last executing test programs: 5.548289946s ago: executing program 2 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5.134224261s ago: executing program 4 (id=852): eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.964087809s ago: executing program 0 (id=854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.929046318s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.624487986s ago: executing program 2 (id=857): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r4, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 4.242815125s ago: executing program 4 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x556, 0x9, 0x8001, 0x2, 0x44, 0x95, 0x3}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x2004c015) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2c, 0x93, 0xd, 0x6}, {0x6, 0x6, 0x2, 0x8}]}) bind$inet(r3, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x6000) shutdown(r3, 0x1) 3.831441973s ago: executing program 1 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 3.734249495s ago: executing program 2 (id=862): eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.657242547s ago: executing program 3 (id=864): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) brk(0x20ff3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3.495126241s ago: executing program 0 (id=865): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x24941a, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket(0x10, 0x80002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) io_uring_enter(0xffffffffffffffff, 0xcd, 0x5b72, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.267226139s ago: executing program 4 (id=866): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.653617039s ago: executing program 1 (id=867): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x3, 0x1e5}, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0x2e0, 0x1b8, 0xd0, 0xd0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x3}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.610769792s ago: executing program 2 (id=868): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000280)=ANY=[], 0x0, 0x1c7, &(0x7f0000000080)="$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") r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) flistxattr(r2, &(0x7f0000000280)=""/83, 0x53) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 2.609403625s ago: executing program 3 (id=869): eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.40064047s ago: executing program 1 (id=870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c93a0eefa186e3308a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb293"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}) 1.582780007s ago: executing program 0 (id=871): eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.582091578s ago: executing program 3 (id=872): r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) 1.347885798s ago: executing program 1 (id=873): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.346372968s ago: executing program 4 (id=874): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.147353752s ago: executing program 2 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.096475807s ago: executing program 0 (id=876): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000003c0)='geneve0\x00') fallocate(0xffffffffffffffff, 0x0, 0x1, 0x10003) 1.095457545s ago: executing program 4 (id=877): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bind$alg(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.040019296s ago: executing program 1 (id=878): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) 1.008679353s ago: executing program 3 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 636.823897ms ago: executing program 4 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 129.354248ms ago: executing program 3 (id=881): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 128.457914ms ago: executing program 1 (id=882): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 112.197841ms ago: executing program 0 (id=883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c93a0eefa186e3308a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb293"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}) 78.859594ms ago: executing program 2 (id=884): eventfd2(0x9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 3 (id=885): socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 28.715263][ T4696] cgroup: Unknown subsys name 'net' [ 28.845357][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.847618][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.048205][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.372763][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.374678][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.374924][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.375260][ T4710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.375481][ T4710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.381483][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.387717][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.389380][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.392986][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.396973][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.398568][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.400369][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.402233][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.414036][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.416571][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.418340][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.420060][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.420235][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.420583][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.425401][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.427537][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.430723][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.434585][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.436114][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.438310][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.723729][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726650][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.728281][ T4709] bridge_slave_0: entered allmulticast mode [ 30.730096][ T4709] bridge_slave_0: entered promiscuous mode [ 30.732990][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.733027][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.733479][ T4709] bridge_slave_1: entered allmulticast mode [ 30.734499][ T4709] bridge_slave_1: entered promiscuous mode [ 30.771041][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.783379][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.801785][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.801887][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.801942][ T4708] bridge_slave_0: entered allmulticast mode [ 30.802773][ T4708] bridge_slave_0: entered promiscuous mode [ 30.803683][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.803709][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.804466][ T4708] bridge_slave_1: entered allmulticast mode [ 30.804917][ T4708] bridge_slave_1: entered promiscuous mode [ 30.809740][ T4709] team0: Port device team_slave_0 added [ 30.818004][ T4709] team0: Port device team_slave_1 added [ 30.832935][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.835014][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.840286][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.843899][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.847946][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.847976][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.847993][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.859295][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.895797][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.897337][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.899028][ T4717] bridge_slave_0: entered allmulticast mode [ 30.900687][ T4717] bridge_slave_0: entered promiscuous mode [ 30.903325][ T4708] team0: Port device team_slave_0 added [ 30.915620][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.915712][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.915779][ T4717] bridge_slave_1: entered allmulticast mode [ 30.916226][ T4717] bridge_slave_1: entered promiscuous mode [ 30.920666][ T4708] team0: Port device team_slave_1 added [ 30.925305][ T4709] hsr_slave_0: entered promiscuous mode [ 30.925692][ T4709] hsr_slave_1: entered promiscuous mode [ 30.938114][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.938182][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.938351][ T4713] bridge_slave_0: entered allmulticast mode [ 30.938802][ T4713] bridge_slave_0: entered promiscuous mode [ 30.949303][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.952486][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.954062][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.954130][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.954219][ T4713] bridge_slave_1: entered allmulticast mode [ 30.954668][ T4713] bridge_slave_1: entered promiscuous mode [ 30.958441][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.958450][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.958464][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.959137][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.959145][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.959155][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.993536][ T4717] team0: Port device team_slave_0 added [ 30.995921][ T4717] team0: Port device team_slave_1 added [ 30.997329][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.009838][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011185][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.011279][ T4724] bridge_slave_0: entered allmulticast mode [ 31.011771][ T4724] bridge_slave_0: entered promiscuous mode [ 31.013244][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.015718][ T4708] hsr_slave_0: entered promiscuous mode [ 31.016046][ T4708] hsr_slave_1: entered promiscuous mode [ 31.016277][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 31.016325][ T4708] Cannot create hsr debugfs directory [ 31.020362][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.020372][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.020389][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.023561][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.023589][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.023649][ T4724] bridge_slave_1: entered allmulticast mode [ 31.024520][ T4724] bridge_slave_1: entered promiscuous mode [ 31.031917][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.031928][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.031944][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.053632][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.054374][ T4713] team0: Port device team_slave_0 added [ 31.064023][ T4713] team0: Port device team_slave_1 added [ 31.068165][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.097232][ T4717] hsr_slave_0: entered promiscuous mode [ 31.097589][ T4717] hsr_slave_1: entered promiscuous mode [ 31.097816][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.097826][ T4717] Cannot create hsr debugfs directory [ 31.099171][ T4724] team0: Port device team_slave_0 added [ 31.099481][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.099489][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.099501][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.100451][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.100460][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.100471][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.111705][ T4724] team0: Port device team_slave_1 added [ 31.136248][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.137510][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.142031][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.159063][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.159093][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.159110][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.168947][ T4713] hsr_slave_0: entered promiscuous mode [ 31.170693][ T4713] hsr_slave_1: entered promiscuous mode [ 31.172211][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.173314][ T4713] Cannot create hsr debugfs directory [ 31.191985][ T4724] hsr_slave_0: entered promiscuous mode [ 31.193589][ T4724] hsr_slave_1: entered promiscuous mode [ 31.194668][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.194681][ T4724] Cannot create hsr debugfs directory [ 31.198528][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.201968][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.204117][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.206632][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.210179][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.212978][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.216870][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.219126][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.295406][ T4708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.297995][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.299644][ T4708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.301895][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.302423][ T4708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.304217][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.309167][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.309227][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.309376][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309405][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.311013][ T4708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.312894][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.337400][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337462][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.337562][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.337602][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.344732][ T4717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.346904][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.347546][ T4717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.349102][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.356651][ T4717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.359344][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.360085][ T4717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.361396][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.389433][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.394985][ T4713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.397974][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.402039][ T4713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.405220][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.406938][ T4713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.409406][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.411160][ T4713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.413364][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.416924][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.418327][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.420762][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.422438][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.449888][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.451584][ T4724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.452989][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.453317][ T4724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.455294][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.457010][ T4724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.459231][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.463287][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.463345][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.466427][ T4724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.468872][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.478432][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.478484][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.481830][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.502065][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.502104][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.520474][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.530847][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.530890][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.551304][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.551352][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.571792][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.581117][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.583075][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.587816][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.601383][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.610015][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.610059][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.610510][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.610530][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.617317][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.632920][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.632959][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.637862][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.637903][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.640701][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.651403][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.651464][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.658965][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.662305][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.662357][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.672145][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.672199][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.699638][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.701884][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.811806][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.829020][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.847362][ T4709] veth0_vlan: entered promiscuous mode [ 31.862020][ T4709] veth1_vlan: entered promiscuous mode [ 31.876057][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.880098][ T4708] veth0_vlan: entered promiscuous mode [ 31.890876][ T4709] veth0_macvtap: entered promiscuous mode [ 31.900954][ T4708] veth1_vlan: entered promiscuous mode [ 31.910097][ T4709] veth1_macvtap: entered promiscuous mode [ 31.917787][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.925633][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.936044][ T4869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.937928][ T4869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.939514][ T4869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.941186][ T4869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950398][ T4708] veth0_macvtap: entered promiscuous mode [ 31.967810][ T4708] veth1_macvtap: entered promiscuous mode [ 31.970146][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.973687][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.000352][ T4724] veth0_vlan: entered promiscuous mode [ 32.012184][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.026112][ T4724] veth1_vlan: entered promiscuous mode [ 32.029087][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.029117][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.035274][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.038243][ T1281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.040749][ T1281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041312][ T1281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041346][ T1281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.060083][ T4713] veth0_vlan: entered promiscuous mode [ 32.071615][ T4717] veth0_vlan: entered promiscuous mode [ 32.077784][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.077812][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.087926][ T4713] veth1_vlan: entered promiscuous mode [ 32.091684][ T4724] veth0_macvtap: entered promiscuous mode [ 32.097051][ T4724] veth1_macvtap: entered promiscuous mode [ 32.098925][ T4717] veth1_vlan: entered promiscuous mode [ 32.119606][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.119637][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.128794][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.132233][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.134461][ T4717] veth0_macvtap: entered promiscuous mode [ 32.139582][ T4717] veth1_macvtap: entered promiscuous mode [ 32.149224][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.151895][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.151930][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.151948][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.151964][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.152304][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.152314][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.159962][ T4713] veth0_macvtap: entered promiscuous mode [ 32.192859][ T4713] veth1_macvtap: entered promiscuous mode [ 32.209877][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.211178][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.240381][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.258330][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.280842][ T4869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280898][ T4869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280933][ T4869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.280958][ T4869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291339][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291388][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291418][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291440][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528544][ T4728] Bluetooth: hci0: command tx timeout [ 32.528814][ T4728] Bluetooth: hci3: command tx timeout [ 32.529058][ T4728] Bluetooth: hci1: command tx timeout [ 32.538820][ T4728] Bluetooth: hci4: command tx timeout [ 32.538903][ T4728] Bluetooth: hci2: command tx timeout [ 32.550183][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.550218][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.586023][ T4869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.587818][ T4869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.617486][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.620341][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.623564][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.623582][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.650502][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.650533][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.667473][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.669217][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.147748][ T4907] loop2: detected capacity change from 0 to 128 [ 33.148220][ T4907] ======================================================= [ 33.148220][ T4907] WARNING: The mand mount option has been deprecated and [ 33.148220][ T4907] and is ignored by this kernel. Remove the mand [ 33.148220][ T4907] option from the mount to silence this warning. [ 33.148220][ T4907] ======================================================= [ 33.175254][ T4907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.914829][ T4709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.926840][ T4917] loop1: detected capacity change from 0 to 8192 [ 33.938660][ T4917] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.685896][ T4933] loop0: detected capacity change from 0 to 512 [ 34.691986][ T4728] Bluetooth: hci4: command tx timeout [ 34.692471][ T4728] Bluetooth: hci1: command tx timeout [ 34.692491][ T4728] Bluetooth: hci3: command tx timeout [ 34.692508][ T4728] Bluetooth: hci0: command tx timeout [ 34.692608][ T4710] Bluetooth: hci2: command tx timeout [ 34.713125][ T4933] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.713191][ T4933] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.733414][ T4933] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 2: comm syz.0.11: invalid block [ 34.733534][ T4933] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.733800][ C1] EXT4-fs (loop0): initial error at time 34: __ext4_iget:5533: inode 11: block 2 [ 34.733843][ C1] EXT4-fs (loop0): last error at time 34: __ext4_iget:5533: inode 11: block 2 [ 34.735346][ T4933] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.11: couldn't read orphan inode 11 (err -117) [ 34.735465][ T4933] loop0: lost filesystem error report for type 5 error -117 [ 34.737956][ T4933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.418307][ T4941] overlayfs: missing 'lowerdir' [ 35.799107][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.873263][ T4957] loop2: detected capacity change from 0 to 256 [ 35.919021][ T4957] vfat: Unknown parameter 'åÿŒƒ¤ˆ¥ˆúlˆ°shortname' [ 36.840062][ T4710] Bluetooth: hci2: command tx timeout [ 36.840107][ T4710] Bluetooth: hci0: command tx timeout [ 36.840139][ T4710] Bluetooth: hci3: command tx timeout [ 36.840159][ T4710] Bluetooth: hci1: command tx timeout [ 36.840178][ T4710] Bluetooth: hci4: command tx timeout [ 37.698681][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 38.622559][ T4983] Zero length message leads to an empty skb [ 38.880012][ T4999] loop1: detected capacity change from 0 to 512 [ 38.884535][ T4999] ext4: Unknown parameter 'nouser_xattr' [ 39.008234][ T4721] Bluetooth: hci4: command tx timeout [ 39.008273][ T4721] Bluetooth: hci1: command tx timeout [ 39.008297][ T4721] Bluetooth: hci3: command tx timeout [ 39.008320][ T4721] Bluetooth: hci0: command tx timeout [ 39.008342][ T4721] Bluetooth: hci2: command tx timeout [ 39.069457][ T5002] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 39.101272][ T5002] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 39.102689][ T5002] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 39.113021][ T5002] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 39.120132][ T5002] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 39.227813][ T5002] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 39.249974][ T4992] 9p: Bad value for 'rfdno' [ 40.120880][ T5020] process 'syz.1.30' launched './file2' with NULL argv: empty string added [ 40.163297][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 40.182445][ T5024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.182602][ T5024] overlayfs: failed to set xattr on upper [ 40.182638][ T5024] overlayfs: ...falling back to uuid=null. [ 41.666484][ T5047] netlink: 236 bytes leftover after parsing attributes in process `syz.4.38'. [ 41.667046][ T5047] netlink: 236 bytes leftover after parsing attributes in process `syz.4.38'. [ 42.173132][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.173193][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.173223][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.173241][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.173258][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.173273][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.417687][ T5062] loop2: detected capacity change from 0 to 512 [ 42.509700][ T5062] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.42: invalid block [ 42.510026][ T5062] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.513782][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 42.513812][ C1] EXT4-fs (loop2): initial error at time 42: ext4_get_branch:178: inode 11: block 4294967295 [ 42.513860][ C1] EXT4-fs (loop2): last error at time 42: ext4_get_branch:178: inode 11: block 4294967295 [ 42.521541][ T5062] EXT4-fs (loop2): Remounting filesystem read-only [ 42.521763][ T5062] EXT4-fs (loop2): 2 truncates cleaned up [ 42.522236][ T5062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.852438][ T5066] loop3: detected capacity change from 0 to 2048 [ 43.496388][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.911327][ T5083] fs-verity (loop3, inode 13): Error -4 building Merkle tree [ 44.025503][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.041162][ T5093] loop0: detected capacity change from 0 to 128 [ 44.064151][ T5093] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.068958][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.154359][ T5098] overlayfs: missing 'workdir' [ 44.423673][ T5071] syzkaller0: entered promiscuous mode [ 44.425587][ T5071] syzkaller0: entered allmulticast mode [ 44.917652][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.039765][ T5133] loop4: detected capacity change from 0 to 1024 [ 46.091124][ T5133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.306175][ T5151] loop2: detected capacity change from 0 to 512 [ 47.331758][ T5151] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.333671][ T5151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 47.340448][ T5151] System zones: 0-1, 15-15, 18-18, 34-34 [ 47.341330][ T5151] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.346332][ T5151] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 47.348607][ T5151] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.354195][ T5151] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 47.358749][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.365800][ T5151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.60: bg 0: block 40: padding at end of block bitmap is not set [ 47.365849][ T5151] loop2: lost filesystem error report for type 5 error -117 [ 47.373787][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.373827][ C1] EXT4-fs (loop2): initial error at time 47: ext4_validate_block_bitmap:441 [ 47.373852][ C1] EXT4-fs (loop2): last error at time 47: ext4_validate_block_bitmap:441 [ 47.380014][ T5151] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 47.380116][ T5151] loop2: lost filesystem error report for type 5 error -117 [ 47.380327][ T5151] EXT4-fs (loop2): 1 truncate cleaned up [ 47.380804][ T5151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.613479][ T40] Bluetooth: Error in BCSP hdr checksum [ 47.948880][ T5159] loop0: detected capacity change from 0 to 256 [ 47.956902][ T5159] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 47.956939][ T5159] FAT-fs (loop0): Filesystem has been set read-only [ 48.037777][ T5162] syzkaller0: entered promiscuous mode [ 48.037816][ T5162] syzkaller0: entered allmulticast mode [ 48.058396][ T5162] simple: basic_1 [ 48.058430][ T5162] simple: basic_2 [ 48.058452][ T5162] simple: basic_3 [ 48.058458][ T5162] simple: basic_4 [ 48.058463][ T5162] simple: basic_5 [ 48.058468][ T5162] simple: basic_6 [ 48.058472][ T5162] simple: basic_7 [ 48.058476][ T5162] simple: basic_8 [ 48.058480][ T5162] simple: basic_9 [ 48.058484][ T5162] simple: basic_10 [ 48.058488][ T5162] simple: basic_11 [ 48.058492][ T5162] simple: basic_12 [ 48.058496][ T5162] simple: basic_13 [ 48.058501][ T5162] simple: basic_14 [ 48.058504][ T5162] simple: basic_15 [ 48.058508][ T5162] simple: basic_16 [ 48.058512][ T5162] simple: basic_17 [ 48.058553][ T5162] 0: reclassify loop, rule prio 0, protocol 800 [ 48.125315][ T5148] syz.2.60 (5148): drop_caches: 2 [ 48.137390][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.187491][ T5166] netlink: 'syz.1.66': attribute type 30 has an invalid length. [ 48.188887][ T5166] __nla_validate_parse: 48 callbacks suppressed [ 48.188904][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 48.188921][ T5166] bond0: option arp_missed_max: invalid value (0) [ 48.188930][ T5166] bond0: option arp_missed_max: allowed values 1 - 255 [ 48.669293][ T5170] syzkaller0: entered promiscuous mode [ 48.670513][ T5170] syzkaller0: entered allmulticast mode [ 49.593930][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 50.280178][ T5203] loop3: detected capacity change from 0 to 4096 [ 50.288017][ T5203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.756101][ T5212] syzkaller0: entered promiscuous mode [ 50.756141][ T5212] syzkaller0: entered allmulticast mode [ 50.938923][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.121226][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.137975][ T4721] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 51.167032][ T5222] loop3: detected capacity change from 0 to 1024 [ 51.203567][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.413358][ T5244] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.661659][ T5248] binder: 5247:5248 ioctl c0306201 0 returned -14 [ 51.663444][ T5248] binder: 5247:5248 ioctl 40383d03 0 returned -22 [ 51.768578][ T5253] Bluetooth: MGMT ver 1.23 [ 52.037306][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.064775][ T5256] loop3: detected capacity change from 0 to 256 [ 52.816523][ T5267] loop4: detected capacity change from 0 to 256 [ 52.819905][ T5267] vfat: Unknown parameter 'åÿŒƒ¤ˆ¥ˆúlˆ°shortname' [ 55.277782][ T5304] openvswitch: netlink: Actions may not be safe on all matching packets [ 55.408811][ T5305] loop1: detected capacity change from 0 to 1024 [ 56.176724][ T5300] syzkaller0: entered promiscuous mode [ 56.176765][ T5300] syzkaller0: entered allmulticast mode [ 56.193368][ T5300] TC_ACT_REPEAT abuse ? [ 56.700024][ T5305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.730062][ T5305] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.98: lblock 3 mapped to illegal pblock 3 (length 3) [ 56.969552][ T5305] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 56.969633][ T5305] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.969633][ T5305] [ 57.064288][ T4710] Bluetooth: hci5: command 0x1003 tx timeout [ 57.066434][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 57.179084][ T5319] loop2: detected capacity change from 0 to 1024 [ 57.257461][ T5319] EXT4-fs: Ignoring removed bh option [ 57.257831][ T5319] EXT4-fs (loop2): unable to read superblock [ 57.512434][ T5323] loop4: detected capacity change from 0 to 8192 [ 58.399805][ T5319] loop2: detected capacity change from 0 to 512 [ 58.400191][ T5319] EXT4-fs: Ignoring removed oldalloc option [ 58.415956][ T5323] Dev loop4: unable to read RDB block 8 [ 58.416026][ T5323] loop4: unable to read partition table [ 58.416442][ T5323] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 58.420573][ T12] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 58.425015][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 58.427468][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.427468][ T12] [ 58.456089][ T4724] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.477171][ T5319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.480529][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.622409][ T5340] loop1: detected capacity change from 0 to 128 [ 60.171075][ T4869] Bluetooth: Error in BCSP hdr checksum [ 60.178597][ T5340] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 60.178632][ T5340] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.260020][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.425973][ T5307] Bluetooth: Error in BCSP hdr checksum [ 61.342373][ T5348] loop1: detected capacity change from 0 to 512 [ 61.386791][ T5348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.692082][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.735723][ T5359] loop1: detected capacity change from 0 to 1024 [ 61.738570][ T5359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.767518][ T5359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.087560][ T5359] macvlan2: entered allmulticast mode [ 62.087689][ T5359] batadv0: entered promiscuous mode [ 62.087706][ T5359] batadv0: entered allmulticast mode [ 62.094921][ T5359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.096103][ T5359] team0: Port device macvlan2 added [ 62.226990][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.233893][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 62.575792][ T5372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.577187][ T5375] loop1: detected capacity change from 0 to 8192 [ 62.580272][ T5375] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.831697][ T5397] loop2: detected capacity change from 0 to 512 [ 63.946543][ T5349] IPVS: starting estimator thread 0... [ 63.951204][ T5397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.476808][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.476865][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.477971][ T10] cfg80211: failed to load regulatory.db [ 64.603813][ T5394] IPVS: using max 60 ests per chain, 144000 per kthread [ 66.156684][ T5461] loop4: detected capacity change from 0 to 512 [ 67.082448][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.163152][ T5461] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.121: inode has both inline data and extents flags [ 67.163236][ T5461] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.163848][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 67.163867][ C0] EXT4-fs (loop4): initial error at time 67: ext4_orphan_get:1399: inode 15 [ 67.163894][ C0] EXT4-fs (loop4): last error at time 67: ext4_orphan_get:1399: inode 15 [ 67.180624][ T5461] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.121: couldn't read orphan inode 15 (err -117) [ 67.180691][ T5461] loop4: lost filesystem error report for type 5 error -117 [ 67.189026][ T5461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.308399][ T5454] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 67.320584][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.322829][ T5454] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 67.410849][ T5487] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 67.413564][ T5487] PKCS7: Only support pkcs7_signedData type [ 68.348930][ T5488] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 68.385993][ T5488] bond1: entered promiscuous mode [ 68.388662][ T5488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.398749][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.405041][ T5488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 68.405092][ T5488] bond1: entered allmulticast mode [ 68.422744][ T5488] bridge1: entered promiscuous mode [ 68.422848][ T5488] bridge1: entered allmulticast mode [ 68.423451][ T5488] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 69.065108][ T5505] xt_connbytes: Forcing CT accounting to be enabled [ 69.065155][ T5505] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.065248][ T5505] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 70.399060][ T5529] syzkaller0: entered promiscuous mode [ 70.399098][ T5529] syzkaller0: entered allmulticast mode [ 71.267498][ T39] Bluetooth: Error in BCSP hdr checksum [ 71.313458][ T5544] IPVS: Error connecting to the multicast addr [ 71.353084][ T5546] tipc: Started in network mode [ 71.353127][ T5546] tipc: Node identity daf2b874df57, cluster identity 4711 [ 71.353248][ T5546] tipc: Enabled bearer , priority 0 [ 71.354992][ T5546] syzkaller0: entered promiscuous mode [ 71.355004][ T5546] syzkaller0: entered allmulticast mode [ 71.359548][ T5546] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 71.405253][ T5546] tipc: Resetting bearer [ 71.421626][ T5545] tipc: Resetting bearer [ 71.434688][ T5548] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 71.452008][ T5545] tipc: Disabling bearer [ 71.518375][ T4902] Bluetooth: Error in BCSP hdr checksum [ 71.527811][ T5552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'. [ 71.548881][ T5548] bond1: entered promiscuous mode [ 71.549152][ T5548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.567586][ T5548] bridge1: entered promiscuous mode [ 71.570689][ T5548] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 72.897399][ T5574] binder: BINDER_SET_CONTEXT_MGR already set [ 72.897431][ T5574] binder: 5573:5574 ioctl 4018620d 20004a80 returned -16 [ 72.900268][ T5574] binder: tried to use weak ref as strong ref [ 72.904346][ T5574] binder: 5573:5574 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.906308][ T5574] binder: 5573:5574 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.908863][ T5574] binder: 5574 RLIMIT_NICE not set [ 73.225141][ T5580] binder: 5573:5580 got transaction to invalid handle, 3 [ 73.225242][ T5580] binder: 5573:5580 cannot find target node [ 73.225276][ T5580] binder: 5573:5580 transaction call to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3252 [ 73.225776][ T5580] binder: 5573:5580 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.225796][ T5580] binder: 5580 RLIMIT_NICE not set [ 73.283854][ T4721] Bluetooth: hci5: command 0x1003 tx timeout [ 73.285259][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.789631][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.823202][ T5586] loop3: detected capacity change from 0 to 512 [ 73.826337][ T5586] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.838026][ T5590] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 73.850743][ T5588] Trying to write to read-only block-device nullb0 [ 73.931551][ T5596] loop1: detected capacity change from 0 to 1024 [ 73.931974][ T5596] EXT4-fs: Ignoring removed bh option [ 73.938190][ T5596] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 73.953100][ T5588] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.953100][ T5588] The task syz.4.151 (5588) triggered the difference, watch for misbehavior. [ 73.954781][ T5596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 73.954818][ T5596] System zones: 0-1, 3-12 [ 73.957138][ T5596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.342828][ T5606] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 74.355445][ T5606] bond1: entered promiscuous mode [ 74.356887][ T5606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.362966][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 74.365399][ T5606] bond1: entered allmulticast mode [ 74.374507][ T5606] bridge1: entered promiscuous mode [ 74.375802][ T5606] bridge1: entered allmulticast mode [ 74.377427][ T5606] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 74.611426][ T5611] Illegal XDP return value 4294967283 on prog (id 8) dev N/A, expect packet loss! [ 74.804217][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.913579][ T5619] loop4: detected capacity change from 0 to 4096 [ 75.069428][ T5624] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 75.380713][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.494447][ T5619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.967066][ T5641] binder: 5640:5641 tried to acquire reference to desc 0, got 1 instead [ 75.969329][ T5641] binder: 5640:5641 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.972000][ T5641] binder: 5641 RLIMIT_NICE not set [ 75.999806][ T5643] syzkaller0: entered promiscuous mode [ 75.999834][ T5643] syzkaller0: entered allmulticast mode [ 76.006934][ T5643] 0: reclassify loop, rule prio 0, protocol 700 [ 76.020798][ T5644] binder: 5640:5644 cannot find target node [ 76.022546][ T5644] binder: 5640:5644 transaction call to 0:0 failed 8/29201/-22, code 0 size 0-0 line 3252 [ 76.032919][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.235753][ T5650] netlink: 'syz.4.164': attribute type 1 has an invalid length. [ 76.482804][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 76.894050][ T5658] loop0: detected capacity change from 0 to 512 [ 76.896128][ T5658] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.948482][ T5658] EXT4-fs: Mount option(s) incompatible with ext2 [ 77.354854][ T4721] Bluetooth: hci5: command 0x1003 tx timeout [ 77.356597][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 77.586515][ T867] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.626020][ T5664] loop4: detected capacity change from 0 to 512 [ 77.629413][ T5664] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.629457][ T5664] EXT4-fs (loop4): blocks per group (42) and clusters per group (32768) inconsistent [ 77.641273][ T5661] batman_adv: batadv0: Adding interface: dummy0 [ 77.641299][ T5661] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.641325][ T5661] batman_adv: batadv0: Interface activated: dummy0 [ 77.808299][ T5667] loop3: detected capacity change from 0 to 2048 [ 78.027539][ T5672] loop0: detected capacity change from 0 to 512 [ 78.027926][ T5672] ext4: Bad value for 'sb' [ 78.206574][ T5667] loop3: p1 p2 p3 [ 78.206574][ T5667] p1: [ 78.207220][ T5667] loop3: p1 size 16779263 extends beyond EOD, truncated [ 78.440440][ T5667] loop3: p2 size 458752 extends beyond EOD, truncated [ 78.800304][ T5667] loop3: p3 start 3036741376 is beyond EOD, truncated [ 78.910372][ T5665] batadv0: mtu less than device minimum [ 78.912327][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.914028][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.915675][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.917340][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.918981][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.920606][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.922242][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.923882][ T5665] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.426649][ T5686] loop0: detected capacity change from 0 to 1024 [ 79.437074][ T5686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.582535][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 79.582953][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 79.671823][ T5696] evm: overlay not supported [ 79.948261][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.988736][ T5707] binder_user_error: 3 callbacks suppressed [ 79.988774][ T5707] binder: 5703:5707 tried to acquire reference to desc 0, got 1 instead [ 79.989205][ T5707] binder: 5703:5707 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.989223][ T5707] binder: 5707 RLIMIT_NICE not set [ 79.994834][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 80.000221][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 80.102016][ T5710] No such timeout policy "syz1" [ 80.666857][ T5716] binder: 5703:5716 got transaction to invalid handle, 3 [ 80.666902][ T5716] binder: 5703:5716 cannot find target node [ 80.669495][ T5716] binder: 5703:5716 transaction call to 0:0 failed 13/29201/-22, code 0 size 0-0 line 3252 [ 80.669651][ T5716] binder: 5703:5716 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.669663][ T5716] binder: 5716 RLIMIT_NICE not set [ 80.686423][ T5718] netlink: 'syz.1.183': attribute type 2 has an invalid length. [ 81.087697][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.199082][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 81.205063][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 81.212703][ T5732] loop0: detected capacity change from 0 to 1024 [ 81.224237][ T5732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.407645][ T5731] netlink: 264 bytes leftover after parsing attributes in process `syz.2.188'. [ 81.407700][ T5731] netlink: 264 bytes leftover after parsing attributes in process `syz.2.188'. [ 81.814564][ T5745] loop4: detected capacity change from 0 to 1024 [ 81.827642][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.245192][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.350011][ T5756] loop0: detected capacity change from 0 to 1024 [ 82.378458][ T5756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.613942][ T5758] loop2: detected capacity change from 0 to 8192 [ 82.722678][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.100813][ T5769] loop4: detected capacity change from 0 to 1024 [ 83.103887][ T5769] EXT4-fs: Ignoring removed i_version option [ 83.103976][ T5769] EXT4-fs: inline encryption not supported [ 83.107777][ T5769] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.109367][ T5769] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 83.119828][ T5769] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.196: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.162134][ T5769] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 83.163777][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.163814][ C0] EXT4-fs (loop4): initial error at time 83: ext4_ext_check_inode:521: inode 4 [ 83.163857][ C0] EXT4-fs (loop4): last error at time 83: ext4_ext_check_inode:521: inode 4 [ 83.191780][ T5769] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.196: Bad quota inode: 4, type: 1 [ 83.191824][ T5769] loop4: lost filesystem error report for type 5 error -117 [ 83.191996][ T5769] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.192438][ T5769] EXT4-fs (loop4): mount failed [ 83.298550][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.300821][ T5774] syzkaller0: entered promiscuous mode [ 83.302092][ T5774] syzkaller0: entered allmulticast mode [ 83.406921][ T5777] netlink: 52 bytes leftover after parsing attributes in process `syz.4.196'. [ 83.528774][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 85.110440][ T5802] Injecting memory failure for pfn 0x133e57 at process virtual address 0x20000000 [ 85.377151][ T5802] Memory failure: 0x133e57: Sending SIGBUS to syz.2.204:5802 due to hardware memory corruption [ 85.377250][ T5802] Memory failure: 0x133e57: recovery action for dirty LRU page: Recovered [ 85.377278][ T5802] Injecting memory failure for pfn 0x17e4e6 at process virtual address 0x20001000 [ 85.379012][ T5802] Memory failure: 0x17e4e6: Sending SIGBUS to syz.2.204:5802 due to hardware memory corruption [ 85.379052][ T5802] Memory failure: 0x17e4e6: recovery action for dirty LRU page: Recovered [ 85.379068][ T5802] Injecting memory failure for pfn 0x17e4e5 at process virtual address 0x20002000 [ 85.379110][ T5802] Memory failure: 0x17e4e5: Sending SIGBUS to syz.2.204:5802 due to hardware memory corruption [ 85.379132][ T5802] Memory failure: 0x17e4e5: recovery action for dirty LRU page: Recovered [ 85.902095][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 85.915041][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 88.090111][ T5846] Injecting memory failure for pfn 0x11b140 at process virtual address 0x20000000 [ 88.785701][ T5846] Memory failure: 0x11b140: keeping poisoned page in swap cache [ 88.786109][ T5846] Memory failure: 0x11b140: recovery action for dirty swapcache page: Delayed [ 89.879749][ T5865] loop0: detected capacity change from 0 to 2048 [ 89.905137][ T5865] loop0: p1 < > p4 [ 89.905137][ T5865] p4: [ 89.907172][ T5865] loop0: p4 size 722688 extends beyond EOD, truncated [ 89.910146][ T5865] loop0: p6 start 262464109 is beyond EOD, truncated [ 89.910192][ T5865] loop0: p7 size 2304 extends beyond EOD, truncated [ 90.246948][ T5869] loop3: detected capacity change from 0 to 512 [ 90.247335][ T5869] EXT4-fs: Ignoring removed bh option [ 90.249051][ T5869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.260237][ T5869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c028, mo2=0002] [ 90.260293][ T5869] System zones: 1-12 [ 90.266051][ T5869] EXT4-fs (loop3): 1 truncate cleaned up [ 90.270257][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.338840][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 90.341921][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 90.347025][ T5088] udevd[5088]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 90.350807][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 90.846988][ T4710] Bluetooth: hci0: unexpected event 0x03 length: 13 > 11 [ 90.965037][ T5879] netlink: 12002 bytes leftover after parsing attributes in process `syz.4.224'. [ 91.150310][ T5881] kernel profiling enabled (shift: 63) [ 91.150484][ T5881] profiling shift: 63 too large [ 92.245259][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.322669][ T30] audit: type=1326 audit(93.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.4.228" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95377fe8 code=0x0 [ 93.188962][ T5910] loop0: detected capacity change from 0 to 1024 [ 93.189396][ T5910] EXT4-fs: Ignoring removed i_version option [ 93.189443][ T5910] EXT4-fs: inline encryption not supported [ 93.193141][ T5910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.197362][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 93.202692][ T5910] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 93.212026][ T5910] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.212075][ T5910] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 93.213812][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 93.213824][ C0] EXT4-fs (loop0): initial error at time 94: ext4_ext_check_inode:521: inode 4 [ 93.213839][ C0] EXT4-fs (loop0): last error at time 94: ext4_ext_check_inode:521: inode 4 [ 93.221895][ T5910] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.234: Bad quota inode: 4, type: 1 [ 93.221938][ T5910] loop0: lost filesystem error report for type 5 error -117 [ 93.225254][ T5910] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.225632][ T5910] EXT4-fs (loop0): mount failed [ 93.263904][ T5919] net_ratelimit: 11 callbacks suppressed [ 93.265294][ T5919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.268441][ T5913] lo speed is unknown, defaulting to 1000 [ 93.271317][ T5913] lo speed is unknown, defaulting to 1000 [ 93.273243][ T5913] lo speed is unknown, defaulting to 1000 [ 93.436930][ T5923] netlink: 52 bytes leftover after parsing attributes in process `syz.0.234'. [ 93.489104][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 93.646540][ T5913] infiniband syz1: set active [ 93.660589][ T5913] infiniband syz1: added lo [ 93.685797][ T5929] loop2: detected capacity change from 0 to 1024 [ 93.687684][ T5929] EXT4-fs: inline encryption not supported [ 93.749285][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.770252][ T867] lo speed is unknown, defaulting to 1000 [ 93.773300][ T5913] RDS/IB: syz1: added [ 93.978207][ T5913] smc: adding ib device syz1 with port count 1 [ 93.978570][ T5913] smc: ib device syz1 port 1 has no pnetid [ 93.980084][ T9] lo speed is unknown, defaulting to 1000 [ 94.117849][ T5913] lo speed is unknown, defaulting to 1000 [ 94.433374][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 94.461938][ T5913] lo speed is unknown, defaulting to 1000 [ 94.511957][ T5913] lo speed is unknown, defaulting to 1000 [ 94.562617][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.701227][ T5913] lo speed is unknown, defaulting to 1000 [ 94.877492][ T5951] loop2: detected capacity change from 0 to 2048 [ 94.895812][ T5951] loop2: p1 < > p4 [ 94.895812][ T5951] p4: [ 94.898254][ T5951] loop2: p4 size 722688 extends beyond EOD, truncated [ 94.901134][ T5951] loop2: p6 start 262464109 is beyond EOD, truncated [ 94.901177][ T5951] loop2: p7 size 2304 extends beyond EOD, truncated [ 95.008450][ T5913] lo speed is unknown, defaulting to 1000 [ 95.767385][ T5964] loop4: detected capacity change from 0 to 512 [ 95.830913][ T5964] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.926650][ T5964] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 2: comm syz.4.245: invalid block [ 95.926693][ T5964] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.933781][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.933830][ C0] EXT4-fs (loop4): initial error at time 96: __ext4_iget:5533: inode 11: block 2 [ 95.933868][ C0] EXT4-fs (loop4): last error at time 96: __ext4_iget:5533: inode 11: block 2 [ 96.049142][ T5964] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.245: couldn't read orphan inode 11 (err -117) [ 96.049216][ T5964] loop4: lost filesystem error report for type 5 error -117 [ 96.059383][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.518737][ T5974] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 97.404857][ T5987] loop0: detected capacity change from 0 to 512 [ 97.409877][ T5987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.468865][ T5981] lo speed is unknown, defaulting to 1000 [ 97.793700][ T5992] lo speed is unknown, defaulting to 1000 [ 97.854716][ T5993] loop3: detected capacity change from 0 to 128 [ 97.855086][ T5993] EXT4-fs: Ignoring removed nobh option [ 98.299809][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.547844][ T5993] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.555174][ T5987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 98.555255][ T5987] System zones: 1-12 [ 98.561226][ T5987] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.252: bad orphan inode 16 [ 98.582421][ T5987] loop0: lost filesystem error report for type 5 error -117 [ 98.594165][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.594198][ C1] EXT4-fs (loop0): initial error at time 99: ext4_orphan_get:1425 [ 98.594228][ C1] EXT4-fs (loop0): last error at time 99: ext4_orphan_get:1425 [ 98.824058][ T5987] ext4_test_bit(bit=15, block=4) = 0 [ 98.840326][ T5987] EXT4-fs (loop0): 1 orphan inode deleted [ 98.867075][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.901871][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.032261][ T6010] lo speed is unknown, defaulting to 1000 [ 100.083357][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.108240][ T6013] Soft offlining pfn 0x219250 at process virtual address 0x20ffe000 [ 100.215932][ T6013] Memory failure: 0x219250: unhandlable page. [ 100.492894][ T6023] loop4: detected capacity change from 0 to 512 [ 100.494387][ T6023] EXT4-fs: Mount option(s) incompatible with ext2 [ 100.505683][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 100.506743][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 101.088707][ T6040] netlink: 236 bytes leftover after parsing attributes in process `syz.1.265'. [ 101.088806][ T6040] netlink: 236 bytes leftover after parsing attributes in process `syz.1.265'. [ 102.101432][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 102.915232][ T6059] loop1: detected capacity change from 0 to 128 [ 102.916510][ T6059] Smack: duplicate mount options [ 103.039635][ T6059] loop1: detected capacity change from 0 to 4096 [ 103.043571][ T6059] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.128182][ T6059] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.137687][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.158232][ T6059] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 103.485628][ T6069] lo speed is unknown, defaulting to 1000 [ 103.769026][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.853132][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 103.856180][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 103.977321][ T6078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 104.434649][ T4817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.586741][ T4817] usb 1-1: Dual-Role OTG device on HNP port [ 104.594653][ T4817] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 104.596685][ T4817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.643984][ T6098] loop3: detected capacity change from 0 to 128 [ 105.521347][ T6101] loop1: detected capacity change from 0 to 512 [ 105.599848][ T6101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.611688][ T6101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 105.611758][ T6101] System zones: 1-12 [ 105.612073][ T6101] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.282: bad orphan inode 16 [ 105.612084][ T6101] loop1: lost filesystem error report for type 5 error -117 [ 105.612210][ T6101] ext4_test_bit(bit=15, block=4) = 0 [ 105.612217][ T6101] EXT4-fs (loop1): 1 orphan inode deleted [ 105.612665][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.624984][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.628177][ T4817] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 106.489307][ T867] lo speed is unknown, defaulting to 1000 [ 106.500663][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.145209][ T6130] lo speed is unknown, defaulting to 1000 [ 107.232002][ T6124] loop1: detected capacity change from 0 to 1024 [ 107.258321][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.566358][ T6137] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.749500][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.392683][ T6156] lo speed is unknown, defaulting to 1000 [ 108.504558][ T6157] loop1: detected capacity change from 0 to 128 [ 108.505002][ T6157] EXT4-fs: Ignoring removed nobh option [ 108.878813][ T6157] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.075323][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 109.079152][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 109.704813][ T4724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.668958][ T6179] loop2: detected capacity change from 0 to 512 [ 110.674288][ T6179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.895047][ T6179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 110.895728][ T6179] System zones: 1-12 [ 110.897337][ T6179] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.298: bad orphan inode 16 [ 110.897356][ T6179] loop2: lost filesystem error report for type 5 error -117 [ 110.897763][ T6179] ext4_test_bit(bit=15, block=4) = 0 [ 110.897790][ T6179] EXT4-fs (loop2): 1 orphan inode deleted [ 110.898422][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.883162][ T6197] macvlan2: left allmulticast mode [ 111.883201][ T6197] batadv0: left allmulticast mode [ 111.923209][ T5632] Bluetooth: Error in BCSP hdr checksum [ 112.113354][ T6187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.127811][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.156288][ T5307] Bluetooth: Error in BCSP hdr checksum [ 113.833796][ T4721] Bluetooth: hci5: command 0x1003 tx timeout [ 113.833811][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.403848][ T6228] loop4: detected capacity change from 0 to 128 [ 114.404267][ T6228] EXT4-fs: Ignoring removed nobh option [ 114.420253][ T6225] lo speed is unknown, defaulting to 1000 [ 114.877378][ T6228] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.116648][ T6233] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 115.953494][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 115.953654][ T6233] bond2: entered promiscuous mode [ 115.953961][ T6233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.002567][ T4717] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.077573][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.317'. [ 116.122787][ T6237] bond2: (slave bridge2): making interface the new active one [ 116.122820][ T6237] bridge2: entered promiscuous mode [ 116.123613][ T6237] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 116.149532][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.317'. [ 116.447739][ T6254] lo speed is unknown, defaulting to 1000 [ 117.018340][ T6268] loop0: detected capacity change from 0 to 1024 [ 117.085493][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.075505][ T6275] loop4: detected capacity change from 0 to 8192 [ 118.076336][ T6275] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.473143][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.595388][ T6286] loop1: detected capacity change from 0 to 1024 [ 118.597123][ T6286] EXT4-fs: Ignoring removed bh option [ 118.598754][ T6286] EXT4-fs (loop1): unable to read superblock [ 119.079529][ T6297] syz.2.329 uses obsolete (PF_INET,SOCK_PACKET) [ 120.659776][ T6313] vivid-000: kernel_thread() failed [ 121.084629][ T6321] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.555273][ T6341] loop1: detected capacity change from 0 to 1024 [ 122.910768][ T6341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.294991][ T6346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.440504][ T1019] IPVS: starting estimator thread 0... [ 123.816959][ T6345] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 123.898036][ T6360] IPVS: using max 60 ests per chain, 144000 per kthread [ 124.992316][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.009517][ T6371] binder: BINDER_SET_CONTEXT_MGR already set [ 125.009566][ T6371] binder: 6370:6371 ioctl 4018620d 20004a80 returned -16 [ 125.009847][ T6371] binder: 6370:6371 got transaction to invalid handle, 1 [ 125.009863][ T6371] binder: 6370:6371 cannot find target node [ 125.009884][ T6371] binder: 6370:6371 transaction call to 0:0 failed 16/29201/-22, code 0 size 72-24 line 3252 [ 125.010190][ T6371] binder: 6370:6371 ioctl c0306201 0 returned -14 [ 125.010318][ T6371] binder: 6370:6371 got transaction to invalid handle, 3 [ 125.010331][ T6371] binder: 6370:6371 cannot find target node [ 125.010348][ T6371] binder: 6370:6371 transaction call to 0:0 failed 17/29201/-22, code 0 size 0-0 line 3252 [ 125.075717][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.529780][ T6387] loop2: detected capacity change from 0 to 8192 [ 126.081414][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.081467][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.505775][ T6391] openvswitch: netlink: Actions may not be safe on all matching packets [ 127.147789][ T6396] loop0: detected capacity change from 0 to 1024 [ 128.725785][ T6402] loop1: detected capacity change from 0 to 512 [ 129.194377][ T6396] EXT4-fs warning (device loop0): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop0. [ 129.466721][ T6402] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.355: inode has both inline data and extents flags [ 129.469376][ T6402] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.469812][ T6402] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.355: couldn't read orphan inode 15 (err -117) [ 129.473884][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 129.473900][ C0] EXT4-fs (loop1): initial error at time 130: ext4_orphan_get:1399: inode 15 [ 129.473921][ C0] EXT4-fs (loop1): last error at time 130: ext4_orphan_get:1399: inode 15 [ 129.481223][ T6402] loop1: lost filesystem error report for type 5 error -117 [ 129.481918][ T6402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.078499][ T6415] loop2: detected capacity change from 0 to 8 [ 130.123538][ T24] IPVS: starting estimator thread 0... [ 130.180147][ T6415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.181966][ T6415] SQUASHFS error: Failed to read block 0x4de: -5 [ 130.183465][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.186909][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.189203][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.191052][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.192572][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.194153][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.195749][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.197264][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.293989][ T6420] IPVS: using max 60 ests per chain, 144000 per kthread [ 130.296242][ T6415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.296281][ T6415] SQUASHFS error: Failed to read block 0x4df: -5 [ 130.297597][ T6415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.297616][ T6415] SQUASHFS error: Failed to read block 0x4e0: -5 [ 130.298449][ T6415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.298478][ T6415] SQUASHFS error: Failed to read block 0x4df: -5 [ 130.298488][ T6415] SQUASHFS error: Unable to read data cache entry [4df] [ 130.298495][ T6415] SQUASHFS error: Unable to read page, block 4df, size 1 [ 130.298612][ T6415] SQUASHFS error: Unable to read data cache entry [4df] [ 130.298617][ T6415] SQUASHFS error: Unable to read page, block 4df, size 1 [ 130.301068][ T6415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.301089][ T6415] SQUASHFS error: Failed to read block 0x4de: -5 [ 130.301097][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.301104][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.301220][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.301225][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.301253][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.301258][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.301275][ T6415] SQUASHFS error: Unable to read data cache entry [4de] [ 130.301279][ T6415] SQUASHFS error: Unable to read page, block 4de, size 1 [ 130.447336][ T6425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.680219][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.789766][ T6437] overlayfs: failed to clone upperpath [ 131.289751][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 131.292843][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 131.605505][ T6460] random: crng reseeded on system resumption [ 133.691879][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 133.695442][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 133.784101][ T5444] Bluetooth: Error in BCSP hdr checksum [ 134.025594][ T6500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.169206][ T6520] tipc: Started in network mode [ 135.170284][ T6520] tipc: Node identity 4, cluster identity 4711 [ 135.172124][ T6520] tipc: Node number set to 4 [ 135.829293][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 136.590436][ T6536] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 136.666797][ T6536] bond2: entered promiscuous mode [ 136.668025][ T6536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.672524][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 136.678685][ T6536] bond2: (slave bridge2): making interface the new active one [ 136.680223][ T6536] bridge2: entered promiscuous mode [ 136.681903][ T6536] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 138.198370][ T6552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.282088][ T6563] loop1: detected capacity change from 0 to 1024 [ 138.307703][ T6563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.382729][ T6572] syzkaller0: entered promiscuous mode [ 138.382769][ T6572] syzkaller0: entered allmulticast mode [ 138.394524][ T6572] tipc: Started in network mode [ 138.395716][ T6572] tipc: Node identity 7e704400f6ce, cluster identity 4711 [ 138.398250][ T6572] tipc: Enabled bearer , priority 0 [ 138.688155][ T6571] tipc: Resetting bearer [ 138.700025][ T6571] tipc: Disabling bearer [ 138.782839][ T6580] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 138.786882][ T4895] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.836416][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.970799][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 139.971878][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 140.078062][ T6593] No such timeout policy "syz1" [ 140.378920][ T6595] loop4: detected capacity change from 0 to 2048 [ 140.416589][ T6595] loop4: AHDI p2 p3 [ 140.416693][ T6595] loop4: p2 size 4076863487 extends beyond EOD, truncated [ 140.875252][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 141.181286][ T6604] loop2: detected capacity change from 0 to 128 [ 141.253373][ T6604] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.764641][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 141.977987][ T6619] capability: warning: `syz.1.415' uses deprecated v2 capabilities in a way that may be insecure [ 142.052614][ T6623] netlink: 'syz.4.414': attribute type 12 has an invalid length. [ 142.052695][ T6623] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 142.052713][ T6623] netlink: 148 bytes leftover after parsing attributes in process `syz.4.414'. [ 142.052730][ T6623] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 142.052755][ T6623] netlink: 'syz.4.414': attribute type 2 has an invalid length. [ 142.052788][ T6623] netlink: 11 bytes leftover after parsing attributes in process `syz.4.414'. [ 142.098525][ T4709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.329386][ T6649] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 143.356047][ T6649] bond1: entered promiscuous mode [ 143.356214][ T6649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.372675][ T6649] bond1: (slave bridge1): making interface the new active one [ 143.372713][ T6649] bridge1: entered promiscuous mode [ 143.374734][ T6649] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 143.470545][ T6652] No such timeout policy "syz1" [ 144.119194][ T6667] lo speed is unknown, defaulting to 1000 [ 144.225134][ T6667] loop0: detected capacity change from 0 to 128 [ 144.225748][ T6667] EXT4-fs: Ignoring removed nobh option [ 144.768628][ T6667] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.538500][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.822821][ T6682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.429'. [ 146.461177][ T6699] loop2: detected capacity change from 0 to 512 [ 146.466929][ T6699] EXT4-fs: Ignoring removed i_version option [ 146.474169][ T6699] EXT4-fs: Ignoring removed nobh option [ 146.538319][ T6700] tmpfs: Cannot change global quota limit on remount [ 146.623841][ T6699] ext4: Unknown parameter 'noacl' [ 146.751711][ T4710] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 146.751776][ T4710] Bluetooth: hci2: Injecting HCI hardware error event [ 146.753579][ T4721] Bluetooth: hci2: hardware error 0x00 [ 147.966173][ T6720] No such timeout policy "syz1" [ 148.264058][ T6726] lo speed is unknown, defaulting to 1000 [ 148.389838][ T6727] loop1: detected capacity change from 0 to 512 [ 148.464930][ T6727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.008113][ T6736] tipc: Enabled bearer , priority 0 [ 149.013505][ T6736] tipc: Resetting bearer [ 149.487429][ T6746] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.674024][ T4721] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 149.892906][ T6735] tipc: Disabling bearer [ 149.898727][ T4724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.420470][ T6760] netlink: 'syz.2.452': attribute type 33 has an invalid length. [ 150.422093][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 150.424378][ T6760] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 150.651535][ T6764] dummy_hcd dummy_hcd.0: remove, state 1 [ 150.652747][ T6764] usb usb1: USB disconnect, device number 1 [ 150.653102][ T6764] usb 1-1: USB disconnect, device number 2 [ 150.791477][ T6764] dummy_hcd dummy_hcd.0: stopped [ 150.791522][ T6764] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 150.836806][ T6766] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 150.892540][ T6766] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 150.912025][ T6771] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 150.916090][ T6766] veth3: entered promiscuous mode [ 150.919383][ T6766] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 150.943695][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.455'. [ 150.952184][ T6771] bond2: entered promiscuous mode [ 150.953678][ T6771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.960052][ T6766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.966295][ T5632] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.982060][ T6771] bond2: (slave bridge2): making interface the new active one [ 150.982094][ T6771] bridge2: entered promiscuous mode [ 150.983528][ T6771] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 151.021237][ T6779] binder: 6778:6779 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 151.262378][ T40] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 151.269462][ T6779] loop1: detected capacity change from 0 to 512 [ 152.001004][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.029727][ T6779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.998684][ T6789] syzkaller0: entered promiscuous mode [ 152.998729][ T6789] syzkaller0: entered allmulticast mode [ 153.606752][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.463'. [ 153.609784][ T4712] Bluetooth: hci0: command 0x0406 tx timeout [ 153.610044][ T4712] Bluetooth: hci3: command 0x0406 tx timeout [ 153.636940][ T6813] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 153.706696][ T4721] Bluetooth: hci1: command 0x0406 tx timeout [ 153.934613][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 153.940382][ T6813] bond3: entered promiscuous mode [ 153.941623][ T6813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.952195][ T6813] bond3: (slave bridge3): making interface the new active one [ 153.952224][ T6813] bridge3: entered promiscuous mode [ 153.953730][ T6813] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 155.257654][ T6841] loop0: detected capacity change from 0 to 1024 [ 156.170099][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.250024][ T6841] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.473: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.254333][ T6841] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 156.254398][ T6841] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.254398][ T6841] [ 156.436526][ T6849] syzkaller0: entered promiscuous mode [ 156.436569][ T6849] syzkaller0: entered allmulticast mode [ 156.455411][ T6849] tipc: Enabled bearer , priority 0 [ 156.459798][ T6849] tipc: Resetting bearer [ 156.467091][ T6846] tipc: Resetting bearer [ 156.495858][ T40] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 156.495896][ T6846] tipc: Disabling bearer [ 156.496321][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.496335][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.496335][ T40] [ 156.497117][ T4708] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 156.497977][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.503054][ T6854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.758224][ T6858] loop0: detected capacity change from 0 to 128 [ 156.760554][ T6858] Smack: duplicate mount options [ 156.789732][ T6858] loop0: detected capacity change from 0 to 4096 [ 156.790115][ T6858] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.794366][ T6858] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.800384][ T6861] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 156.804595][ T6858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.832162][ T6861] bond1: entered promiscuous mode [ 156.832376][ T6861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.858083][ T6861] bond1: (slave bridge1): making interface the new active one [ 156.861026][ T6861] bridge1: entered promiscuous mode [ 156.866201][ T6861] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 157.633456][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.335161][ T6891] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 158.337588][ T6891] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 158.341395][ T6891] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 160.684916][ T6916] Soft offlining pfn 0x120007 at process virtual address 0x20ffe000 [ 160.691926][ T6916] Soft offlining pfn 0x120009 at process virtual address 0x20fff000 [ 161.091659][ T6922] loop4: detected capacity change from 0 to 1024 [ 161.277424][ T6922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.376860][ T6922] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.490: lblock 3 mapped to illegal pblock 3 (length 3) [ 161.386112][ T6922] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 161.386503][ T6922] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.386503][ T6922] [ 162.208315][ T6935] warning: `syz.2.497' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.318312][ T5307] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 162.318627][ T5307] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 162.318642][ T5307] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.318642][ T5307] [ 162.319763][ T4717] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 162.320594][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.485208][ T6954] lo speed is unknown, defaulting to 1000 [ 163.648864][ T6954] loop4: detected capacity change from 0 to 512 [ 163.762668][ T6954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.950198][ T6969] Injecting memory failure for pfn 0x1356bb at process virtual address 0x20000000 [ 164.965491][ T6925] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 164.973468][ T6969] Memory failure: 0x1356bb: keeping poisoned page in swap cache [ 164.973524][ T6969] Memory failure: 0x1356bb: Sending SIGBUS to syz.0.505:6969 due to hardware memory corruption [ 164.973578][ T6969] Memory failure: 0x1356bb: recovery action for dirty swapcache page: Delayed [ 164.973626][ T6969] Injecting memory failure for pfn 0x1352b2 at process virtual address 0x20001000 [ 164.984146][ T6969] Memory failure: 0x1352b2: keeping poisoned page in swap cache [ 164.984651][ T6969] Memory failure: 0x1352b2: Sending SIGBUS to syz.0.505:6969 due to hardware memory corruption [ 164.984862][ T6969] Memory failure: 0x1352b2: recovery action for dirty swapcache page: Delayed [ 164.984984][ T6969] Injecting memory failure for pfn 0x1352b0 at process virtual address 0x20002000 [ 164.993276][ T6969] Memory failure: 0x1352b0: keeping poisoned page in swap cache [ 164.993365][ T6969] Memory failure: 0x1352b0: recovery action for clean swapcache page: Recovered [ 164.993441][ T6969] Injecting memory failure for pfn 0x13633a at process virtual address 0x20003000 [ 165.001063][ T6969] Memory failure: 0x13633a: keeping poisoned page in swap cache [ 165.001118][ T6969] Memory failure: 0x13633a: recovery action for clean swapcache page: Recovered [ 165.002902][ T6969] Injecting memory failure for pfn 0x13633b at process virtual address 0x20004000 [ 165.092024][ T6969] Memory failure: 0x13633b: keeping poisoned page in swap cache [ 165.093143][ T6969] Memory failure: 0x13633b: recovery action for clean swapcache page: Recovered [ 165.093561][ T6969] Injecting memory failure for pfn 0x13363e at process virtual address 0x20005000 [ 165.141726][ T6969] Memory failure: 0x13363e: keeping poisoned page in swap cache [ 165.141793][ T6969] Memory failure: 0x13363e: recovery action for clean swapcache page: Recovered [ 165.261796][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.371978][ T6988] loop2: detected capacity change from 0 to 1024 [ 166.648993][ T6988] EXT4-fs: Invalid want_extra_isize 7 [ 167.169552][ T6996] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 167.189313][ T6996] bond3: entered promiscuous mode [ 167.189517][ T6996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.192903][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 167.206054][ T6996] bond3: (slave bridge3): making interface the new active one [ 167.206086][ T6996] bridge3: entered promiscuous mode [ 167.209564][ T6996] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 169.332952][ T7021] loop4: detected capacity change from 0 to 2048 [ 169.391538][ T7017] @0Ù: renamed from dummy0 (while UP) [ 170.273286][ T7021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.674789][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.560396][ T7042] lo speed is unknown, defaulting to 1000 [ 172.118108][ T7043] loop4: detected capacity change from 0 to 512 [ 172.121400][ T7043] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.201077][ T7043] EXT4-fs: Mount option(s) incompatible with ext2 [ 175.643875][ T7107] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 175.680983][ T7107] bond3: entered promiscuous mode [ 175.682238][ T7107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.718696][ T7107] bond3: (slave bridge3): making interface the new active one [ 175.722846][ T7107] bridge3: entered promiscuous mode [ 175.733084][ T7107] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 177.202019][ T7063] Set syz1 is full, maxelem 65536 reached [ 181.223225][ T7201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.564'. [ 181.624603][ T7208] syzkaller0: entered promiscuous mode [ 181.624637][ T7208] syzkaller0: entered allmulticast mode [ 181.925415][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 185.400487][ T7244] loop4: detected capacity change from 0 to 1024 [ 185.418589][ T7244] EXT4-fs: Invalid want_extra_isize 7 [ 186.250321][ T7258] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 186.311276][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 186.316164][ T7258] bond4: entered promiscuous mode [ 186.317503][ T7258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.357700][ T7258] bond4: (slave bridge4): making interface the new active one [ 186.359271][ T7258] bridge4: entered promiscuous mode [ 186.414393][ T7258] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 187.681143][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 187.684138][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.685580][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.069392][ T7284] binder: BINDER_SET_CONTEXT_MGR already set [ 188.069422][ T7284] binder: 7283:7284 ioctl 4018620d 20004a80 returned -16 [ 188.069691][ T7284] binder: tried to use weak ref as strong ref [ 188.069706][ T7284] binder: 7283:7284 Acquire 1 refcount change on invalid ref 0 ret -22 [ 188.069834][ T7284] binder: 7283:7284 got transaction to invalid handle, 1 [ 188.069848][ T7284] binder: 7283:7284 cannot find target node [ 188.069867][ T7284] binder: 7283:7284 transaction call to 0:0 failed 20/29201/-22, code 0 size 72-24 line 3252 [ 188.070162][ T7284] binder: 7283:7284 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.070179][ T7284] binder: 7284 RLIMIT_NICE not set [ 188.127254][ T7286] binder: 7283:7286 got transaction to invalid handle, 3 [ 188.128669][ T7286] binder: 7283:7286 cannot find target node [ 188.129934][ T7286] binder: 7283:7286 transaction call to 0:0 failed 21/29201/-22, code 0 size 0-0 line 3252 [ 188.132181][ T7286] binder: 7283:7286 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.134800][ T7286] binder: 7286 RLIMIT_NICE not set [ 188.951971][ T7297] 9p: Bad value for 'rfdno' [ 189.038339][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.038481][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.490140][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.590'. [ 189.783828][ T4817] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: unknown main item tag 0x1 [ 189.784260][ T4817] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: reserved main item tag 0xd [ 189.784304][ T4817] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: item fetching failed at offset 23/30 [ 189.784573][ T4817] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0001: probe with driver hid-generic failed with error -22 [ 190.109579][ T7329] loop2: detected capacity change from 0 to 512 [ 190.450891][ T7329] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 190.450992][ T7329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 190.451213][ T7329] System zones: 0-1, 15-15, 18-18, 34-34 [ 190.452391][ T7329] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.452622][ T7329] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 190.452893][ T7329] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.452956][ T7329] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 190.466100][ T7329] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.595: bad orphan inode 16 [ 190.466120][ T7329] loop2: lost filesystem error report for type 5 error -117 [ 190.473789][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 190.473805][ C1] EXT4-fs (loop2): initial error at time 191: ext4_orphan_get:1425 [ 190.473822][ C1] EXT4-fs (loop2): last error at time 191: ext4_orphan_get:1425 [ 190.487409][ T7329] ext4_test_bit(bit=15, block=18) = 1 [ 190.487447][ T7329] is_bad_inode(inode)=0 [ 190.487482][ T7329] NEXT_ORPHAN(inode)=0 [ 190.487499][ T7329] max_ino=32 [ 190.487516][ T7329] i_nlink=2 [ 190.491129][ T7329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.814089][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.839109][ T7334] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 190.848776][ T7334] bond2: entered promiscuous mode [ 190.983992][ T7334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.355667][ T7347] loop0: detected capacity change from 0 to 8192 [ 191.584967][ T7347] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.898306][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.600'. [ 191.992022][ T7334] bond2: (slave bridge2): making interface the new active one [ 191.992038][ T7334] bridge2: entered promiscuous mode [ 192.355075][ T7334] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 192.912303][ T7367] loop2: detected capacity change from 0 to 512 [ 193.284675][ T7367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.375743][ T7367] EXT4-fs (loop2): 1 truncate cleaned up [ 193.376236][ T7367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.395226][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'. [ 194.433378][ T7402] lo speed is unknown, defaulting to 1000 [ 194.449012][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.311341][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.403738][ T7445] loop4: detected capacity change from 0 to 1024 [ 196.532666][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.773524][ T7448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 197.785383][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.899527][ T7467] loop0: detected capacity change from 0 to 128 [ 197.906287][ T7467] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.919470][ T7467] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.671426][ T7474] loop2: detected capacity change from 0 to 128 [ 198.678217][ T7474] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 198.678252][ T7474] FAT-fs (loop2): Can't find a valid FAT filesystem [ 198.817725][ T1237] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.709124][ T7488] loop0: detected capacity change from 0 to 512 [ 199.726325][ T7488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.726552][ T7488] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 200.092514][ T4710] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 200.686185][ T7507] loop0: detected capacity change from 0 to 256 [ 201.728959][ T7515] binder: 7514:7515 tried to acquire reference to desc 0, got 1 instead [ 201.732313][ T7515] binder: 7514:7515 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.735149][ T7515] binder: 7515 RLIMIT_NICE not set [ 201.736349][ T7515] binder: 7515 RLIMIT_NICE not set [ 201.739916][ T7515] binder: 7514:7515 ioctl c0306201 0 returned -14 [ 201.846589][ T7516] syzkaller0: entered promiscuous mode [ 201.846631][ T7516] syzkaller0: entered allmulticast mode [ 202.594085][ T7530] lo speed is unknown, defaulting to 1000 [ 203.090118][ T4817] binder: release 7514:7515 transaction 26 in, still active [ 203.090158][ T4817] binder: send failed reply for transaction 26 to 7514:7515 [ 203.090272][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 203.090288][ T4817] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.523419][ T7543] loop0: detected capacity change from 0 to 512 [ 204.530845][ T7543] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.532491][ T7543] EXT4-fs: Ignoring removed oldalloc option [ 204.534979][ T7543] EXT4-fs: Invalid want_extra_isize 0 [ 205.071750][ T7548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 205.246672][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 205.346311][ T7555] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 205.706463][ T7555] bond4: entered promiscuous mode [ 205.707748][ T7555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.730968][ T7555] bond4: (slave bridge4): making interface the new active one [ 205.732537][ T7555] bridge4: entered promiscuous mode [ 205.736555][ T7555] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 206.840314][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 206.862614][ T7590] loop0: detected capacity change from 0 to 1024 [ 206.863030][ T7590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.885701][ T7590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.950110][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.918820][ T7631] netlink: 'syz.4.673': attribute type 1 has an invalid length. [ 208.943257][ T7631] bond3: entered promiscuous mode [ 209.832825][ T7631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.943928][ T7631] bond3: (slave bridge3): making interface the new active one [ 209.945219][ T7631] bridge3: entered promiscuous mode [ 209.948503][ T7631] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 209.960392][ T7634] lo speed is unknown, defaulting to 1000 [ 212.666149][ T4728] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 212.793880][ T4728] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.793999][ T4728] Bluetooth: hci4: Injecting HCI hardware error event [ 212.795599][ T4710] Bluetooth: hci4: hardware error 0x00 [ 213.144194][ T7691] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 213.428619][ T7691] bond5: entered promiscuous mode [ 213.430181][ T7691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.456379][ T7691] bond5: (slave bridge5): making interface the new active one [ 213.456413][ T7691] bridge5: entered promiscuous mode [ 213.457033][ T7691] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 214.296633][ T7719] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 214.338953][ T7719] bond5: entered promiscuous mode [ 214.340351][ T7719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.352627][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 214.370181][ T7719] bond5: (slave bridge5): making interface the new active one [ 214.371802][ T7719] bridge5: entered promiscuous mode [ 214.375187][ T7719] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 214.495413][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 215.115224][ T4710] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 215.665589][ T7738] binder: 7737:7738 tried to acquire reference to desc 0, got 1 instead [ 215.666223][ T7738] binder: 7737:7738 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 215.666251][ T7738] binder: 7738 RLIMIT_NICE not set [ 215.666269][ T7738] binder: 7738 RLIMIT_NICE not set [ 216.249103][ T7748] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 216.256537][ T7748] bond6: entered promiscuous mode [ 216.256738][ T7748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.260425][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 216.267989][ T7748] bond6: (slave bridge6): making interface the new active one [ 216.268037][ T7748] bridge6: entered promiscuous mode [ 216.269614][ T7748] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 216.347370][ T4728] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 216.580836][ T867] binder: release 7737:7738 transaction 37 in, still active [ 216.580875][ T867] binder: send failed reply for transaction 37 to 7737:7738 [ 216.580966][ T867] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.708979][ T7760] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 216.713927][ T4728] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 216.714059][ T4728] Bluetooth: hci1: Injecting HCI hardware error event [ 216.716295][ T4728] Bluetooth: hci1: hardware error 0x00 [ 216.722281][ T7760] bond4: entered promiscuous mode [ 216.722476][ T7760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.733690][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 216.814244][ T7760] bond4: (slave bridge4): making interface the new active one [ 216.816015][ T7760] bridge4: entered promiscuous mode [ 216.818063][ T7760] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 216.882152][ T7767] syzkaller0: entered promiscuous mode [ 216.882189][ T7767] syzkaller0: entered allmulticast mode [ 217.593866][ T7777] ip6erspan0: entered promiscuous mode [ 219.041543][ T4728] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 220.405322][ T7824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.660726][ T7855] loop2: detected capacity change from 0 to 256 [ 222.107152][ T7867] binder: 7865:7867 tried to acquire reference to desc 0, got 1 instead [ 222.108859][ T7867] binder: 7865:7867 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 222.108875][ T7867] binder: 7867 RLIMIT_NICE not set [ 222.108886][ T7867] binder: 7867 RLIMIT_NICE not set [ 222.540277][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.944665][ T4817] binder: release 7865:7867 transaction 48 out, still active [ 222.944703][ T4817] binder: undelivered TRANSACTION_COMPLETE [ 222.945188][ T4817] binder: release 7865:7867 transaction 48 in, still active [ 222.945204][ T4817] binder: send failed reply for transaction 48, target dead [ 223.367579][ T7897] loop4: detected capacity change from 0 to 128 [ 223.548446][ T7897] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.798012][ T4717] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.882337][ T7919] binder: 7918:7919 tried to acquire reference to desc 0, got 1 instead [ 223.885983][ T7919] binder: 7918:7919 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 223.888433][ T7919] binder: 7919 RLIMIT_NICE not set [ 223.889579][ T7919] binder: 7919 RLIMIT_NICE not set [ 223.915742][ T7923] loop4: detected capacity change from 0 to 256 [ 224.899737][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.901176][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.910948][ T7929] bond1: left promiscuous mode [ 224.910978][ T7929] bridge1: left promiscuous mode [ 224.911846][ T7929] bond2: left promiscuous mode [ 224.911862][ T7929] bridge2: left promiscuous mode [ 224.912566][ T7929] bond3: left promiscuous mode [ 224.912581][ T7929] bridge3: left promiscuous mode [ 224.913287][ T7929] bond4: left promiscuous mode [ 224.913300][ T7929] bridge4: left promiscuous mode [ 224.968254][ T4816] binder: release 7918:7919 transaction 59 in, still active [ 224.968296][ T4816] binder: send failed reply for transaction 59 to 7918:7919 [ 224.968396][ T4816] binder: undelivered TRANSACTION_ERROR: 29189 [ 225.174316][ T7940] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 225.434609][ T7940] bond7: entered promiscuous mode [ 225.435987][ T7940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.463089][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 225.470831][ T7940] bond7: (slave bridge7): making interface the new active one [ 225.472547][ T7940] bridge7: entered promiscuous mode [ 225.474306][ T7940] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 227.018829][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.130755][ T7973] binder: 7972:7973 tried to acquire reference to desc 0, got 1 instead [ 227.133285][ T7973] binder: 7972:7973 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 227.135975][ T7973] binder: 7973 RLIMIT_NICE not set [ 227.135993][ T7973] binder: 7973 RLIMIT_NICE not set [ 227.828690][ T7987] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 227.836700][ T7987] bond3: entered promiscuous mode [ 227.838067][ T7987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.850663][ T7987] bond3: (slave bridge2): making interface the new active one [ 227.852271][ T7987] bridge2: entered promiscuous mode [ 227.854090][ T7987] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 228.031238][ T4895] binder: release 7972:7973 transaction 70 in, still active [ 228.033382][ T4895] binder: send failed reply for transaction 70 to 7972:7973 [ 228.037981][ T4895] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.083484][ T8002] lo speed is unknown, defaulting to 1000 [ 228.777460][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.291346][ T8026] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 229.318417][ T8026] bond4: entered promiscuous mode [ 229.319872][ T8026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.335162][ T8026] bond4: (slave bridge4): making interface the new active one [ 229.338067][ T8026] bridge4: entered promiscuous mode [ 229.338725][ T8026] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 231.121527][ T8064] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 231.146857][ T8064] bond5: entered promiscuous mode [ 231.147031][ T8064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.512928][ T8064] bond5: (slave bridge5): making interface the new active one [ 231.512964][ T8064] bridge5: entered promiscuous mode [ 231.513602][ T8064] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 232.507995][ T8073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.897532][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 232.899867][ T8104] erspan0: entered promiscuous mode [ 233.750495][ T8134] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 234.616054][ T8134] bond6: entered promiscuous mode [ 234.616205][ T8134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.642945][ T8137] lo speed is unknown, defaulting to 1000 [ 234.692643][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'. [ 234.903038][ T8134] bond6: (slave bridge6): making interface the new active one [ 234.903254][ T8134] bridge6: entered promiscuous mode [ 234.905164][ T8134] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 234.992183][ T8162] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 235.044356][ T8162] bond7: entered promiscuous mode [ 235.045683][ T8162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.055127][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.817'. [ 235.067990][ T8162] bond7: (slave bridge7): making interface the new active one [ 235.069491][ T8162] bridge7: entered promiscuous mode [ 235.071227][ T8162] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 235.213696][ T8170] loop0: detected capacity change from 0 to 256 [ 236.950475][ T8230] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 237.026915][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 237.043043][ T8230] bond4: entered promiscuous mode [ 237.043248][ T8230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.070781][ T8230] bond4: (slave bridge3): making interface the new active one [ 237.995623][ T8230] bridge3: entered promiscuous mode [ 237.996398][ T8230] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 239.786004][ T8286] loop0: detected capacity change from 0 to 128 [ 239.881290][ T8286] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.102356][ T8294] overlayfs: missing 'lowerdir' [ 240.291679][ T8298] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 240.359692][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 240.364693][ T8298] bond5: entered promiscuous mode [ 240.366006][ T8298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.379368][ T8298] bond5: (slave bridge4): making interface the new active one [ 240.380625][ T8298] bridge4: entered promiscuous mode [ 240.382070][ T8298] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 241.418470][ T8312] loop4: detected capacity change from 0 to 2048 [ 241.527068][ T8312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.532048][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.365929][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.513545][ T8345] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 242.528794][ T8345] bond5: entered promiscuous mode [ 242.530246][ T8345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.536842][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'. [ 242.546994][ T8345] bond5: (slave bridge5): making interface the new active one [ 242.547028][ T8345] bridge5: entered promiscuous mode [ 242.551258][ T8345] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 243.449905][ T30] audit: type=1326 audit(244.437:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8361 comm="syz.4.858" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95377fe8 code=0x0 [ 244.019762][ T8384] loop0: detected capacity change from 0 to 256 [ 244.224259][ T8386] overlay: filesystem on ./bus not supported [ 244.902926][ T8388] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 245.053525][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.866'. [ 245.054339][ T8388] bond6: entered promiscuous mode [ 245.054979][ T8388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.294562][ T8400] loop2: detected capacity change from 0 to 8 [ 245.825602][ T4728] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 245.826070][ T4728] Bluetooth: hci3: Injecting HCI hardware error event [ 245.827136][ T4728] Bluetooth: hci3: hardware error 0x00 [ 245.877992][ T8400] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 245.878259][ T8400] unable to read xattr id index table [ 245.880846][ T8400] SQUASHFS error: zlib decompression failed, data probably corrupt [ 245.880929][ T8400] SQUASHFS error: Failed to read block 0x9b: -5 [ 245.880962][ T8400] SQUASHFS error: Unable to read metadata cache entry [99] [ 245.880994][ T8400] SQUASHFS error: Unable to read inode 0x127 [ 246.131144][ T8388] bond6: (slave bridge6): making interface the new active one [ 246.131192][ T8388] bridge6: entered promiscuous mode [ 246.134268][ T8388] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 247.267907][ T8416] loop0: detected capacity change from 0 to 512 [ 247.268995][ T8416] EXT4-fs: Ignoring removed i_version option [ 247.278338][ T8416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.390031][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.434513][ T8439] binder: BINDER_SET_CONTEXT_MGR already set [ 247.434541][ T8439] binder: 8438:8439 ioctl 4018620d 20004a80 returned -16 [ 247.434824][ T8439] binder: 8438:8439 got transaction to invalid handle, 1 [ 247.434841][ T8439] binder: 8438:8439 cannot find target node [ 247.434860][ T8439] binder: 8438:8439 transaction call to 0:0 failed 79/29201/-22, code 0 size 72-24 line 3252 [ 247.435227][ T8439] binder: 8438:8439 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 247.435244][ T8439] binder: 8439 RLIMIT_NICE not set [ 247.522679][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.523100][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.528663][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.533214][ T8446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.541503][ T8446] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 247.560866][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.562419][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.563136][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.565681][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.568691][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 247.597349][ T8447] binder: 8438:8447 got transaction to invalid handle, 3 [ 247.597365][ T8447] binder: 8438:8447 cannot find target node [ 247.597379][ T8447] binder: 8438:8447 transaction call to 0:0 failed 80/29201/-22, code 0 size 0-0 line 3252 [ 247.616489][ T8446] smc: removing ib device syz1 [ 248.015771][ T8446] ------------[ cut here ]------------ [ 248.015791][ T8446] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#1: syz.1.882/8446 [ 248.018657][ T8446] Modules linked in: [ 248.019320][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT [ 248.020851][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 248.022479][ T8446] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 248.023846][ T8446] pc : rxe_pool_cleanup+0x58/0x60 [ 248.024662][ T8446] lr : rxe_pool_cleanup+0x58/0x60 [ 248.025491][ T8446] sp : ffff8000962c6f40 [ 248.026190][ T8446] x29: ffff8000962c6f40 x28: dfff800000000000 x27: ffff0000d7425d46 [ 248.027605][ T8446] x26: dfff800000000000 x25: ffff0000ce5c9108 x24: dfff800000000000 [ 248.028973][ T8446] x23: 1fffe00019cb91f1 x22: ffff0000ce5c8f88 x21: dfff800000000000 [ 248.030364][ T8446] x20: ffff800084584760 x19: ffff0000ce5c9428 x18: 00000000ffffffff [ 248.031735][ T8446] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bed32c [ 248.033041][ T8446] x14: ffff800084becfdc x13: 0000000000000001 x12: 0000000000000000 [ 248.034494][ T8446] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 248.035928][ T8446] x8 : ffff80009d5be000 x7 : 0000000000000000 x6 : 0000000000000000 [ 248.037326][ T8446] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000844026d4 [ 248.038749][ T8446] x2 : 0000000000000002 x1 : ffff000112b4ba80 x0 : 0000000000000001 [ 248.040159][ T8446] Call trace: [ 248.040800][ T8446] rxe_pool_cleanup+0x58/0x60 (P) [ 248.041701][ T8446] rxe_dealloc+0x30/0xd0 [ 248.042506][ T8446] ib_dealloc_device+0x50/0x1e0 [ 248.043364][ T8446] __ib_unregister_device+0x2bc/0x33c [ 248.044276][ T8446] ib_unregister_device_and_put+0x5c/0x80 [ 248.045291][ T8446] nldev_dellink+0x330/0x374 [ 248.046109][ T8446] rdma_nl_rcv+0x4f0/0x814 [ 248.046852][ T8446] netlink_unicast+0x600/0x7f8 [ 248.047699][ T8446] netlink_sendmsg+0x648/0x948 [ 248.048557][ T8446] __sock_sendmsg+0xc8/0x17c [ 248.049393][ T8446] ____sys_sendmsg+0x3d0/0x6c8 [ 248.050223][ T8446] ___sys_sendmsg+0x198/0x224 [ 248.051062][ T8446] __sys_sendmsg+0x158/0x204 [ 248.051820][ T8446] __arm64_sys_sendmsg+0x80/0x94 [ 248.052659][ T8446] invoke_syscall+0x98/0x244 [ 248.053450][ T8446] el0_svc_common+0xec/0x23c [ 248.054237][ T8446] do_el0_svc+0x4c/0x5c [ 248.054975][ T8446] el0_svc+0x64/0x260 [ 248.055636][ T8446] el0t_64_sync_handler+0x48/0x148 [ 248.056498][ T8446] el0t_64_sync+0x198/0x19c [ 248.057252][ T8446] irq event stamp: 187566 [ 248.058034][ T8446] hardirqs last enabled at (187565): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 248.059878][ T8446] hardirqs last disabled at (187566): [] el1_brk64+0x20/0x54 [ 248.061521][ T8446] softirqs last enabled at (187504): [] __alloc_skb+0x1c0/0x610 [ 248.063104][ T8446] softirqs last disabled at (187502): [] __alloc_skb+0x1a8/0x610 [ 248.064671][ T8446] ---[ end trace 0000000000000000 ]--- [ 248.154792][ T4728] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 248.266171][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.266308][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.804294][ T1597] ieee802154 phy1 wpan1: encryption failed: -22