last executing test programs: 3.598921711s ago: executing program 1 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.538141734s ago: executing program 1 (id=557): quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0xdddd0000, 0xe4, &(0x7f0000001680)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41b6c638}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 2.80198121s ago: executing program 3 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.753980332s ago: executing program 2 (id=566): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r1, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r4, 0x9, 0x0, @void}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 2.683271976s ago: executing program 2 (id=567): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073018f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.317132264s ago: executing program 4 (id=569): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24042004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) socket$inet_sctp(0x2, 0x1, 0x84) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) 2.293445366s ago: executing program 1 (id=570): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x20042, 0x9a) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) 2.287899646s ago: executing program 2 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 2.269093567s ago: executing program 0 (id=572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) 2.253315658s ago: executing program 4 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 2.227309488s ago: executing program 1 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2.19295358s ago: executing program 0 (id=575): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ccf000/0x2000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.849970737s ago: executing program 1 (id=576): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d}, 0x1c}}, 0x0) 1.849239067s ago: executing program 3 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlinkprop={0x44, 0x6c, 0x701, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x2, 0x4, 0x8, 0x7, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)={0x20, 0x21, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x10, 0x121, 0x0, 0x1, [@typed={0xefc87e4c0f2f8e4e, 0xe0, 0x0, 0x0, @u64=0x6}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40480c4}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x14) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0x4, 0x12) 1.819538429s ago: executing program 0 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x13, 0x800}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) 1.764854272s ago: executing program 3 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0x1ae0, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.706920254s ago: executing program 0 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.377399011s ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) 1.367745102s ago: executing program 4 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x1, 0xfaa}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.251660258s ago: executing program 4 (id=583): r0 = socket$xdp(0x2c, 0x3, 0x0) syslog(0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x200c17a) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x10c000, 0x800, 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.233074308s ago: executing program 3 (id=584): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 525.872223ms ago: executing program 0 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 510.771694ms ago: executing program 1 (id=586): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 469.140727ms ago: executing program 2 (id=587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 414.138879ms ago: executing program 0 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77f, 0x4000}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc4f}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x80000000, 0xd}}]}]}]}, 0x50}}, 0x0) 413.645909ms ago: executing program 2 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 332.829553ms ago: executing program 3 (id=590): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x7) fanotify_init(0x1, 0x1) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 330.106323ms ago: executing program 4 (id=591): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getpgid(0x0) io_uring_enter(0xffffffffffffffff, 0x2865, 0x366, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeffff001}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x30) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2c, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10007}}, 0x1c}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 250.082437ms ago: executing program 4 (id=592): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 0s ago: executing program 3 (id=593): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@usrjquota}, {@debug}, {@dioread_nolock}, {}, {@grpquota}, {@inlinecrypt}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x3000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000bc0)=""/4096, &(0x7f0000000080)=0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 30.581954][ T4308] cgroup: Unknown subsys name 'net' [ 30.875772][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.153052][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.380981][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.382862][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.384469][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.386707][ T4326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.387956][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.389847][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.391208][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.392413][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.396170][ T4324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.403520][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.405100][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.407009][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.408332][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.408438][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.411627][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.412974][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.415512][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.417275][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.418523][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.420807][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.423897][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.425172][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.429483][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.430765][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.457706][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.459307][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.460618][ T4324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.462132][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.463509][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.464890][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.556397][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 32.575935][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.603033][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.611608][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.612975][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.615296][ T4329] device bridge_slave_0 entered promiscuous mode [ 32.622896][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.625325][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.626671][ T4329] device bridge_slave_1 entered promiscuous mode [ 32.631826][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 32.650161][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.651402][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.652901][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.656853][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.657995][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.659497][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.664721][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.677748][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.678872][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.680297][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.682260][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.685669][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.686826][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.688320][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.695057][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 32.708692][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.709864][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.711316][ T4327] device bridge_slave_0 entered promiscuous mode [ 32.720940][ T4329] team0: Port device team_slave_0 added [ 32.722067][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.725167][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.726655][ T4327] device bridge_slave_1 entered promiscuous mode [ 32.731639][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.737768][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.739938][ T4329] team0: Port device team_slave_1 added [ 32.741645][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.749557][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.757385][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.758575][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.760069][ T4333] device bridge_slave_0 entered promiscuous mode [ 32.764506][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.765599][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.769773][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.777998][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.780314][ T4321] team0: Port device team_slave_0 added [ 32.781317][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.782508][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.786139][ T4333] device bridge_slave_1 entered promiscuous mode [ 32.787806][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.788926][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.792849][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.796157][ T4320] team0: Port device team_slave_0 added [ 32.797830][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.806506][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.809401][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.811505][ T4321] team0: Port device team_slave_1 added [ 32.815024][ T4320] team0: Port device team_slave_1 added [ 32.828612][ T4333] team0: Port device team_slave_0 added [ 32.834504][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.835671][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.839739][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.842566][ T4327] team0: Port device team_slave_0 added [ 32.847745][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.848850][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.853018][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.856322][ T4333] team0: Port device team_slave_1 added [ 32.857910][ T4327] team0: Port device team_slave_1 added [ 32.859160][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.860269][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.866391][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.868453][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.869588][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.874547][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.893530][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.894598][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.898419][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.901351][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.902448][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.906678][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.944477][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.983349][ T4329] device hsr_slave_1 entered promiscuous mode [ 33.023601][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.024756][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.028770][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.031202][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.032236][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.037019][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.094350][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.133294][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.173205][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.174491][ T4320] Cannot create hsr debugfs directory [ 33.244191][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.293327][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.343214][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.344331][ T4321] Cannot create hsr debugfs directory [ 33.404351][ T4327] device hsr_slave_0 entered promiscuous mode [ 33.443360][ T4327] device hsr_slave_1 entered promiscuous mode [ 33.493222][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.494370][ T4327] Cannot create hsr debugfs directory [ 33.544416][ T4333] device hsr_slave_0 entered promiscuous mode [ 33.583313][ T4333] device hsr_slave_1 entered promiscuous mode [ 33.623365][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.624558][ T4333] Cannot create hsr debugfs directory [ 33.746240][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.804325][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.846470][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.884196][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.942649][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.987438][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.025018][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.065686][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.105458][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.144094][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.195118][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.245402][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.284636][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.337514][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.374332][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.424292][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.476225][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.493481][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 34.493488][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 34.503380][ T4324] Bluetooth: hci2: command 0x0409 tx timeout [ 34.503601][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 34.504341][ T4324] Bluetooth: hci0: command 0x0409 tx timeout [ 34.521587][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.567933][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.609415][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.657222][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.679199][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.683108][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.685394][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.686736][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.688279][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.689782][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.690937][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.692895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.708400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.710210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.711665][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.712814][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.717289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.719022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.728034][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.730062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.731772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.736468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.744118][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.747069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.748677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.755774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.757184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.761443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.763203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.767395][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.776472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.777791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.779185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.780540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.783895][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.787935][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.792310][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.795639][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.799679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.801924][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.807501][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.808761][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.813890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.815461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.817100][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.818231][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.819574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.825112][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.826716][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.828154][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.829271][ T1653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.830614][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.831967][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.836633][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.838006][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.845192][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.846964][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.849395][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.850858][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.852465][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.857864][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.859710][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.861309][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.863025][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.865579][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.867100][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.868468][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.869593][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.870930][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.878174][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.879776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.881238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.882897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.886031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.887722][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.888837][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.890760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.892308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.894298][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.895363][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.896646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.901759][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.904196][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.905613][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.906683][ T1653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.908247][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.909840][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.911545][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.912954][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.915114][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.916628][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.917992][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.929055][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.930604][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.932063][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.933276][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.934855][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.936234][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.937496][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.939125][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.940721][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.945057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.949691][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.952680][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.958996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.960702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.962304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.963960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.965831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.976037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.977599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.979149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.981157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.982707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.988594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.992046][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.994846][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.009564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.011166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.012946][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.015431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.017073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.018533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.020071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.021544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.024163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.029182][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.030843][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.037497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.047054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.048717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.050525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.055232][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.058098][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.060488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.061958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.065385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.067309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.068881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.071428][ T4320] device veth0_vlan entered promiscuous mode [ 35.074466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.076001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.084832][ T4320] device veth1_vlan entered promiscuous mode [ 35.099386][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.100889][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.102334][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.105516][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.110731][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.126761][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.128425][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.136138][ T4320] device veth0_macvtap entered promiscuous mode [ 35.138942][ T4320] device veth1_macvtap entered promiscuous mode [ 35.143112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.145549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.146851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.148369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.157705][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.158904][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.166282][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.175174][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.176492][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.178050][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.179539][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.181015][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.182536][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.196072][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.198360][ T4329] device veth0_vlan entered promiscuous mode [ 35.204249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.205598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.217047][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.220382][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.221749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.227627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.231776][ T4329] device veth1_vlan entered promiscuous mode [ 35.234665][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.235991][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237373][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.238719][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.256278][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.257650][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.259049][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.260249][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.269250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.270729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.274973][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.280879][ T4329] device veth0_macvtap entered promiscuous mode [ 35.284094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.285545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.289888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.299620][ T4329] device veth1_macvtap entered promiscuous mode [ 35.311593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.313418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.315104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.316619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.318059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.319709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.321101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.329783][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.331599][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.334053][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.337143][ T4321] device veth0_vlan entered promiscuous mode [ 35.338413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.340019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.348711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.350246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.351897][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.354658][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.356585][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.362820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.364362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.365727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.367146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.369502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.370864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.372143][ T4333] device veth0_vlan entered promiscuous mode [ 35.377954][ T4321] device veth1_vlan entered promiscuous mode [ 35.381698][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.383028][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.385592][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.386864][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.390197][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.391435][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.400151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.401476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.410813][ T4333] device veth1_vlan entered promiscuous mode [ 35.414423][ T460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.415755][ T460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.417479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.419042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.420467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.422008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.424823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.426316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.427927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.429834][ T4327] device veth0_vlan entered promiscuous mode [ 35.444658][ T4327] device veth1_vlan entered promiscuous mode [ 35.447815][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.449344][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.450765][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.452357][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.457220][ T4333] device veth0_macvtap entered promiscuous mode [ 35.467340][ T4333] device veth1_macvtap entered promiscuous mode [ 35.471045][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.472452][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.475415][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.476748][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.478172][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.487198][ T4321] device veth0_macvtap entered promiscuous mode [ 35.489760][ T4321] device veth1_macvtap entered promiscuous mode [ 35.497168][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.498698][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.500139][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.501645][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.506567][ T4327] device veth0_macvtap entered promiscuous mode [ 35.516308][ T4327] device veth1_macvtap entered promiscuous mode [ 35.532069][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.534513][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.536096][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.537850][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.540406][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.548267][ T4402] Zero length message leads to an empty skb [ 35.552010][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.553443][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.554736][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.556176][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.557733][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.559239][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.560614][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.566156][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.567703][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.569201][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.570920][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.572492][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.575054][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.577070][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.578309][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.579852][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.583593][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.585210][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.587041][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.588614][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.590221][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.591936][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.594228][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.595855][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.598376][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.602391][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.604971][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.606582][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.608289][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.610388][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.611862][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.613605][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.615078][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.616652][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.620419][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.622049][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.624003][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.625734][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.627405][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.629172][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.631350][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.637314][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.638553][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.639524][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.641266][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.642820][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.645714][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.647242][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.649230][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.650881][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.652612][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.655480][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.657452][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.659333][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.661062][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.662704][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.666219][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.669100][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.670523][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.672016][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.673757][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.676656][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.678111][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.679514][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.681039][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.718731][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.720146][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.721473][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.722821][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.729475][ T460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.730608][ T460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.732100][ T460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.733744][ T460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.737082][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.738616][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.777595][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.782433][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.791278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.792970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.797196][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.798559][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.816589][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.817890][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.819230][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.839162][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.840521][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.841210][ T4406] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 35.842104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.570869][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 37.571906][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 37.767937][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 37.768919][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 37.769888][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 37.868908][ T4432] capability: warning: `syz.4.9' uses deprecated v2 capabilities in a way that may be insecure [ 38.364553][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 38.375408][ T4448] team0 (unregistering): Failed to send options change via netlink (err -105) [ 38.377176][ T4448] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 38.379470][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 38.411418][ T4461] netlink: 'syz.2.22': attribute type 39 has an invalid length. [ 39.615925][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 39.617247][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 39.774207][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 39.775266][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 39.778370][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 40.122070][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.126988][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.128332][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.148592][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 40.150110][ T4492] device bridge_slave_1 left promiscuous mode [ 40.151601][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.175600][ T4492] device bridge_slave_0 left promiscuous mode [ 40.176685][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.012799][ T4324] Bluetooth: hci0: command 0x0419 tx timeout [ 42.013916][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 42.015081][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 42.016177][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 42.017277][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 42.408008][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 42.575562][ T4517] team0: Port device team_slave_0 removed [ 42.578449][ T4519] netlink: 'syz.3.38': attribute type 4 has an invalid length. [ 42.579749][ T4519] netlink: 17 bytes leftover after parsing attributes in process `syz.3.38'. [ 42.646470][ T4523] IPVS: fo: FWM 3 0x00000003 - no destination available [ 42.848759][ T4527] netlink: 76 bytes leftover after parsing attributes in process `syz.3.41'. [ 42.965101][ T4529] loop3: detected capacity change from 0 to 512 [ 42.966658][ T4529] ======================================================= [ 42.966658][ T4529] WARNING: The mand mount option has been deprecated and [ 42.966658][ T4529] and is ignored by this kernel. Remove the mand [ 42.966658][ T4529] option from the mount to silence this warning. [ 42.966658][ T4529] ======================================================= [ 42.975927][ T4529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.993950][ T4529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.42: bg 0: block 473: padding at end of block bitmap is not set [ 42.996812][ T4529] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 42.998943][ T4529] EXT4-fs (loop3): 1 orphan inode deleted [ 42.999940][ T4529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.053397][ T4382] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.055206][ T4382] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 1 [ 43.831470][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 43.854609][ T4536] loop3: detected capacity change from 0 to 128 [ 43.860387][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.317855][ T4545] loop1: detected capacity change from 0 to 512 [ 44.329514][ T4545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.333926][ T4545] EXT4-fs (loop1): 1 truncate cleaned up [ 44.334942][ T4545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.741094][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 44.747191][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 45.341867][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 46.184402][ T4582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 46.187569][ T4582] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.189009][ T4582] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.190476][ T4582] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.191904][ T4582] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.222935][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 46.243280][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 46.245217][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 46.281195][ T4590] device syzkaller0 entered promiscuous mode [ 46.655603][ T4603] loop1: detected capacity change from 0 to 64 [ 46.674147][ T4601] loop0: detected capacity change from 0 to 256 [ 46.686639][ T4601] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.881239][ T4616] Illegal XDP return value 65535 on prog (id 12) dev N/A, expect packet loss! [ 48.228899][ T27] audit: type=1326 audit(48.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7fc00000 [ 48.232239][ T27] audit: type=1326 audit(48.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff7f177128 code=0x7fc00000 [ 48.515271][ T4650] loop2: detected capacity change from 0 to 1024 [ 49.295998][ T4619] hfsplus: b-tree write err: -5, ino 25 [ 49.299629][ T4619] hfsplus: b-tree write err: -5, ino 4 [ 49.300679][ T4619] hfsplus: b-tree write err: -5, ino 2 [ 50.032050][ T4677] netlink: 'syz.2.91': attribute type 9 has an invalid length. [ 50.033673][ T4677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 50.123577][ T4680] loop0: detected capacity change from 0 to 64 [ 50.139433][ T4680] hfs: get root inode failed [ 50.529372][ T4686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.534159][ T4686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.790656][ T4692] Invalid option length (57448) for dns_resolver key [ 51.769904][ T4709] device vlan2 entered promiscuous mode [ 51.781597][ T4715] loop2: detected capacity change from 0 to 1024 [ 51.809793][ T4715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.869023][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 51.927609][ T4722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 52.591011][ T4736] netlink: 'syz.0.108': attribute type 12 has an invalid length. [ 52.592556][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 52.594562][ T4736] bond0: option primary_reselect: invalid value (172) [ 52.620911][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 52.640627][ T4739] loop2: detected capacity change from 0 to 128 [ 52.644751][ T4739] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 52.661503][ T4739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.108665][ T4745] loop1: detected capacity change from 0 to 256 [ 53.640194][ T4314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.711439][ T4745] loop1: detected capacity change from 0 to 764 [ 55.199902][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 55.230902][ T4768] bond1 (unregistering): Released all slaves [ 55.452290][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e0846c61: rx timeout, send abort [ 55.466232][ T3897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.613465][ T3897] usb 1-1: device descriptor read/64, error -71 [ 55.883600][ T3897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 55.952358][ C1] vcan0: j1939_tp_rxtimer: 0x0000000065462448: rx timeout, send abort [ 55.954164][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e0846c61: abort rx timeout. Force session deactivation [ 56.033246][ T3897] usb 1-1: device descriptor read/64, error -71 [ 56.153892][ T3897] usb usb1-port1: attempt power cycle [ 56.453804][ C1] vcan0: j1939_tp_rxtimer: 0x0000000065462448: abort rx timeout. Force session deactivation [ 56.573294][ T3897] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.614419][ T3897] usb 1-1: device descriptor read/8, error -71 [ 56.687394][ T4857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.689710][ T4857] team0: Port device bond0 added [ 56.709325][ T4857] netlink: 'syz.2.129': attribute type 16 has an invalid length. [ 56.710613][ T4857] netlink: 'syz.2.129': attribute type 17 has an invalid length. [ 56.720543][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.736150][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.875556][ T4866] loop1: detected capacity change from 0 to 512 [ 56.880370][ T4866] EXT4-fs: Ignoring removed orlov option [ 56.883201][ T3897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.888398][ T4866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.896723][ T4866] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.899442][ T4866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.131: bg 0: block 248: padding at end of block bitmap is not set [ 56.911835][ T4866] Quota error (device loop1): write_blk: dquota write failed [ 56.913100][ T4866] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.915873][ T3897] usb 1-1: device descriptor read/8, error -71 [ 56.916911][ T4866] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.131: Failed to acquire dquot type 1 [ 56.926139][ T4866] EXT4-fs (loop1): 1 truncate cleaned up [ 56.932167][ T4866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.043530][ T3897] usb usb1-port1: unable to enumerate USB device [ 57.206634][ T4866] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 57.233191][ T4866] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 57.304004][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 58.071521][ T4903] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 58.191176][ T4903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 58.206809][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 58.209299][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 58.226031][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.227276][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.287944][ T4912] loop4: detected capacity change from 0 to 1156 [ 58.289311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 58.330381][ T4916] loop3: detected capacity change from 0 to 256 [ 58.428538][ T4921] Invalid ELF header magic: != ELF [ 58.686525][ T4313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.698216][ T4916] loop3: detected capacity change from 0 to 764 [ 58.736064][ T27] audit: type=1326 audit(58.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 58.740959][ T27] audit: type=1326 audit(58.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 58.771607][ T27] audit: type=1326 audit(58.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 59.044922][ T27] audit: type=1326 audit(59.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 59.051886][ T27] audit: type=1326 audit(59.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 59.058535][ T27] audit: type=1326 audit(59.030:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 59.067632][ T27] audit: type=1326 audit(59.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 59.071465][ T27] audit: type=1326 audit(59.030:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffbe777128 code=0x7ffc0000 [ 60.231785][ T4950] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 61.004174][ T4950] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.012000][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.015647][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074064][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 63.339481][ T4999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.442353][ T5005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.449869][ T4988] block nbd2: shutting down sockets [ 63.454544][ T5005] team0: Port device bond0 added [ 63.456706][ T5008] netlink: 'syz.0.174': attribute type 16 has an invalid length. [ 63.457972][ T5008] netlink: 'syz.0.174': attribute type 17 has an invalid length. [ 63.486742][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.494562][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.568408][ T5004] loop1: detected capacity change from 0 to 32768 [ 63.727907][ T5023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.822341][ T5024] dns_resolver: Unsupported server list version (6) [ 64.102305][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.106671][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.400683][ T5031] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 64.516554][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.517773][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.796758][ T5031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.898315][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.899049][ T5040] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 64.899653][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.698456][ T5042] loop4: detected capacity change from 0 to 512 [ 65.734595][ T5042] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 65.738215][ T5042] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 65.739802][ T5042] EXT4-fs (loop4): group descriptors corrupted! [ 65.826219][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 66.464618][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 67.105089][ T5076] dns_resolver: Unsupported server list version (6) [ 67.418421][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 67.418432][ T27] audit: type=1326 audit(67.400:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.433052][ T27] audit: type=1326 audit(67.410:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.439134][ T27] audit: type=1326 audit(67.420:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.448930][ T27] audit: type=1326 audit(67.430:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.465192][ T27] audit: type=1326 audit(67.430:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.471167][ T5082] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.485015][ T27] audit: type=1326 audit(67.430:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.488241][ T27] audit: type=1326 audit(67.430:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.491599][ T27] audit: type=1326 audit(67.430:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.495016][ T27] audit: type=1326 audit(67.430:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.498683][ T27] audit: type=1326 audit(67.430:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 67.510155][ T5085] loop0: detected capacity change from 0 to 128 [ 67.516834][ T5085] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 67.520871][ T5085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.618401][ T22] cfg80211: failed to load regulatory.db [ 70.294626][ T5098] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 70.586011][ T5098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.897912][ T4997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.898033][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 70.899235][ T4997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.918388][ T5115] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 70.921561][ T5117] device bond1 entered promiscuous mode [ 70.933286][ T5117] device bridge1 entered promiscuous mode [ 72.253975][ T5149] binder: 5148:5149 tried to acquire reference to desc 0, got 1 instead [ 72.256670][ T5149] binder: 5148:5149 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.258671][ T5149] binder: 5149 RLIMIT_NICE not set [ 72.259614][ T5149] binder: 5149 RLIMIT_NICE not set [ 72.271195][ T5149] binder: 5149 RLIMIT_NICE not set [ 72.272077][ T5149] binder_alloc: 5148: binder_alloc_buf, no vma [ 72.273245][ T5149] binder: cannot allocate buffer: vma cleared, target dead or dying [ 72.273375][ T5149] binder: 5148:5149 transaction reply to 5148:5149 failed 6/29189/-3, size 0-0 line 3230 [ 72.276231][ T5149] binder: send failed reply for transaction 5 to 5148:5149 [ 72.283624][ T4371] binder: undelivered TRANSACTION_COMPLETE [ 72.284629][ T4371] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.352845][ T5155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.214'. [ 72.581636][ T5154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.587896][ T4371] binder: undelivered TRANSACTION_ERROR: 29190 [ 72.991504][ T5166] binder: 5165:5166 tried to acquire reference to desc 0, got 1 instead [ 72.995223][ T5166] binder: 5165:5166 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.997563][ T5166] binder: 5166 RLIMIT_NICE not set [ 72.998397][ T5166] binder: undelivered transaction 11, fd fixups failed [ 73.051763][ T5166] binder: transaction release 11 bad handle 1, ret = -22 [ 73.061425][ T5166] binder: 5165:5166 async transaction 11 fd fixups failed 29201/-12, line 4667 [ 73.069587][ T4501] binder: undelivered TRANSACTION_COMPLETE [ 73.093287][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 73.093297][ T27] audit: type=1326 audit(73.070:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.100514][ T27] audit: type=1326 audit(73.070:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.106065][ T27] audit: type=1326 audit(73.070:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.115807][ T27] audit: type=1326 audit(73.070:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.120236][ T27] audit: type=1326 audit(73.070:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.144461][ T27] audit: type=1326 audit(73.070:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.215085][ T5171] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.220' sets config #1 [ 73.402385][ T27] audit: type=1326 audit(73.070:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.463735][ T27] audit: type=1326 audit(73.090:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.467456][ T27] audit: type=1326 audit(73.090:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.470925][ T27] audit: type=1326 audit(73.100:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff7f177128 code=0x7ffc0000 [ 73.987732][ T5194] binder: 5192:5194 tried to acquire reference to desc 0, got 1 instead [ 74.464380][ T5194] binder: 5192:5194 ioctl c0306201 20000540 returned -14 [ 74.481628][ T22] binder: release 5192:5194 transaction 19 out, still active [ 74.679880][ T5212] dns_resolver: Unsupported server list version (6) [ 75.419658][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.441590][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.448506][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.452596][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.709045][ T5226] loop4: detected capacity change from 0 to 16 [ 75.710484][ T5226] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 75.924846][ T5233] loop1: detected capacity change from 0 to 2048 [ 76.112154][ T5233] loop1: p1 p3 p4 [ 76.124057][ T5233] loop1: p4 size 589824 extends beyond EOD, truncated [ 76.349114][ T5236] binder: 5234:5236 tried to acquire reference to desc 0, got 1 instead [ 76.453847][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 76.460726][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 76.466099][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 76.753231][ T5257] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.246'. [ 76.756262][ T5255] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.246'. [ 78.126267][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 78.144293][ T5269] binder_user_error: 2 callbacks suppressed [ 78.144302][ T5269] binder: 5268:5269 tried to acquire reference to desc 0, got 1 instead [ 78.147799][ T5269] binder: 5268:5269 got transaction with invalid offset (48, min 48 max 83) or object. [ 78.150460][ T5269] binder_debug: 7 callbacks suppressed [ 78.150471][ T5269] binder: 5268:5269 transaction call to 5268:0 failed 43/29201/-22, size 83-24 line 3346 [ 78.161467][ T4372] binder: release 5268:5269 transaction 36 out, still active [ 78.162726][ T4372] binder: undelivered TRANSACTION_COMPLETE [ 78.164114][ T4372] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.165058][ T4372] binder: send failed reply for transaction 36, target dead [ 78.767029][ T5280] loop3: detected capacity change from 0 to 32768 [ 78.782069][ T5280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.256 (5280) [ 78.802890][ T5280] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.809555][ T5280] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 78.811000][ T5280] BTRFS info (device loop3): using free space tree [ 78.904196][ T5280] BTRFS info (device loop3): enabling ssd optimizations [ 78.954384][ T4320] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.987526][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 78.994430][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 79.003895][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 79.338486][ T5325] loop4: detected capacity change from 0 to 64 [ 79.688965][ T5325] hfs: get root inode failed [ 81.130322][ T5350] loop0: detected capacity change from 0 to 1024 [ 81.150514][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.304451][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 81.827026][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 81.827035][ T27] audit: type=1326 audit(81.810:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.4.277" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177128 code=0x0 [ 81.892189][ T5370] loop2: detected capacity change from 0 to 64 [ 81.905591][ T5370] hfs: get root inode failed [ 82.245749][ T5374] device syzkaller0 entered promiscuous mode [ 84.240175][ T5405] device syzkaller0 entered promiscuous mode [ 85.306046][ T5424] tmpfs: Bad value for 'mpol' [ 85.307039][ T5424] Soft offlining pfn 0x13c127 at process virtual address 0x20000000 [ 85.325328][ T5424] Soft offlining pfn 0x210ff2 at process virtual address 0x20001000 [ 85.443678][ T5436] loop3: detected capacity change from 0 to 64 [ 85.465815][ T5424] Memory failure: 0x210ff2: unhandlable page. [ 85.482090][ T5436] hfs: get root inode failed [ 87.343885][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6fbb91e: rx timeout, send abort [ 87.843916][ C1] vcan0: j1939_tp_rxtimer: 0x00000000545c0c66: rx timeout, send abort [ 87.845448][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6fbb91e: abort rx timeout. Force session deactivation [ 88.345318][ C1] vcan0: j1939_tp_rxtimer: 0x00000000545c0c66: abort rx timeout. Force session deactivation [ 97.100409][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 97.188642][ T5453] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 97.198042][ T5453] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.291812][ T5511] loop1: detected capacity change from 0 to 8192 [ 99.295271][ T5511] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 100.477544][ T5531] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 100.547077][ T5537] loop2: detected capacity change from 0 to 16 [ 100.559749][ T5537] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.109707][ T5552] loop1: detected capacity change from 0 to 128 [ 101.116578][ T5550] MPTCP: addr_signal error, rm_addr=1 [ 101.117990][ T5550] MPTCP: addr_signal error, rm_addr=1 [ 101.428393][ T5556] loop4: detected capacity change from 0 to 512 [ 101.460390][ T5552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.537799][ T5556] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.331: iget: bad i_size value: 38620345925642 [ 101.540994][ T5556] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.331: couldn't read orphan inode 15 (err -117) [ 101.547532][ T5556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.600246][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 103.461542][ T5604] loop3: detected capacity change from 0 to 512 [ 103.490226][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.633590][ T5604] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 28180508 [ 103.712021][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 104.493030][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 104.548407][ T5634] binder: 5633:5634 tried to acquire reference to desc 0, got 1 instead [ 104.567379][ T5634] binder: release 5633:5634 transaction 48 out, still active [ 104.568813][ T5634] binder: undelivered TRANSACTION_COMPLETE [ 104.571643][ T5634] binder: 5633:5634 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.574818][ T5634] binder: 5634 RLIMIT_NICE not set [ 104.575549][ T5634] binder: 5634 RLIMIT_NICE not set [ 104.628344][ T22] binder: release 5633:5634 transaction 48 in, still active [ 104.629689][ T22] binder: send failed reply for transaction 48, target dead [ 104.730938][ T5653] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 104.730938][ T5653] The task syz.3.358 (5653) triggered the difference, watch for misbehavior. [ 104.968104][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 104.980347][ T5656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 105.110726][ T5660] loop2: detected capacity change from 0 to 512 [ 105.116575][ T5660] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.117849][ T5660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.119513][ T5660] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 106.818923][ T5676] ptrace attach of "./syz-executor exec"[4320] was attempted by " [ 107.076267][ T5677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.100372][ T5677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.167823][ T5660] loop2: detected capacity change from 0 to 131072 [ 107.172917][ T5660] F2FS-fs (loop2): Test dummy encryption mode enabled [ 107.175426][ T5660] F2FS-fs (loop2): invalid crc value [ 107.502723][ T5660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.543799][ T5660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.561182][ T5660] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 107.618659][ T5660] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 108.830847][ T5719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.832200][ T5719] IPv6: NLM_F_CREATE should be set when creating new route [ 108.896476][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'. [ 108.976920][ T5730] loop0: detected capacity change from 0 to 128 [ 108.980156][ T5730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.064620][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 109.962460][ T5750] loop2: detected capacity change from 0 to 512 [ 110.007292][ T5750] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 110.009065][ T5750] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 110.010645][ T5750] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.383: Failed to acquire dquot type 1 [ 110.014544][ T5750] EXT4-fs (loop2): 1 truncate cleaned up [ 110.015428][ T5750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.017870][ T5750] EXT4-fs (loop2): unmounting filesystem. [ 110.449609][ T5761] binder: 5760:5761 tried to acquire reference to desc 0, got 1 instead [ 110.451740][ T5761] binder: 5760:5761 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 110.456337][ T5761] binder: 5761 RLIMIT_NICE not set [ 110.457124][ T5761] binder: 5761 RLIMIT_NICE not set [ 110.458005][ T5761] binder: send failed reply for transaction 53 to 5760:5761 [ 110.459172][ T5761] binder: 5760:5761 ioctl c0306201 20000680 returned -14 [ 110.461616][ T4433] binder: undelivered TRANSACTION_COMPLETE [ 110.462539][ T4433] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.468121][ T5765] loop3: detected capacity change from 0 to 1024 [ 110.477038][ T5765] hfsplus: failed to load extents file [ 110.518459][ T5484] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.542755][ T5769] loop0: detected capacity change from 0 to 8192 [ 110.554334][ T5769] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 112.012988][ T5840] random: crng reseeded on system resumption [ 112.618929][ T5857] loop4: detected capacity change from 0 to 256 [ 112.620547][ T5857] exfat: Deprecated parameter 'namecase' [ 112.621677][ T5857] exfat: Deprecated parameter 'namecase' [ 112.673536][ T5857] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 112.991402][ T4330] Bluetooth: hci1: Malformed Event: 0x48 [ 112.999421][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 114.012673][ T4333] exFAT-fs (loop4): invalid start cluster (4278190088) [ 114.109702][ T5890] netlink: 'syz.3.408': attribute type 11 has an invalid length. [ 114.111182][ T5890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.408'. [ 114.119800][ T5890] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 114.214552][ T5899] loop0: detected capacity change from 0 to 128 [ 114.246344][ T5890] team0: Port device macvlan0 added [ 114.252898][ T5899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.109756][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 115.410844][ T5927] tipc: Started in network mode [ 115.411838][ T5927] tipc: Node identity 4, cluster identity 4711 [ 115.412791][ T5927] tipc: Node number set to 4 [ 115.415881][ T5924] binder: 5922:5924 tried to acquire reference to desc 0, got 1 instead [ 115.429593][ T5924] binder: 5922:5924 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 115.433299][ T5924] binder: 5924 RLIMIT_NICE not set [ 115.436377][ T5924] binder: 5924 RLIMIT_NICE not set [ 115.438862][ T5931] device syzkaller0 entered promiscuous mode [ 115.460258][ T4369] binder: release 5922:5924 transaction 58 out, still active [ 115.461444][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 115.462462][ T4369] binder: send failed reply for transaction 65 to 5922:5924 [ 115.470271][ T112] binder: release 5922:5924 transaction 58 in, still active [ 115.471396][ T112] binder: send failed reply for transaction 58, target dead [ 115.472584][ T112] binder: undelivered TRANSACTION_COMPLETE [ 115.475105][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.534784][ T5939] loop1: detected capacity change from 0 to 128 [ 115.621523][ T5484] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.636986][ T5945] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 115.647143][ T5945] device bond1 entered promiscuous mode [ 115.648254][ T5945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.685364][ T5945] bond1: (slave bridge1): making interface the new active one [ 115.686754][ T5945] device bridge1 entered promiscuous mode [ 115.690008][ T5945] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 115.698806][ T5509] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 116.641161][ T5957] binder: 5956:5957 tried to acquire reference to desc 0, got 1 instead [ 116.642924][ T5957] binder: 5956:5957 got transaction with invalid fd, -5 [ 116.645024][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 116.647193][ T5957] binder: 5957:5956 translate fd array failed [ 116.648298][ T5957] binder: 5956:5957 transaction call to 5956:0 failed 70/29201/-9, size 96-24 line 3486 [ 116.664200][ T3897] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.469683][ T5968] loop0: detected capacity change from 0 to 16 [ 120.552630][ T5968] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.558774][ T5968] syz.0.429: attempt to access beyond end of device [ 120.558774][ T5968] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 120.805882][ T5980] loop4: detected capacity change from 0 to 65536 [ 120.867299][ T5991] device syzkaller0 entered promiscuous mode [ 121.786657][ T5980] XFS (loop4): Mounting V5 Filesystem [ 121.879421][ T5980] XFS (loop4): Ending clean mount [ 121.952162][ T6009] loop2: detected capacity change from 0 to 512 [ 121.988860][ T6009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.997563][ T6009] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 122.014149][ T6005] tipc: Started in network mode [ 122.016141][ T6005] tipc: Node identity 080211000001, cluster identity 4711 [ 122.017393][ T6005] tipc: Enabled bearer , priority 0 [ 122.127730][ T4333] XFS (loop4): Unmounting Filesystem [ 122.946332][ T6022] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 122.998491][ T6022] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.034094][ T22] tipc: Node number set to 134418688 [ 123.107193][ T6022] bond1: (slave dummy0): making interface the new active one [ 123.120671][ T6022] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 123.153304][ T6022] netlink: 14 bytes leftover after parsing attributes in process `syz.2.446'. [ 123.294681][ T6022] bond1: (slave dummy0): Releasing active interface [ 123.308043][ T6023] loop1: detected capacity change from 0 to 32768 [ 123.321313][ T6023] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.445 (6023) [ 123.326415][ T6023] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.328047][ T6023] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 123.329438][ T6023] BTRFS info (device loop1): using free space tree [ 123.523916][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 123.581385][ T6023] BTRFS info (device loop1): enabling ssd optimizations [ 123.639669][ T4321] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.993900][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.994922][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.139000][ T6107] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 126.167044][ T6107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.265769][ T6107] device veth5 entered promiscuous mode [ 126.268357][ T6107] bond2: (slave veth5): Enslaving as an active interface with a down link [ 126.321305][ T6107] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 126.519788][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 126.527948][ T6105] loop3: detected capacity change from 0 to 40427 [ 126.536119][ T6105] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.537300][ T6105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.548933][ T6105] F2FS-fs (loop3): invalid crc value [ 126.579379][ T6105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.620063][ T6105] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 126.621347][ T6105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.738646][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 126.852649][ T6149] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 126.861773][ T6150] binder: 6146:6150 tried to acquire reference to desc 0, got 1 instead [ 126.865298][ T6150] binder: 6146:6150 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 126.867424][ T6150] binder: 6150 RLIMIT_NICE not set [ 126.868625][ T1964] binder: release 6146:6150 transaction 75 out, still active [ 127.223753][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 127.239601][ T6149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.263379][ T1964] binder: send failed reply for transaction 75, target dead [ 127.270589][ T6149] bond2: (slave ip6gretap1): making interface the new active one [ 127.274407][ T6149] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.395132][ T6160] device syzkaller0 entered promiscuous mode [ 127.507960][ T6167] loop3: detected capacity change from 0 to 256 [ 127.768245][ T6167] FAT-fs (loop3): Directory bread(block 64) failed [ 127.769411][ T6167] FAT-fs (loop3): Directory bread(block 65) failed [ 127.770759][ T6167] FAT-fs (loop3): Directory bread(block 66) failed [ 127.771872][ T6167] FAT-fs (loop3): Directory bread(block 67) failed [ 127.773285][ T6167] FAT-fs (loop3): Directory bread(block 68) failed [ 127.774385][ T6167] FAT-fs (loop3): Directory bread(block 69) failed [ 127.775671][ T6167] FAT-fs (loop3): Directory bread(block 70) failed [ 127.776824][ T6167] FAT-fs (loop3): Directory bread(block 71) failed [ 127.778072][ T6167] FAT-fs (loop3): Directory bread(block 72) failed [ 127.779258][ T6167] FAT-fs (loop3): Directory bread(block 73) failed [ 128.361755][ T6172] tipc: Enabled bearer , priority 0 [ 128.487310][ T6178] device syzkaller0 entered promiscuous mode [ 129.121670][ T6175] loop2: detected capacity change from 0 to 1764 [ 129.139821][ T6186] 9pnet_fd: Insufficient options for proto=fd [ 129.548594][ T6186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.626699][ T6203] loop3: detected capacity change from 0 to 128 [ 129.674358][ T5484] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.787427][ T6200] loop1: detected capacity change from 0 to 32768 [ 129.821101][ T6215] process 'syz.4.500' launched './file0' with NULL argv: empty string added [ 129.846471][ T6200] XFS (loop1): Mounting V5 Filesystem [ 129.868660][ T6200] XFS (loop1): Ending clean mount [ 129.875480][ T6200] XFS (loop1): Quotacheck needed: Please wait. [ 130.246073][ T6200] XFS (loop1): Quotacheck: Done. [ 130.311661][ T6200] loop2: detected capacity change from 0 to 7 [ 130.314397][ T6200] Dev loop2: unable to read RDB block 7 [ 130.315367][ T6200] loop2: AHDI p1 p2 p3 p4 [ 130.316020][ T6200] loop2: partition table partially beyond EOD, truncated [ 130.317730][ T6200] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.319023][ T6200] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.320253][ T6200] loop2: p3 start 16777215 is beyond EOD, truncated [ 130.328198][ T3935] Dev loop2: unable to read RDB block 7 [ 130.329329][ T3935] loop2: AHDI p1 p2 p3 p4 [ 130.330079][ T3935] loop2: partition table partially beyond EOD, truncated [ 130.331557][ T3935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.332757][ T3935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.335044][ T3935] loop2: p3 start 16777215 is beyond EOD, truncated [ 130.696319][ T4321] XFS (loop1): Unmounting Filesystem [ 130.730236][ T6232] tipc: Started in network mode [ 130.731118][ T6232] tipc: Node identity 4, cluster identity 4711 [ 130.732197][ T6232] tipc: Node number set to 4 [ 130.761996][ T6235] loop3: detected capacity change from 0 to 4096 [ 130.775732][ T6235] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 132.125284][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 132.157672][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 132.223123][ C0] sched: RT throttling activated [ 132.326965][ T6235] ntfs3: loop3: failed to convert "c46c" to cp855 [ 132.791675][ T6256] loop2: detected capacity change from 0 to 128 [ 132.827525][ T5483] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.829347][ T6261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.513'. [ 132.890257][ T6266] 9pnet: p9_errstr2errno: server reported unknown error VmIL◅N [ 133.416185][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 133.452800][ T6279] loop1: detected capacity change from 0 to 512 [ 133.466062][ T6279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.478347][ T6279] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 133.505134][ T6279] EXT4-fs (loop1): 1 truncate cleaned up [ 133.506306][ T6279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.604727][ T6290] loop2: detected capacity change from 0 to 256 [ 133.607823][ T6290] exfat: Deprecated parameter 'utf8' [ 133.608815][ T6290] exfat: Deprecated parameter 'namecase' [ 133.609898][ T6290] exfat: Deprecated parameter 'namecase' [ 133.610856][ T6290] exfat: Deprecated parameter 'utf8' [ 133.621745][ T6290] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 134.469842][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 134.492822][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.517516][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.559942][ T6295] loop3: detected capacity change from 0 to 256 [ 134.592918][ T6295] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 134.625848][ T6299] binder: 6296:6299 tried to acquire reference to desc 0, got 1 instead [ 134.628027][ T6299] binder: 6296:6299 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.642752][ T6299] binder: 6299 RLIMIT_NICE not set [ 134.650389][ T6299] binder: 6299 RLIMIT_NICE not set [ 134.668483][ T1964] binder: release 6296:6299 transaction 80 out, still active [ 134.669707][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 134.711287][ T1964] binder: release 6296:6299 transaction 80 in, still active [ 134.712494][ T1964] binder: send failed reply for transaction 80, target dead [ 134.991737][ T6303] device syzkaller0 entered promiscuous mode [ 135.112181][ T6307] loop2: detected capacity change from 0 to 512 [ 135.125042][ T6307] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.526: bad orphan inode 15 [ 135.126996][ T6307] ext4_test_bit(bit=14, block=18) = 1 [ 135.127928][ T6307] is_bad_inode(inode)=0 [ 135.128585][ T6307] NEXT_ORPHAN(inode)=1023 [ 135.132720][ T6307] max_ino=32 [ 135.137274][ T6307] i_nlink=0 [ 135.142681][ T6307] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2916: inode #15: comm syz.2.526: corrupted xattr block 19 [ 135.155274][ T6307] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 135.160144][ T6307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.521248][ T6313] loop1: detected capacity change from 0 to 1024 [ 135.989851][ T6320] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 136.018572][ T6320] device bond2 entered promiscuous mode [ 136.027996][ T6320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.106375][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'. [ 136.145114][ T6320] bond2: (slave bridge2): making interface the new active one [ 136.146300][ T6320] device bridge2 entered promiscuous mode [ 136.152314][ T6320] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 136.161379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 136.176095][ T5509] hfsplus: b-tree write err: -5, ino 25 [ 136.177201][ T5509] hfsplus: b-tree write err: -5, ino 4 [ 136.178053][ T5509] hfsplus: b-tree write err: -5, ino 2 [ 136.644768][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 138.855045][ T6361] "syz.2.540" (6361) uses obsolete ecb(arc4) skcipher [ 140.466121][ T6367] loop2: detected capacity change from 0 to 8192 [ 140.469697][ T6367] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.210672][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 149.218021][ T6355] bridge1: port 1(vlan2) entered blocking state [ 149.219048][ T6355] bridge1: port 1(vlan2) entered disabled state [ 149.227383][ T6355] device vlan2 entered promiscuous mode [ 149.228277][ T6355] device vlan0 entered promiscuous mode [ 149.229784][ T6355] bridge1: port 1(vlan2) entered blocking state [ 149.230786][ T6355] bridge1: port 1(vlan2) entered forwarding state [ 149.331190][ T6371] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 150.029341][ T6372] device ipip0 entered promiscuous mode [ 150.889926][ T6400] loop3: detected capacity change from 0 to 128 [ 150.907436][ T6390] device syzkaller0 entered promiscuous mode [ 151.032355][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 151.302328][ T6416] loop3: detected capacity change from 0 to 512 [ 151.305465][ T6416] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.318444][ T6416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.454204][ T6416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.127453][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 152.161850][ T6438] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 152.168783][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.220568][ T6441] sctp: [Deprecated]: syz.2.561 (pid 6441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.220568][ T6441] Use struct sctp_sack_info instead [ 152.270683][ T6445] loop2: detected capacity change from 0 to 512 [ 152.287092][ T6445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.289026][ T6445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.291657][ T6445] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.562: inode has both inline data and extents flags [ 152.294468][ T6445] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.562: couldn't read orphan inode 15 (err -117) [ 152.302504][ T6445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.330183][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 152.331922][ T6445] netlink: 'syz.2.562': attribute type 30 has an invalid length. [ 152.342455][ T6445] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.343874][ T6445] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.345231][ T6445] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.346537][ T6445] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.358779][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 152.362504][ T6445] netlink: 'syz.2.562': attribute type 30 has an invalid length. [ 152.398807][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 152.680727][ T6456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.565'. [ 153.001381][ T6474] MPTCP: kernel_bind error, err=-99 [ 153.013843][ T6477] bridge0: port 3(vlan5) entered blocking state [ 153.017037][ T6477] bridge0: port 3(vlan5) entered disabled state [ 153.020267][ T6477] device vlan5 entered promiscuous mode [ 153.022426][ T6477] device bond0 entered promiscuous mode [ 153.025936][ T6477] device bond_slave_0 entered promiscuous mode [ 153.027107][ T6477] device bond_slave_1 entered promiscuous mode [ 153.386285][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 153.439288][ T6484] bridge3: port 1(veth5) entered blocking state [ 153.440443][ T6484] bridge3: port 1(veth5) entered disabled state [ 153.441838][ T6484] device veth5 entered promiscuous mode [ 154.713104][ T27] audit: type=1326 audit(154.690:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.718220][ T6519] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.587'. [ 154.727924][ T27] audit: type=1326 audit(154.700:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.742183][ T27] audit: type=1326 audit(154.700:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.752223][ T27] audit: type=1326 audit(154.700:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.762994][ T27] audit: type=1326 audit(154.700:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.771789][ T27] audit: type=1326 audit(154.700:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.778186][ T27] audit: type=1326 audit(154.700:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.781989][ T27] audit: type=1326 audit(154.700:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.831236][ T27] audit: type=1326 audit(154.700:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 154.835553][ T27] audit: type=1326 audit(154.700:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8177128 code=0x7ffc0000 [ 155.219145][ T6534] loop3: detected capacity change from 0 to 1024 [ 155.235665][ T6534] EXT4-fs: inline encryption not supported [ 155.242825][ T6534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.247475][ T6534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.251806][ T6534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 155.253311][ T6534] System zones: 0-1, 3-36 [ 155.259895][ T6534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.291980][ T6534] [ 155.292348][ T6534] ====================================================== [ 155.293419][ T6534] WARNING: possible circular locking dependency detected [ 155.294590][ T6534] syzkaller #0 Not tainted [ 155.295357][ T6534] ------------------------------------------------------ [ 155.296485][ T6534] syz.3.593/6534 is trying to acquire lock: [ 155.297400][ T6534] ffff0000f66d45e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x50/0x1c4 [ 155.298910][ T6534] [ 155.298910][ T6534] but task is already holding lock: [ 155.300182][ T6534] ffff0000f65a48c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1778 [ 155.301692][ T6534] [ 155.301692][ T6534] which lock already depends on the new lock. [ 155.301692][ T6534] [ 155.303336][ T6534] [ 155.303336][ T6534] the existing dependency chain (in reverse order) is: [ 155.304739][ T6534] [ 155.304739][ T6534] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 155.305917][ T6534] down_read+0x64/0x300 [ 155.306593][ T6534] ext4_map_blocks+0x278/0x1778 [ 155.307388][ T6534] ext4_getblk+0x178/0x664 [ 155.308123][ T6534] ext4_bread+0x3c/0x1a8 [ 155.308845][ T6534] ext4_quota_read+0x160/0x350 [ 155.309636][ T6534] find_tree_dqentry+0x174/0xc04 [ 155.310453][ T6534] find_tree_dqentry+0x4f8/0xc04 [ 155.311242][ T6534] find_tree_dqentry+0x4f8/0xc04 [ 155.312046][ T6534] find_tree_dqentry+0x4f8/0xc04 [ 155.312949][ T6534] qtree_read_dquot+0x49c/0x774 [ 155.313836][ T6534] v2_read_dquot+0xbc/0x118 [ 155.314678][ T6534] dquot_acquire+0x120/0x4d8 [ 155.315524][ T6534] ext4_acquire_dquot+0x270/0x428 [ 155.316416][ T6534] dqget+0x654/0xcc4 [ 155.317163][ T6534] __dquot_initialize+0x294/0xacc [ 155.318061][ T6534] dquot_initialize+0x24/0x34 [ 155.318836][ T6534] ext4_process_orphan+0x5c/0x2b4 [ 155.319688][ T6534] ext4_orphan_cleanup+0x920/0x1060 [ 155.320520][ T6534] ext4_fill_super+0x6188/0x660c [ 155.321364][ T6534] get_tree_bdev+0x358/0x544 [ 155.322139][ T6534] ext4_get_tree+0x28/0x38 [ 155.322898][ T6534] vfs_get_tree+0x90/0x274 [ 155.323626][ T6534] do_new_mount+0x228/0x810 [ 155.324521][ T6534] path_mount+0x5bc/0xe80 [ 155.325327][ T6534] __arm64_sys_mount+0x49c/0x59c [ 155.326179][ T6534] invoke_syscall+0x98/0x2b4 [ 155.327022][ T6534] el0_svc_common+0x138/0x258 [ 155.327922][ T6534] do_el0_svc+0x58/0x130 [ 155.328686][ T6534] el0_svc+0x58/0x128 [ 155.329449][ T6534] el0t_64_sync_handler+0x84/0xf0 [ 155.330337][ T6534] el0t_64_sync+0x18c/0x190 [ 155.331127][ T6534] [ 155.331127][ T6534] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 155.332426][ T6534] down_read+0x64/0x300 [ 155.333168][ T6534] v2_read_dquot+0x4c/0x118 [ 155.333956][ T6534] dquot_acquire+0x120/0x4d8 [ 155.334861][ T6534] ext4_acquire_dquot+0x270/0x428 [ 155.335676][ T6534] dqget+0x654/0xcc4 [ 155.336377][ T6534] __dquot_initialize+0x294/0xacc [ 155.337182][ T6534] dquot_initialize+0x24/0x34 [ 155.337901][ T6534] ext4_process_orphan+0x5c/0x2b4 [ 155.338767][ T6534] ext4_orphan_cleanup+0x920/0x1060 [ 155.339626][ T6534] ext4_fill_super+0x6188/0x660c [ 155.340510][ T6534] get_tree_bdev+0x358/0x544 [ 155.341251][ T6534] ext4_get_tree+0x28/0x38 [ 155.341981][ T6534] vfs_get_tree+0x90/0x274 [ 155.342738][ T6534] do_new_mount+0x228/0x810 [ 155.343497][ T6534] path_mount+0x5bc/0xe80 [ 155.344254][ T6534] __arm64_sys_mount+0x49c/0x59c [ 155.345048][ T6534] invoke_syscall+0x98/0x2b4 [ 155.345793][ T6534] el0_svc_common+0x138/0x258 [ 155.346547][ T6534] do_el0_svc+0x58/0x130 [ 155.347255][ T6534] el0_svc+0x58/0x128 [ 155.347921][ T6534] el0t_64_sync_handler+0x84/0xf0 [ 155.348742][ T6534] el0t_64_sync+0x18c/0x190 [ 155.349485][ T6534] [ 155.349485][ T6534] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 155.350666][ T6534] __lock_acquire+0x2880/0x6800 [ 155.351428][ T6534] lock_acquire+0x20c/0x63c [ 155.352082][ T6534] __mutex_lock_common+0x190/0x1f60 [ 155.353012][ T6534] mutex_lock_nested+0x38/0x44 [ 155.353894][ T6534] dquot_commit+0x50/0x1c4 [ 155.354709][ T6534] ext4_write_dquot+0x1b4/0x31c [ 155.355570][ T6534] ext4_mark_dquot_dirty+0xe8/0x140 [ 155.356470][ T6534] mark_all_dquot_dirty+0x108/0x424 [ 155.357362][ T6534] __dquot_alloc_space+0x560/0xce0 [ 155.358305][ T6534] ext4_mb_new_blocks+0xd48/0x4338 [ 155.359214][ T6534] ext4_ext_map_blocks+0x1394/0x56f4 [ 155.360119][ T6534] ext4_map_blocks+0x860/0x1778 [ 155.360939][ T6534] _ext4_get_block+0x19c/0x4d8 [ 155.361792][ T6534] ext4_get_block_unwritten+0x3c/0x110 [ 155.362801][ T6534] ext4_block_write_begin+0x50c/0x10e4 [ 155.363740][ T6534] ext4_write_begin+0x5f4/0x131c [ 155.364598][ T6534] ext4_da_write_begin+0x348/0x990 [ 155.365501][ T6534] generic_perform_write+0x234/0x4f4 [ 155.366402][ T6534] ext4_buffered_write_iter+0x2c4/0x528 [ 155.367331][ T6534] ext4_file_write_iter+0x18c/0x1574 [ 155.368159][ T6534] vfs_write+0x3ec/0x7f0 [ 155.368875][ T6534] ksys_write+0x12c/0x224 [ 155.369578][ T6534] __arm64_sys_write+0x7c/0x90 [ 155.370353][ T6534] invoke_syscall+0x98/0x2b4 [ 155.371201][ T6534] el0_svc_common+0x138/0x258 [ 155.372089][ T6534] do_el0_svc+0x58/0x130 [ 155.372853][ T6534] el0_svc+0x58/0x128 [ 155.373602][ T6534] el0t_64_sync_handler+0x84/0xf0 [ 155.374593][ T6534] el0t_64_sync+0x18c/0x190 [ 155.375424][ T6534] [ 155.375424][ T6534] other info that might help us debug this: [ 155.375424][ T6534] [ 155.377021][ T6534] Chain exists of: [ 155.377021][ T6534] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 155.377021][ T6534] [ 155.379090][ T6534] Possible unsafe locking scenario: [ 155.379090][ T6534] [ 155.380180][ T6534] CPU0 CPU1 [ 155.380968][ T6534] ---- ---- [ 155.381745][ T6534] lock(&ei->i_data_sem/2); [ 155.382420][ T6534] lock(&s->s_dquot.dqio_sem); [ 155.383561][ T6534] lock(&ei->i_data_sem/2); [ 155.384639][ T6534] lock(&dquot->dq_lock); [ 155.385312][ T6534] [ 155.385312][ T6534] *** DEADLOCK *** [ 155.385312][ T6534] [ 155.386551][ T6534] 5 locks held by syz.3.593/6534: [ 155.387312][ T6534] #0: ffff0000da021768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x114/0x16c [ 155.388715][ T6534] #1: ffff0000dd0ae460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x244/0x7f0 [ 155.390093][ T6534] #2: ffff0000f65a4a38 (&sb->s_type->i_mutex_key#10){++++}-{3:3}, at: ext4_buffered_write_iter+0x98/0x528 [ 155.391693][ T6534] #3: ffff0000f65a48c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1778 [ 155.393133][ T6534] #4: ffff80001551c9c8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 155.394634][ T6534] [ 155.394634][ T6534] stack backtrace: [ 155.395550][ T6534] CPU: 0 PID: 6534 Comm: syz.3.593 Not tainted syzkaller #0 [ 155.396677][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 155.398242][ T6534] Call trace: [ 155.398774][ T6534] dump_backtrace+0x1c0/0x1ec [ 155.399527][ T6534] show_stack+0x2c/0x3c [ 155.400143][ T6534] __dump_stack+0x30/0x40 [ 155.400802][ T6534] dump_stack_lvl+0xf4/0x15c [ 155.401454][ T6534] dump_stack+0x1c/0x5c [ 155.402046][ T6534] print_circular_bug+0x148/0x1b0 [ 155.402742][ T6534] check_noncircular+0x264/0x2f8 [ 155.403435][ T6534] __lock_acquire+0x2880/0x6800 [ 155.404121][ T6534] lock_acquire+0x20c/0x63c [ 155.404880][ T6534] __mutex_lock_common+0x190/0x1f60 [ 155.405756][ T6534] mutex_lock_nested+0x38/0x44 [ 155.406554][ T6534] dquot_commit+0x50/0x1c4 [ 155.407319][ T6534] ext4_write_dquot+0x1b4/0x31c [ 155.408119][ T6534] ext4_mark_dquot_dirty+0xe8/0x140 [ 155.408971][ T6534] mark_all_dquot_dirty+0x108/0x424 [ 155.409818][ T6534] __dquot_alloc_space+0x560/0xce0 [ 155.410642][ T6534] ext4_mb_new_blocks+0xd48/0x4338 [ 155.411446][ T6534] ext4_ext_map_blocks+0x1394/0x56f4 [ 155.412320][ T6534] ext4_map_blocks+0x860/0x1778 [ 155.413178][ T6534] _ext4_get_block+0x19c/0x4d8 [ 155.414000][ T6534] ext4_get_block_unwritten+0x3c/0x110 [ 155.414934][ T6534] ext4_block_write_begin+0x50c/0x10e4 [ 155.415766][ T6534] ext4_write_begin+0x5f4/0x131c [ 155.416579][ T6534] ext4_da_write_begin+0x348/0x990 [ 155.417389][ T6534] generic_perform_write+0x234/0x4f4 [ 155.418242][ T6534] ext4_buffered_write_iter+0x2c4/0x528 [ 155.419161][ T6534] ext4_file_write_iter+0x18c/0x1574 [ 155.420024][ T6534] vfs_write+0x3ec/0x7f0 [ 155.420706][ T6534] ksys_write+0x12c/0x224 [ 155.421398][ T6534] __arm64_sys_write+0x7c/0x90 [ 155.422168][ T6534] invoke_syscall+0x98/0x2b4 [ 155.422926][ T6534] el0_svc_common+0x138/0x258 [ 155.423697][ T6534] do_el0_svc+0x58/0x130 [ 155.424383][ T6534] el0_svc+0x58/0x128 [ 155.425008][ T6534] el0t_64_sync_handler+0x84/0xf0 [ 155.425771][ T6534] el0t_64_sync+0x18c/0x190 [ 155.426534][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.440745][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 158.733163][ T4324] Bluetooth: hci3: command 0x0406 tx timeout [ 158.734112][ T4324] Bluetooth: hci4: command 0x0406 tx timeout [ 158.735084][ T4324] Bluetooth: hci0: command 0x0406 tx timeout [ 158.735976][ T4324] Bluetooth: hci2: command 0x0406 tx timeout