8 [ 186.926019][ T5766] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 187.159881][ T5766] cramfs: Error -5 while decompressing! [ 187.161498][ T5766] cramfs: 00000000232a574c(26)->00000000abd6e5fa(4096) [ 187.163691][ T5766] cramfs: Error -3 while decompressing! [ 187.165257][ T5766] cramfs: 0000000071419e8d(26)->0000000055e556e0(4096) [ 187.167337][ T5766] cramfs: Error -3 while decompressing! [ 187.168923][ T5766] cramfs: 00000000d7941e5f(16)->000000000265d6e6(4096) [ 187.171369][ T5766] cramfs: Error -5 while decompressing! [ 187.172974][ T5766] cramfs: 00000000232a574c(26)->00000000abd6e5fa(4096) [ 187.556755][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.558526][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.741613][ T4872] udevd[4872]: incorrect cramfs checksum on /dev/loop4 [ 187.768841][ T5769] loop3: detected capacity change from 0 to 2048 [ 188.046046][ T5769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.312250][ T4308] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 189.315656][ T4308] Bluetooth: hci1: Injecting HCI hardware error event [ 189.318473][ T4308] Bluetooth: hci1: hardware error 0x00 [ 189.344896][ T5782] fuse: Unknown parameter 'fd18446744073709551615' [ 189.354878][ T5784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.357381][ T5784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.367782][ T5784] loop4: detected capacity change from 0 to 512 [ 190.175243][ T27] audit: type=1326 audit(190.150:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.1.388" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ef5a7a8 code=0x0 [ 190.343611][ T5784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.381401][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 190.392426][ T5794] netlink: 'syz.0.393': attribute type 5 has an invalid length. [ 190.394700][ T5794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 190.399399][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 190.401741][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 190.407618][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 190.409952][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 190.416266][ T5794] device geneve2 entered promiscuous mode [ 190.886923][ T5784] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 191.027761][ T5784] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.228730][ T5798] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 191.407830][ T5798] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 191.412165][ T5798] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.252470][ T4308] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 192.273348][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 192.293561][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 194.142730][ T5815] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 194.156790][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 194.331115][ T5815] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.503522][ T5848] loop1: detected capacity change from 0 to 512 [ 196.515193][ T5848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.518150][ T5846] device batadv0 entered promiscuous mode [ 196.526231][ T5848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.534077][ T5846] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.540849][ T5846] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 196.577759][ T5848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.606756][ T5853] netlink: 'syz.4.411': attribute type 3 has an invalid length. [ 196.609243][ T5853] netlink: 'syz.4.411': attribute type 3 has an invalid length. [ 196.717268][ T5859] loop3: detected capacity change from 0 to 128 [ 196.777764][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 196.967502][ T5866] loop4: detected capacity change from 0 to 512 [ 198.384864][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 198.415337][ T4662] kworker/u4:13: attempt to access beyond end of device [ 198.415337][ T4662] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 201.239587][ T5914] loop4: detected capacity change from 0 to 512 [ 201.310634][ T5918] batman_adv: batadv0: Adding interface: ip6gretap1 [ 201.313623][ T5914] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 201.322441][ T5914] EXT4-fs (loop4): 1 truncate cleaned up [ 201.323985][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.331242][ T5918] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.372785][ T5918] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 201.387614][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.389688][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.433371][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.435491][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.454972][ T5916] batman_adv: batadv0: Removing interface: ip6gretap1 [ 202.012299][ T5919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 202.462318][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 203.520895][ T6010] trusted_key: encrypted_key: insufficient parameters specified [ 205.030121][ T6030] lo speed is unknown, defaulting to 1000 [ 205.032365][ T6030] lo speed is unknown, defaulting to 1000 [ 205.043972][ T6030] lo speed is unknown, defaulting to 1000 [ 205.061046][ T6030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.082426][ T6030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 205.160874][ T6030] lo speed is unknown, defaulting to 1000 [ 205.167754][ T6030] lo speed is unknown, defaulting to 1000 [ 205.172784][ T6030] lo speed is unknown, defaulting to 1000 [ 205.178348][ T6030] lo speed is unknown, defaulting to 1000 [ 205.184517][ T6030] lo speed is unknown, defaulting to 1000 [ 205.581279][ T6036] loop3: detected capacity change from 0 to 1024 [ 205.589705][ T6036] EXT4-fs: Ignoring removed oldalloc option [ 205.765424][ T6036] EXT4-fs: Ignoring removed nobh option [ 205.767021][ T6036] EXT4-fs: Ignoring removed bh option [ 205.795917][ T6036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.692118][ T6058] xt_nat: multiple ranges no longer supported [ 207.804327][ T6036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.590226][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 208.756803][ T6078] loop4: detected capacity change from 0 to 128 [ 210.172552][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.193958][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.248439][ T6088] tipc: Started in network mode [ 210.255055][ T6088] tipc: Node identity 4, cluster identity 4711 [ 210.256745][ T6088] tipc: Node number set to 4 [ 212.306235][ T6111] rdma_rxe: rxe_register_device failed with error -23 [ 212.308851][ T6111] rdma_rxe: failed to add lo [ 216.733220][ T6155] binder: 6154:6155 tried to acquire reference to desc 0, got 1 instead [ 216.760506][ T6155] binder: 6154:6155 got transaction with invalid data ptr [ 216.780414][ T6155] binder: 6154:6155 transaction async to 6154:0 failed 15/29201/-14, size 93-24 line 3342 [ 216.786126][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.794957][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.296086][ T6170] loop2: detected capacity change from 0 to 2048 [ 218.916172][ T6170] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 219.473433][ T6170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.079752][ T6188] loop1: detected capacity change from 0 to 512 [ 222.082663][ T6188] EXT4-fs: Ignoring removed nobh option [ 222.434357][ T6188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.106433][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 224.668729][ T6208] tipc: Enabled bearer , priority 10 [ 224.715595][ T6213] loop3: detected capacity change from 0 to 2048 [ 224.795693][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.355111][ T4975] tipc: Node number set to 199362711 [ 226.637396][ T6230] loop1: detected capacity change from 0 to 512 [ 226.640927][ T6230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 226.643229][ T6230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.658321][ T6230] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.496: bad orphan inode 131083 [ 226.661934][ T6230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.951113][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.087817][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 227.669359][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.498'. [ 227.671861][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 227.694205][ T6237] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 227.698440][ T6237] bridge0: port 3(team0) entered blocking state [ 227.702159][ T6237] bridge0: port 3(team0) entered disabled state [ 227.727332][ T6237] device team0 entered promiscuous mode [ 227.729033][ T6237] device team_slave_0 entered promiscuous mode [ 227.730914][ T6237] device team_slave_1 entered promiscuous mode [ 227.733498][ T6237] bridge0: port 3(team0) entered blocking state [ 227.735301][ T6237] bridge0: port 3(team0) entered forwarding state [ 227.781581][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 227.845947][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 230.507611][ T6260] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 230.567473][ T6266] loop2: detected capacity change from 0 to 4096 [ 230.569733][ T6266] ntfs3: Unknown parameter 'sys_kmmutable' [ 231.906742][ T6289] vhci_hcd: invalid port number 96 [ 231.908242][ T6289] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 234.582601][ T6319] overlayfs: failed to clone lowerpath [ 238.136280][ T6338] loop1: detected capacity change from 0 to 1024 [ 239.102455][ T6350] loop3: detected capacity change from 0 to 2048 [ 239.173001][ T6350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.188347][ T6350] netlink: 'syz.3.534': attribute type 13 has an invalid length. [ 239.202789][ T6359] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.205531][ T6359] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.207923][ T6359] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.210331][ T6359] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.214097][ T6359] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 239.222465][ T6362] binder: 6354:6362 tried to acquire reference to desc 0, got 1 instead [ 239.224944][ T6362] binder: 6354:6362 ioctl c0306201 200003c0 returned -14 [ 239.256988][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 239.330189][ T5977] hfsplus: b-tree write err: -5, ino 4 [ 239.502173][ T6371] xt_bpf: check failed: parse error [ 239.984083][ T5208] binder: release 6354:6362 transaction 20 out, still active [ 240.028651][ T27] audit: type=1326 audit(240.000:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.035101][ T27] audit: type=1326 audit(240.000:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.042584][ T5208] binder: undelivered TRANSACTION_COMPLETE [ 240.059645][ T27] audit: type=1326 audit(240.030:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.074951][ T27] audit: type=1326 audit(240.030:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.092654][ T27] audit: type=1326 audit(240.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.107285][ T27] audit: type=1326 audit(240.030:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7eb58cd4 code=0x7ffc0000 [ 240.121234][ T27] audit: type=1326 audit(240.030:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.134464][ T27] audit: type=1326 audit(240.030:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.147623][ T27] audit: type=1326 audit(240.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.160384][ T27] audit: type=1326 audit(240.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x7ffc0000 [ 240.172820][ T5208] binder: send failed reply for transaction 20, target dead [ 240.488228][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 244.653995][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 244.873473][ T6432] loop4: detected capacity change from 0 to 512 [ 244.876905][ T6427] device bridge_slave_1 left promiscuous mode [ 244.887686][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.931996][ T6432] EXT4-fs (loop4): orphan cleanup on readonly fs [ 244.941214][ T6432] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.561: bg 0: block 248: padding at end of block bitmap is not set [ 244.949524][ T6427] device bridge_slave_0 left promiscuous mode [ 244.952000][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.123575][ T6432] __quota_error: 41 callbacks suppressed [ 245.123588][ T6432] Quota error (device loop4): write_blk: dquota write failed [ 245.139715][ T6432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.148783][ T6432] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.561: Failed to acquire dquot type 1 [ 245.738313][ T6432] EXT4-fs (loop4): 1 truncate cleaned up [ 245.815883][ T6432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.019209][ T6448] loop2: detected capacity change from 0 to 1024 [ 246.025504][ T6448] EXT4-fs: Ignoring removed orlov option [ 246.497626][ T6448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 246.853040][ T6432] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 247.577957][ T6432] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 247.689067][ T6449] Quota error (device loop4): do_check_range: Getting block 1536 out of range 0-5 [ 247.900444][ T6474] loop3: detected capacity change from 0 to 1024 [ 248.058327][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 248.367215][ T6454] could not allocate digest TFM handle sha1-ssse3 [ 248.849452][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.852395][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.854352][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.870764][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.048395][ T6488] lo speed is unknown, defaulting to 1000 [ 249.614518][ T27] audit: type=1326 audit(249.140:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.2.573" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5a7a8 code=0x0 [ 249.626605][ T6491] loop3: detected capacity change from 0 to 512 [ 249.656890][ T6491] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.658666][ T6491] EXT4-fs: Ignoring removed bh option [ 249.681393][ T6491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.699231][ T6491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 249.718165][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 249.743080][ T6491] EXT4-fs (loop3): 1 truncate cleaned up [ 249.818010][ T6491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.079035][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 251.421932][ T6507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.424384][ T6507] IPv6: NLM_F_CREATE should be set when creating new route [ 254.442652][ T6529] loop2: detected capacity change from 0 to 16 [ 254.538605][ T6529] erofs: (device loop2): mounted with root inode @ nid 36. [ 254.656463][ T6529] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 254.703014][ T4308] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 254.709385][ T6529] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 254.749179][ T6529] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 254.770766][ T6529] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 254.782594][ T6529] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 254.786234][ T6538] lo speed is unknown, defaulting to 1000 [ 263.446332][ T6593] Cannot find set identified by id 0 to match [ 263.840051][ T6598] loop3: detected capacity change from 0 to 2048 [ 263.901481][ T6598] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 264.042601][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.703333][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 265.856234][ T6605] loop4: detected capacity change from 0 to 32768 [ 266.738387][ T6611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.609'. [ 269.059318][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.843860][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 271.049572][ T6671] netlink: 76 bytes leftover after parsing attributes in process `syz.0.627'. [ 274.286469][ T6706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.501026][ T6738] input: syz1 as /devices/virtual/input/input2 [ 278.518662][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 279.866342][ T6760] loop1: detected capacity change from 0 to 256 [ 279.868619][ T6760] exfat: Deprecated parameter 'utf8' [ 279.870108][ T6760] exfat: Deprecated parameter 'namecase' [ 279.871687][ T6760] exfat: Deprecated parameter 'namecase' [ 279.873266][ T6760] exfat: Deprecated parameter 'utf8' [ 279.930031][ T6760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 280.653714][ T6763] loop2: detected capacity change from 0 to 1024 [ 282.417092][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 282.428921][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 282.442298][ T6770] XFS (loop1): Invalid superblock magic number [ 282.580244][ T6781] loop2: detected capacity change from 0 to 1024 [ 282.675099][ T6781] EXT4-fs: Ignoring removed nobh option [ 282.699403][ T6781] EXT4-fs: Ignoring removed bh option [ 282.794153][ T6781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.039299][ T6781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 283.363609][ T6792] loop1: detected capacity change from 0 to 1024 [ 283.366016][ T6792] EXT4-fs: Ignoring removed orlov option [ 283.385487][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 283.416755][ T6792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 286.489242][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 286.646140][ T6812] loop1: detected capacity change from 0 to 2048 [ 286.674811][ T6812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 286.738849][ T6816] loop2: detected capacity change from 0 to 256 [ 286.741189][ T6816] exfat: Deprecated parameter 'namecase' [ 286.744318][ T6816] exfat: Deprecated parameter 'codepage' [ 286.745862][ T6816] exfat: Bad value for 'codepage' [ 286.951722][ T4872] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.693149][ T6822] loop2: detected capacity change from 0 to 1024 [ 287.704850][ T6822] EXT4-fs: Ignoring removed nobh option [ 287.726745][ T6822] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.768641][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 287.779419][ T6822] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 290.427326][ T6844] loop1: detected capacity change from 0 to 1024 [ 290.429635][ T6844] EXT4-fs: Ignoring removed orlov option [ 290.431758][ T6844] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 290.436174][ T6844] EXT4-fs (loop1): invalid journal inode [ 290.437900][ T6844] EXT4-fs (loop1): can't get journal size [ 290.446480][ T6844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.723349][ T4308] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 290.726135][ T4308] Bluetooth: hci0: Injecting HCI hardware error event [ 290.731683][ T4308] Bluetooth: hci0: hardware error 0x00 [ 293.412152][ T4308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 293.700972][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 296.567889][ T6868] Injecting memory failure for pfn 0x139e9f at process virtual address 0x20000000 [ 296.719769][ T6868] Memory failure: 0x139e9f: recovery action for dirty LRU page: Recovered [ 296.724170][ T6868] Injecting memory failure for pfn 0x1383f0 at process virtual address 0x20001000 [ 296.727690][ T6868] Memory failure: 0x1383f0: recovery action for dirty LRU page: Recovered [ 296.730184][ T6868] Injecting memory failure for pfn 0x1383f1 at process virtual address 0x20002000 [ 296.732817][ T6868] Memory failure: 0x1383f1: recovery action for dirty LRU page: Recovered [ 296.735066][ T6868] Injecting memory failure for pfn 0x139f94 at process virtual address 0x20003000 [ 296.737741][ T6868] Memory failure: 0x139f94: recovery action for dirty LRU page: Recovered [ 296.739955][ T6868] Injecting memory failure for pfn 0x139f95 at process virtual address 0x20004000 [ 296.742853][ T6868] Memory failure: 0x139f95: recovery action for dirty LRU page: Recovered [ 296.745070][ T6868] Injecting memory failure for pfn 0x139f96 at process virtual address 0x20005000 [ 296.747503][ T6868] Memory failure: 0x139f96: recovery action for dirty LRU page: Recovered [ 296.749895][ T6868] Injecting memory failure for pfn 0x139f97 at process virtual address 0x20006000 [ 296.752412][ T6868] Memory failure: 0x139f97: recovery action for dirty LRU page: Recovered [ 296.754570][ T6868] Injecting memory failure for pfn 0x139f98 at process virtual address 0x20007000 [ 296.758570][ T6868] Memory failure: 0x139f98: recovery action for dirty LRU page: Recovered [ 296.761316][ T6868] Injecting memory failure for pfn 0x139f99 at process virtual address 0x20008000 [ 298.001754][ T4308] Bluetooth: hci4: command 0x0405 tx timeout [ 298.140001][ T6868] Memory failure: 0x139f99: recovery action for dirty LRU page: Recovered [ 298.152435][ T6868] Injecting memory failure for pfn 0x139f9a at process virtual address 0x20009000 [ 298.160904][ T6868] Memory failure: 0x139f9a: recovery action for dirty LRU page: Recovered [ 298.173362][ T6868] Injecting memory failure for pfn 0x139f9b at process virtual address 0x2000a000 [ 298.176328][ T6868] Memory failure: 0x139f9b: recovery action for dirty LRU page: Recovered [ 298.178888][ T6868] Injecting memory failure for pfn 0x139f9c at process virtual address 0x2000b000 [ 298.195260][ T6900] loop4: detected capacity change from 0 to 2048 [ 298.197176][ T6868] Memory failure: 0x139f9c: recovery action for dirty LRU page: Recovered [ 298.200843][ T6868] Injecting memory failure for pfn 0x139f9d at process virtual address 0x2000c000 [ 298.986843][ T6900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.009784][ T6868] Memory failure: 0x139f9d: recovery action for dirty LRU page: Recovered [ 299.012785][ T6868] Injecting memory failure for pfn 0x139f9e at process virtual address 0x2000d000 [ 299.015772][ T6868] Memory failure: 0x139f9e: recovery action for dirty LRU page: Recovered [ 299.018443][ T6868] Injecting memory failure for pfn 0x139f9f at process virtual address 0x2000e000 [ 299.021176][ T6868] Memory failure: 0x139f9f: recovery action for dirty LRU page: Recovered [ 299.042306][ T6868] Injecting memory failure for pfn 0x139e90 at process virtual address 0x2000f000 [ 299.171537][ T6868] Memory failure: 0x139e90: recovery action for dirty LRU page: Recovered [ 301.671007][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 304.295079][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.382419][ T6946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.399882][ T6951] loop3: detected capacity change from 0 to 1024 [ 305.314545][ T5990] hfsplus: b-tree write err: -5, ino 4 [ 309.729236][ T6973] tipc: Enabled bearer , priority 0 [ 309.731724][ T6973] device syzkaller0 entered promiscuous mode [ 309.769399][ T6973] tipc: Resetting bearer [ 309.779509][ T6971] tipc: Resetting bearer [ 310.052947][ T6971] tipc: Disabling bearer [ 310.342515][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 310.469109][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.470921][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.578792][ T6996] tipc: Enabled bearer , priority 10 [ 313.963654][ T7020] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 313.965869][ T7020] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 314.001311][ T7022] loop3: detected capacity change from 0 to 1024 [ 314.011692][ T7022] EXT4-fs: Ignoring removed orlov option [ 314.052385][ T7022] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 314.057158][ T7022] EXT4-fs (loop3): invalid journal inode [ 314.058739][ T7022] EXT4-fs (loop3): can't get journal size [ 314.238585][ T7022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 316.945442][ T7043] loop1: detected capacity change from 0 to 512 [ 318.100590][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 321.126451][ T7078] loop4: detected capacity change from 0 to 4096 [ 321.197777][ T7078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.347103][ T7088] binder: 7079:7088 tried to acquire reference to desc 0, got 1 instead [ 321.353203][ T7088] binder: release 7079:7088 transaction 25 out, still active [ 321.358443][ T7088] binder: undelivered TRANSACTION_COMPLETE [ 322.792718][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.802622][ T4348] binder: send failed reply for transaction 25, target dead [ 322.808921][ T7098] fuse: Bad value for 'fd' [ 323.004248][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 325.445036][ T7124] loop4: detected capacity change from 0 to 128 [ 325.599498][ T7110] loop3: detected capacity change from 0 to 4096 [ 326.581241][ T4653] kworker/u4:12: attempt to access beyond end of device [ 326.581241][ T4653] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 326.673880][ T7110] Injecting memory failure for pfn 0x12251b at process virtual address 0x20000000 [ 326.686438][ T7110] Memory failure: 0x12251b: corrupted page was clean: dropped without side effects [ 326.689460][ T7110] Memory failure: 0x12251b: recovery action for clean LRU page: Recovered [ 326.693549][ T7110] Injecting memory failure for pfn 0x121158 at process virtual address 0x20001000 [ 328.000715][ T7110] Memory failure: 0x121158: corrupted page was clean: dropped without side effects [ 328.008657][ T7110] Memory failure: 0x121158: recovery action for clean LRU page: Recovered [ 328.011562][ T7110] Injecting memory failure for pfn 0x121159 at process virtual address 0x20002000 [ 328.060651][ T7110] Memory failure: 0x121159: corrupted page was clean: dropped without side effects [ 328.072441][ T7110] Memory failure: 0x121159: recovery action for clean LRU page: Recovered [ 328.074833][ T7110] Injecting memory failure for pfn 0x12115a at process virtual address 0x20003000 [ 328.105178][ T7110] Memory failure: 0x12115a: corrupted page was clean: dropped without side effects [ 328.111525][ T7110] Memory failure: 0x12115a: recovery action for clean LRU page: Recovered [ 328.118451][ T7110] Injecting memory failure for pfn 0x12115b at process virtual address 0x20004000 [ 328.122579][ T7110] Memory failure: 0x12115b: corrupted page was clean: dropped without side effects [ 328.127109][ T7110] Memory failure: 0x12115b: recovery action for clean LRU page: Recovered [ 328.129563][ T7110] Injecting memory failure for pfn 0x138676 at process virtual address 0x20005000 [ 328.147348][ T7110] Memory failure: 0x138676: corrupted page was clean: dropped without side effects [ 328.152618][ T7110] Memory failure: 0x138676: recovery action for clean LRU page: Recovered [ 328.155032][ T7110] Injecting memory failure for pfn 0x138677 at process virtual address 0x20006000 [ 328.319898][ T7110] Memory failure: 0x138677: corrupted page was clean: dropped without side effects [ 328.347640][ T7110] Memory failure: 0x138677: recovery action for clean LRU page: Recovered [ 328.350118][ T7110] Injecting memory failure for pfn 0x13b464 at process virtual address 0x20007000 [ 328.389360][ T7110] Memory failure: 0x13b464: corrupted page was clean: dropped without side effects [ 328.392285][ T7152] serio: Serial port pts0 [ 328.475852][ T7110] Memory failure: 0x13b464: recovery action for clean LRU page: Recovered [ 328.478959][ T7110] Injecting memory failure for pfn 0x13b465 at process virtual address 0x20008000 [ 329.552702][ T7110] Memory failure: 0x13b465: corrupted page was clean: dropped without side effects [ 329.555455][ T7110] Memory failure: 0x13b465: recovery action for clean LRU page: Recovered [ 329.557758][ T7110] Injecting memory failure for pfn 0x13b466 at process virtual address 0x20009000 [ 330.049138][ T7110] Memory failure: 0x13b466: corrupted page was clean: dropped without side effects [ 330.052068][ T7110] Memory failure: 0x13b466: recovery action for clean LRU page: Recovered [ 330.054974][ T7110] Injecting memory failure for pfn 0x13b467 at process virtual address 0x2000a000 [ 330.057971][ T7110] Memory failure: 0x13b467: corrupted page was clean: dropped without side effects [ 330.060557][ T7110] Memory failure: 0x13b467: recovery action for clean LRU page: Recovered [ 330.072240][ T7110] Injecting memory failure for pfn 0x124f98 at process virtual address 0x2000b000 [ 330.075768][ T7110] Memory failure: 0x124f98: corrupted page was clean: dropped without side effects [ 330.078418][ T7110] Memory failure: 0x124f98: recovery action for clean LRU page: Recovered [ 330.080723][ T7110] Injecting memory failure for pfn 0x124f99 at process virtual address 0x2000c000 [ 330.154050][ T7110] Memory failure: 0x124f99: corrupted page was clean: dropped without side effects [ 330.156787][ T7110] Memory failure: 0x124f99: recovery action for clean LRU page: Recovered [ 330.159097][ T7110] Injecting memory failure for pfn 0x124f9a at process virtual address 0x2000d000 [ 330.161847][ T7110] Memory failure: 0x124f9a: corrupted page was clean: dropped without side effects [ 330.164677][ T7110] Memory failure: 0x124f9a: recovery action for clean LRU page: Recovered [ 330.171083][ T7110] Injecting memory failure for pfn 0x124f9b at process virtual address 0x2000e000 [ 330.174750][ T7110] Memory failure: 0x124f9b: corrupted page was clean: dropped without side effects [ 330.177315][ T7110] Memory failure: 0x124f9b: recovery action for clean LRU page: Recovered [ 330.179557][ T7110] Injecting memory failure for pfn 0x122a40 at process virtual address 0x2000f000 [ 330.182012][ T7110] Memory failure: 0x122a40: corrupted page was clean: dropped without side effects [ 330.186829][ T7110] Memory failure: 0x122a40: recovery action for clean LRU page: Recovered [ 330.275601][ T4303] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 330.277611][ T4303] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 331.335467][ T7182] binder: 7178:7182 tried to acquire reference to desc 0, got 1 instead [ 331.338950][ T7182] binder: release 7178:7182 transaction 30 out, still active [ 331.379809][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.763'. [ 331.391803][ T7184] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 331.396666][ T7182] binder: undelivered TRANSACTION_COMPLETE [ 331.439069][ T7186] loop4: detected capacity change from 0 to 512 [ 331.465887][ T7186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.467833][ T7186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.687675][ T7186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 333.315666][ T5208] binder: send failed reply for transaction 30, target dead [ 333.338828][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 334.744752][ T7224] loop2: detected capacity change from 0 to 128 [ 336.961514][ T6002] kworker/u4:28: attempt to access beyond end of device [ 336.961514][ T6002] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 338.855666][ T7252] loop2: detected capacity change from 0 to 512 [ 338.857994][ T7252] EXT4-fs: Ignoring removed nobh option [ 338.985860][ T7253] siw: device registration error -23 [ 341.781497][ T7252] EXT4-fs: failed to create workqueue [ 341.783117][ T7252] EXT4-fs (loop2): mount failed [ 343.928866][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 343.995068][ T7283] tipc: Enabling of bearer rejected, failed to enable media [ 344.126099][ T7287] lo speed is unknown, defaulting to 1000 [ 345.948780][ T7309] siw: device registration error -23 [ 347.131800][ T27] audit: type=1326 audit(347.100:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.144209][ T27] audit: type=1326 audit(347.120:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.152579][ T27] audit: type=1326 audit(347.120:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.158353][ T27] audit: type=1326 audit(347.120:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.192344][ T27] audit: type=1326 audit(347.120:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.198065][ T27] audit: type=1326 audit(347.120:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.218795][ T27] audit: type=1326 audit(347.120:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.242489][ T27] audit: type=1326 audit(347.120:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.248262][ T27] audit: type=1326 audit(347.120:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.290125][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 347.331327][ T7332] tipc: Enabled bearer , priority 0 [ 347.348308][ T7332] device syzkaller0 entered promiscuous mode [ 347.363875][ T7332] tipc: Resetting bearer [ 347.398086][ T7332] tipc: Resetting bearer [ 347.415172][ T27] audit: type=1326 audit(347.120:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b5a7a8 code=0x7ffc0000 [ 347.427358][ T4401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.439040][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.452270][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.456313][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.032664][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.192805][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.211276][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.267767][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.477660][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 348.490674][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 348.638299][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.654407][ T5393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.768830][ T7356] siw: device registration error -23 [ 350.516697][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 350.533739][ T7361] binder: 7360:7361 tried to acquire reference to desc 0, got 1 instead [ 350.542038][ T7361] binder: 7360:7361 tried to acquire reference to desc 0, got 2 instead [ 350.552680][ T7361] binder: tried to use weak ref as strong ref [ 350.554611][ T7361] binder: 7360:7361 got transaction to invalid handle, 1 [ 350.556502][ T7361] binder: 7361:7360 cannot find target node [ 350.558085][ T7361] binder: 7360:7361 transaction call to 0:0 failed 37/29201/-22, size 0-0 line 3054 [ 350.626265][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 350.650632][ T7365] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 350.696774][ T4975] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.744814][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 352.618776][ T4975] net_ratelimit: 6 callbacks suppressed [ 352.618789][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.027551][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.186757][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.261498][ T7392] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 355.379352][ T7401] loop4: detected capacity change from 0 to 1764 [ 355.516655][ T7398] bond1: (slave veth3): Enslaving as an active interface with a down link [ 355.519229][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 356.681942][ T7413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 356.694547][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.849218][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.982833][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.985208][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.987648][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.189094][ T7430] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 359.198118][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.974748][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.999313][ T7435] bond1: (slave veth7): Enslaving as an active interface with a down link [ 360.085350][ T7439] bond1: (slave veth0_to_bond): making interface the new active one [ 360.104131][ T7439] device veth0_to_bond entered promiscuous mode [ 360.106110][ T7439] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 360.110114][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 360.162670][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 360.184967][ T7430] device veth1 entered promiscuous mode [ 360.190716][ T7430] device veth1 left promiscuous mode [ 360.197850][ T7430] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 360.259356][ T7453] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 360.350579][ T7461] loop2: detected capacity change from 0 to 164 [ 360.823858][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.448600][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.963301][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.187480][ T7530] netlink: 112 bytes leftover after parsing attributes in process `syz.2.851'. [ 363.190541][ T7530] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 364.412490][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.464339][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.513510][ T7539] loop1: detected capacity change from 0 to 64 [ 365.462701][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.831985][ T7562] loop4: detected capacity change from 0 to 164 [ 367.142990][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.579893][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.623625][ T7577] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 368.173577][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.468418][ T7572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 368.471826][ T7575] netlink: 'syz.1.864': attribute type 4 has an invalid length. [ 368.492521][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.525851][ T7572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.444456][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.653088][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.861161][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.986247][ T7610] loop1: detected capacity change from 0 to 256 [ 371.399425][ T7622] loop2: detected capacity change from 0 to 4096 [ 372.465450][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.471991][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.474660][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.636347][ T7622] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 373.734265][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.779704][ T7634] loop1: detected capacity change from 0 to 1024 [ 373.800153][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.878247][ T7634] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.880: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 373.886039][ T7634] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.880: Bad quota inode: 3, type: 0 [ 373.894864][ T7634] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 373.899962][ T7634] EXT4-fs (loop1): mount failed [ 373.924597][ T7642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 373.927312][ T7642] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 374.103510][ T7638] loop4: detected capacity change from 0 to 2048 [ 374.106542][ T7638] EXT4-fs (loop4): invalid inodes per group: 1 [ 374.106542][ T7638] [ 374.123520][ T7644] loop2: detected capacity change from 0 to 2048 [ 374.830091][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.901163][ T7644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 375.100113][ T4289] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.532789][ T7658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 376.088027][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.104682][ T7653] device bond0 entered promiscuous mode [ 376.106257][ T7653] device bond_slave_0 entered promiscuous mode [ 376.108016][ T7653] device bond_slave_1 entered promiscuous mode [ 376.109766][ T7653] device macvlan2 entered promiscuous mode [ 376.268029][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 376.815371][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.093299][ T7669] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 377.142662][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.371070][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.378211][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.230911][ T7683] loop4: detected capacity change from 0 to 32768 [ 378.244944][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.575960][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.568246][ T7669] bond2 (unregistering): Released all slaves [ 379.835733][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.852773][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.031633][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.308599][ T7715] loop1: detected capacity change from 0 to 256 [ 382.582491][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.692780][ T7719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 382.850005][ T7719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 382.899258][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.441423][ T7729] loop1: detected capacity change from 0 to 40427 [ 383.493987][ T7729] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 383.531953][ T7729] F2FS-fs (loop1): invalid crc value [ 383.567770][ T7729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 383.625907][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.632852][ T7729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 383.992399][ T39] device veth0_to_bond left promiscuous mode [ 384.113129][ T7735] loop2: detected capacity change from 0 to 40427 [ 384.174620][ T7735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 384.176821][ T7735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 384.182833][ T7735] F2FS-fs (loop2): invalid crc value [ 385.145192][ T7735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 385.206884][ T7735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 385.208882][ T7735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 385.280587][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.438567][ T7756] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 385.953533][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.361601][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.559749][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.412505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.415325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.417619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.419840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.422134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.424467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.515414][ T7763] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 388.680061][ T7765] device veth5 entered promiscuous mode [ 388.701582][ T7765] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 388.811092][ T7775] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 388.815790][ T7775] batman_adv: batadv0: Adding interface: ip6gretap2 [ 388.822153][ T7775] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.849650][ T7775] batman_adv: batadv0: Interface activated: ip6gretap2 [ 390.782870][ T4345] net_ratelimit: 50 callbacks suppressed [ 390.782884][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.902845][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.470566][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.972524][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.542400][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.532572][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.540579][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 395.752093][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.052818][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.073937][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.087964][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.190476][ T7867] loop2: detected capacity change from 0 to 40427 [ 398.196186][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.199094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.252877][ T7867] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 398.255266][ T7867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 398.553301][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.555672][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.558267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.560453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.573353][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.625236][ T7872] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 398.638635][ T7867] F2FS-fs (loop2): Found nat_bits in checkpoint [ 398.652905][ T7867] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 398.654896][ T7867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 398.762634][ T7872] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 398.887945][ T7875] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 399.002672][ T7875] bond1 (unregistering): Released all slaves [ 399.079258][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 399.084376][ T7881] tipc: Enabled bearer , priority 10 [ 399.088355][ T7881] syz.2.946 uses obsolete (PF_INET,SOCK_PACKET) [ 399.097149][ T7881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.946'. [ 399.100253][ T7881] tipc: Resetting bearer [ 399.898939][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.987272][ T7881] tipc: Disabling bearer [ 401.060715][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.098020][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.102397][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.856331][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.892418][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.771226][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.876383][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.951615][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 406.986376][ T7955] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 407.837541][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.198445][ T7976] ptrace attach of "./syz-executor exec"[4303] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[7976] [ 408.694165][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.944818][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.934398][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.353415][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.062078][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 413.066107][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.293445][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.300316][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.369170][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.414669][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.014903][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.017888][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.062343][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.827177][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 417.334234][ T8040] device veth9 entered promiscuous mode [ 417.424078][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.426576][ T8040] bridge3: port 1(veth9) entered blocking state [ 417.428283][ T8040] bridge3: port 1(veth9) entered disabled state [ 417.474298][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.375939][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.415903][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.496096][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.504194][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.887633][ T8082] tipc: Enabling of bearer rejected, failed to enable media [ 422.298356][ T4312] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 422.304537][ T4312] Bluetooth: hci3: Injecting HCI hardware error event [ 422.308438][ T4308] Bluetooth: hci3: hardware error 0x00 [ 422.391789][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.452817][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.979206][ T5208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.554137][ T8116] Unable to handle kernel paging request at virtual address dfff800000000068 [ 425.556840][ T8116] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 425.559200][ T8116] Mem abort info: [ 425.560161][ T8116] ESR = 0x0000000096000006 [ 425.561438][ T8116] EC = 0x25: DABT (current EL), IL = 32 bits [ 425.565612][ T8116] SET = 0, FnV = 0 [ 425.566749][ T8116] EA = 0, S1PTW = 0 [ 425.567838][ T8116] FSC = 0x06: level 2 translation fault [ 425.569382][ T8116] Data abort info: [ 425.570343][ T8116] ISV = 0, ISS = 0x00000006 [ 425.571609][ T8116] CM = 0, WnR = 0 [ 425.572684][ T8116] [dfff800000000068] address between user and kernel address ranges [ 425.574953][ T8116] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 425.576880][ T8116] Modules linked in: [ 425.577946][ T8116] CPU: 0 PID: 8116 Comm: syz.3.1009 Not tainted 6.1.141-syzkaller #0 [ 425.580156][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.582945][ T8116] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 425.585088][ T8116] pc : find_match+0xa0/0xb0c [ 425.586332][ T8116] lr : find_match+0x74/0xb0c [ 425.587610][ T8116] sp : ffff8000225f6f40 [ 425.588761][ T8116] x29: ffff8000225f6f60 x28: 1fffe0001ed4c6c4 x27: dfff800000000000 [ 425.590929][ T8116] x26: 0000000000000340 x25: ffff0000f6a63637 x24: 0000000000000201 [ 425.593093][ T8116] x23: 0000000000000003 x22: ffff0000f6a63620 x21: 0000000000000007 [ 425.595290][ T8116] x20: 1fffe0001ed4c6c6 x19: 0000000000000000 x18: 0000000000000000 [ 425.597506][ T8116] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 425.599717][ T8116] x14: 00000000ffffffff x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 425.601922][ T8116] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000d3960000 [ 425.604072][ T8116] x8 : 0000000000000068 x7 : ffff8000225f72f0 x6 : 0000000000000003 [ 425.606233][ T8116] x5 : ffff8000225f72f0 x4 : ffff8000225f72e0 x3 : 0000000000000003 [ 425.608325][ T8116] x2 : 0000000000000007 x1 : 0000000000000000 x0 : 0000000000000000 [ 425.610432][ T8116] Call trace: [ 425.611281][ T8116] find_match+0xa0/0xb0c [ 425.612424][ T8116] rt6_nh_find_match+0xcc/0x138 [ 425.613718][ T8116] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 425.615196][ T8116] __find_rr_leaf+0x3b8/0x5c8 [ 425.616443][ T8116] fib6_table_lookup+0x308/0x8b8 [ 425.617766][ T8116] ip6_pol_route+0x1f4/0x1024 [ 425.619004][ T8116] ip6_pol_route_output+0x60/0x94 [ 425.620299][ T8116] fib6_rule_lookup+0x258/0x4a8 [ 425.621589][ T8116] ip6_route_output_flags_noref+0x250/0x314 [ 425.623175][ T8116] ip6_route_output_flags+0xe4/0x368 [ 425.624563][ T8116] ip6_dst_lookup_tail+0x168/0x12c0 [ 425.625968][ T8116] ip6_dst_lookup_flow+0x54/0xe0 [ 425.627278][ T8116] ip6_datagram_dst_update+0x5a8/0xa88 [ 425.628743][ T8116] __ip6_datagram_connect+0x814/0xce4 [ 425.630168][ T8116] ip6_datagram_connect+0x40/0x64 [ 425.631477][ T8116] inet_dgram_connect+0x17c/0x35c [ 425.632801][ T8116] __sys_connect+0x264/0x28c [ 425.634007][ T8116] __arm64_sys_connect+0x7c/0x94 [ 425.635327][ T8116] invoke_syscall+0x98/0x2bc [ 425.636521][ T8116] el0_svc_common+0x138/0x258 [ 425.637822][ T8116] do_el0_svc+0x58/0x13c [ 425.638959][ T8116] el0_svc+0x58/0x138 [ 425.640054][ T8116] el0t_64_sync_handler+0x84/0xf0 [ 425.641382][ T8116] el0t_64_sync+0x18c/0x190 [ 425.642588][ T8116] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 425.644446][ T8116] ---[ end trace 0000000000000000 ]--- [ 425.717457][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.149907][ T8116] Kernel panic - not syncing: Oops: Fatal exception [ 426.151784][ T8116] SMP: stopping secondary CPUs [ 426.153097][ T8116] Kernel Offset: disabled [ 426.154282][ T8116] CPU features: 0x080000,02070084,26017203 [ 426.155869][ T8116] Memory Limit: none [ 426.661027][ T8116] Rebooting in 86400 seconds..