last executing test programs: 1m9.363293085s ago: executing program 3 (id=530): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x2, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 1m5.839602481s ago: executing program 3 (id=535): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x1, r4, 0xcccccccc}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m3.551210824s ago: executing program 3 (id=539): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m2.368445733s ago: executing program 3 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 1m0.735722508s ago: executing program 3 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 56.534289153s ago: executing program 3 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000580)={0x6, "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"}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x15, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000400)=0x83, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) 41.458541213s ago: executing program 32 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000580)={0x6, "aba26ed49fba3b04f7454c5e2e7fb6ed1fb798f5da35aec570aae34c1042e70b719bd2c577ebdddc38c473974879db9762dfc0ffb144035abb1b8a62676f2088150d25c1422600fbe1abaa81e8687ea739dec1290e6a77960c223128281f4c7c2c6863add427580ef580045ff5f07e50901fc537a64eb1fd94782006fd6f184999e9e50059dca654e0c8dfcc0e7e3dae54a07ae544724153da157cd20dd6e5711485337eff9afc0369058a770db73246880e5d3f5fde72a78d8b87e6d9c6e52cf52e7431a3424fe6316218c3e071097d9c6f90b55a737ee3a78dc3beda50b410767f2b839a3bb6fa486b08e2084029e929c4eb23efa93d3817dd89cdd10dd979"}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x15, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000400)=0x83, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) 34.233492534s ago: executing program 2 (id=616): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x2, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 31.274637287s ago: executing program 2 (id=620): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 30.271277895s ago: executing program 2 (id=622): getpriority(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmsg$unix(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/216, 0xd8}, {0x0}, {0x0}], 0x3}, 0x0) 28.823654699s ago: executing program 2 (id=625): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x1, r4, 0xcccccccc}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 27.372377234s ago: executing program 2 (id=626): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000580)={0x6, "aba26ed49fba3b04f7454c5e2e7fb6ed1fb798f5da35aec570aae34c1042e70b719bd2c577ebdddc38c473974879db9762dfc0ffb144035abb1b8a62676f2088150d25c1422600fbe1abaa81e8687ea739dec1290e6a77960c223128281f4c7c2c6863add427580ef580045ff5f07e50901fc537a64eb1fd94782006fd6f184999e9e50059dca654e0c8dfcc0e7e3dae54a07ae544724153da157cd20dd6e5711485337eff9afc0369058a770db73246880e5d3f5fde72a78d8b87e6d9c6e52cf52e7431a3424fe6316218c3e071097d9c6f90b55a737ee3a78dc3beda50b410767f2b839a3bb6fa486b08e2084029e929c4eb23efa93d3817dd89cdd10dd979"}) 27.169451936s ago: executing program 2 (id=628): getpriority(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmsg$unix(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/216, 0xd8}, {0x0}, {0x0}], 0x3}, 0x0) 11.969229332s ago: executing program 33 (id=628): getpriority(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmsg$unix(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/216, 0xd8}, {0x0}, {0x0}], 0x3}, 0x0) 8.592005569s ago: executing program 4 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 7.657254574s ago: executing program 4 (id=662): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_eq}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 7.655643774s ago: executing program 0 (id=670): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x189082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x15}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x4}) syz_emit_ethernet(0x2d, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883"}}}}, 0x0) 7.226545719s ago: executing program 5 (id=594): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = timerfd_create(0x2, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x90000004}) 7.022490831s ago: executing program 1 (id=663): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 6.5259712s ago: executing program 0 (id=664): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r3 = timerfd_create(0x2, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x90000004}) 6.52502291s ago: executing program 4 (id=665): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) timerfd_create(0x2, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 6.463645484s ago: executing program 0 (id=666): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000005400)={[{@nobarrier}, {@nodatasum}, {@check_int_data}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@barrier}, {@nossd}, {@acl}, {@nodiscard}]}, 0xfb, 0x5195, &(0x7f0000000240)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r3) 5.996612141s ago: executing program 5 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x5, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x18d}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x9}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="716d95aa6991ac2a644c56469b10b5c62a0c82c818f56bf60ccbf6c4463a00850701d7a39854a6c53b68d5478e8c241c642e53dccc4496909ed549f5066d8dc98a036cc980591ec440d2c1909627b98eba3b4045978b09c4ab0d91fb8017a1880e79bb2abdfa76bc88e3a17c758d99d4a96dfd2a27a11788f6e8a87ae0ab22ff17240ce1b143085f5695f6e24b2785d3fb5202b47194ffbf0b9374efe44bafa787201a52c4df1f1cf126be7d34e9e9d1f2b2d2817c07faa7d64bd969a6edd6f2ad56837014039526b97db9756db8126f0a1f10c561e009a367c5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x24000081, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,hide\x00unhide,map=off,session=0x0000 00000000062,iocharset=macgreekAmap=normal,iocharset=iso8859-2,session=0x0000000000000058,showassoc,mode=0x0000000000000004,check=strict,fscontext=staff_u,permit_directio,\x00'], 0xfa, 0x69f, &(0x7f0000000f00)="$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") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 5.994852471s ago: executing program 1 (id=677): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = timerfd_create(0x2, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x90000004}) 5.541724687s ago: executing program 0 (id=668): getpriority(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmsg$unix(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.713047304s ago: executing program 4 (id=669): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x1, r4, 0xcccccccc}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.380461692s ago: executing program 0 (id=671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r4, 0xee01, r5) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14b4973cd160e90aafad5742f47771132af6fdeea669adfd5eda144f72d4f76a", 0x8c, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.380289562s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) 2.009960763s ago: executing program 4 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000580)={0x6, "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"}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x15, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000400)=0x83, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) 1.405436019s ago: executing program 1 (id=674): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 1.38905295s ago: executing program 0 (id=675): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 157.841981ms ago: executing program 1 (id=676): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r3 = timerfd_create(0x2, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x90000004}) 84.195126ms ago: executing program 1 (id=678): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=679): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000005400)={[{@nobarrier}, {@nodatasum}, {@check_int_data}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@barrier}, {@nossd}, {@acl}, {@nodiscard}]}, 0xfb, 0x5195, &(0x7f0000000240)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r3) kernel console output (not intermixed with test programs): 0x0c03 length: 249 > 1 [ 32.412645][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.422165][ T4329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.423370][ T4329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.426480][ T4329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.427813][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.429342][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.430698][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.431854][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.433072][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.437636][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.438582][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.439034][ T4328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.440251][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.441397][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.442374][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.443757][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.444453][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.445838][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.447580][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.448230][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.450000][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.451331][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.453173][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.483511][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.485580][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.486858][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.488289][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.489653][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.490957][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.606699][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 32.617328][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 32.634723][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 32.647089][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 32.657008][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.672019][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.673185][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.674668][ T4322] device bridge_slave_0 entered promiscuous mode [ 32.678412][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.679544][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.681062][ T4322] device bridge_slave_1 entered promiscuous mode [ 32.700228][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.701479][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.702978][ T4335] device bridge_slave_0 entered promiscuous mode [ 32.713596][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.714796][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.716350][ T4331] device bridge_slave_0 entered promiscuous mode [ 32.718033][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.719141][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.720608][ T4335] device bridge_slave_1 entered promiscuous mode [ 32.721844][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.723038][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.724494][ T4326] device bridge_slave_0 entered promiscuous mode [ 32.728871][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.737751][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.738935][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.740321][ T4331] device bridge_slave_1 entered promiscuous mode [ 32.742045][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.743128][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.744620][ T4326] device bridge_slave_1 entered promiscuous mode [ 32.747552][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.751308][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.752518][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.753913][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.756725][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.759058][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.760437][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.761622][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.763201][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.782697][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.785277][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.787562][ T4322] team0: Port device team_slave_0 added [ 32.789522][ T4335] team0: Port device team_slave_0 added [ 32.793616][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.796350][ T4322] team0: Port device team_slave_1 added [ 32.804159][ T4335] team0: Port device team_slave_1 added [ 32.806311][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.808546][ T4326] team0: Port device team_slave_0 added [ 32.810243][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.818595][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.822426][ T4326] team0: Port device team_slave_1 added [ 32.823647][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.824732][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.828843][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.840945][ T4331] team0: Port device team_slave_0 added [ 32.842989][ T4331] team0: Port device team_slave_1 added [ 32.846364][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.847472][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.851556][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.853617][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.854686][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.861138][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.871071][ T4321] team0: Port device team_slave_0 added [ 32.872889][ T4321] team0: Port device team_slave_1 added [ 32.879258][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.880384][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.884274][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.888278][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.889346][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.893205][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.895453][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.896543][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.900448][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.905829][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.906854][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.910613][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.918904][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.919928][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.923703][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.926107][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.927238][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.931112][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.933286][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.934319][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.938507][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.986289][ T4335] device hsr_slave_0 entered promiscuous mode [ 33.045208][ T4335] device hsr_slave_1 entered promiscuous mode [ 33.136161][ T4322] device hsr_slave_0 entered promiscuous mode [ 33.175326][ T4322] device hsr_slave_1 entered promiscuous mode [ 33.215103][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.216440][ T4322] Cannot create hsr debugfs directory [ 33.286056][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.335329][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.385048][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.386215][ T4321] Cannot create hsr debugfs directory [ 33.448455][ T4331] device hsr_slave_0 entered promiscuous mode [ 33.485273][ T4331] device hsr_slave_1 entered promiscuous mode [ 33.525085][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.526271][ T4331] Cannot create hsr debugfs directory [ 33.576089][ T4326] device hsr_slave_0 entered promiscuous mode [ 33.615295][ T4326] device hsr_slave_1 entered promiscuous mode [ 33.665164][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.666419][ T4326] Cannot create hsr debugfs directory [ 33.791530][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.822650][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.847634][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.886686][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.927251][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.969534][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.016181][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.057556][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.106341][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.146208][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.199556][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.243260][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.301408][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.326353][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.378412][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.430903][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.475501][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 34.476568][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 34.477565][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 34.478475][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 34.493148][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.519700][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.555123][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 34.572906][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.618286][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.620867][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.669892][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.672207][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.682463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.684608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.692199][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.694534][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.697959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.699554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.700919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.702212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.703413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.704828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.707839][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.708953][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.710538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.713760][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.729205][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.731785][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.733382][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.734771][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.736034][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.740558][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.748607][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.750065][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.751457][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.752582][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.753842][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.755924][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.757198][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.758290][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.759585][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.761303][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.762662][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.764117][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.765225][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.767126][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.768686][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.770169][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.771560][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.777294][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.787014][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.788618][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.790041][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.791161][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.792481][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.794066][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.796448][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.798395][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.800050][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.802965][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.804417][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.807593][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.809857][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.813799][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.819958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.821450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.823378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.824803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.827477][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.828565][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.829789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.831256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.832777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.844561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.846469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.847976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.849559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.851149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.852659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.854484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.858378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.859866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.861584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.863078][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864169][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.865588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.867095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.868477][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.869591][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.870951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.872481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.873904][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.875061][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.881696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.883227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.885868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.890519][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.892274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.893832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.898414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.899874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.907863][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.909871][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.911279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.912965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.914472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.916826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.918565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.920239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.921758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.923257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.924760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.933898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.938597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.940369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.941925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.943356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.944761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.947309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.951404][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.952997][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.954411][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.957261][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.963912][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.966104][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.969333][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.972507][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.974177][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.976785][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.978382][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.986658][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.992165][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.994225][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.996718][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.008485][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.010050][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.013656][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.075981][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.077230][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.080365][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.090934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.092295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.095466][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.102764][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.104866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.106785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.119517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.121075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.122516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.123968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.139045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.140689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.151624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.152938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.159358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.160974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.162605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.164062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.167500][ T4326] device veth0_vlan entered promiscuous mode [ 35.172266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.173798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.175840][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.177226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.178573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.180013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.181458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.182608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.183775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.185419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.187390][ T4335] device veth0_vlan entered promiscuous mode [ 35.191188][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.192624][ T4321] device veth0_vlan entered promiscuous mode [ 35.194856][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.200191][ T4326] device veth1_vlan entered promiscuous mode [ 35.209788][ T4321] device veth1_vlan entered promiscuous mode [ 35.211922][ T4335] device veth1_vlan entered promiscuous mode [ 35.224136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.225866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.227151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.228580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.229941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.231266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.232648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.234129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.251273][ T4335] device veth0_macvtap entered promiscuous mode [ 35.253429][ T4321] device veth0_macvtap entered promiscuous mode [ 35.258725][ T4335] device veth1_macvtap entered promiscuous mode [ 35.261247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.263038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.264361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.266689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.268204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.269688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.271104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.282859][ T4326] device veth0_macvtap entered promiscuous mode [ 35.285845][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.287554][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.289096][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.299654][ T4321] device veth1_macvtap entered promiscuous mode [ 35.302519][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.304033][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.306062][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.309064][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.313229][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.315780][ T4326] device veth1_macvtap entered promiscuous mode [ 35.318204][ T4322] device veth0_vlan entered promiscuous mode [ 35.321517][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.324139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.325854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.327367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.333444][ T4322] device veth1_vlan entered promiscuous mode [ 35.337462][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.340257][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.341828][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.343870][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.346506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.347972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.349421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.350900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.352399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.359362][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.360710][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.361913][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.363199][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.368890][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.370540][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.372849][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.376554][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.377895][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.379169][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.380485][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.384274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.385951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.387394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.390255][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.391827][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.393213][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.394651][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.397225][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.401556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.403185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.413193][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.414899][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.417261][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.418949][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.421059][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.422985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.424576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.428930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.430477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.435986][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.437379][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438624][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.439883][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.458901][ T4322] device veth0_macvtap entered promiscuous mode [ 35.468987][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.470598][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.472041][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.481983][ T4331] device veth0_vlan entered promiscuous mode [ 35.486358][ T4322] device veth1_macvtap entered promiscuous mode [ 35.488669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.490117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.491590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.493170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.494517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.510538][ T4331] device veth1_vlan entered promiscuous mode [ 35.528505][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.529769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.531857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.538349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.540103][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.541802][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.543393][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.545719][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.547124][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.548641][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.550715][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.561625][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.562850][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.564269][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.564293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.567191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.569517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.571575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.572782][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.573946][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.577116][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.578583][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.580059][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.581439][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.582860][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.584903][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.592438][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.593949][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.595852][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.611046][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.612354][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.614043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.621782][ T4331] device veth0_macvtap entered promiscuous mode [ 35.626309][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.627903][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.629419][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.631372][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.632734][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.634007][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.636481][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.638905][ T4331] device veth1_macvtap entered promiscuous mode [ 35.641708][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.642928][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.644228][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.649088][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.668013][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.678602][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.680161][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.681741][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.683172][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.684675][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.687467][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.688999][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.691445][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.707572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.709163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.718583][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.719821][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.719828][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.721439][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.730243][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.731849][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.733184][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.734693][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.736611][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.738463][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.741218][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.744716][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.749608][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.750946][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.752317][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.814844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.817023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.828177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.923287][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.924617][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.930462][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.934290][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.937462][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.938867][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.942996][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.944588][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.218440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.253244][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.255147][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.264095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.555489][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 36.555575][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 37.075759][ T4452] loop3: detected capacity change from 0 to 64 [ 37.269007][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 37.270069][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 37.270104][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 38.470558][ T4353] Bluetooth: hci5: Frame reassembly failed (-84) [ 39.275249][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 39.276296][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 39.277231][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 39.278174][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 39.279057][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 39.649849][ T4480] device syzkaller0 entered promiscuous mode [ 39.650302][ T4498] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 39.683202][ T4500] loop3: detected capacity change from 0 to 1024 [ 39.684553][ T4500] ======================================================= [ 39.684553][ T4500] WARNING: The mand mount option has been deprecated and [ 39.684553][ T4500] and is ignored by this kernel. Remove the mand [ 39.684553][ T4500] option from the mount to silence this warning. [ 39.684553][ T4500] ======================================================= [ 39.690279][ T4500] ext4: Bad value for 'barrier' [ 40.056825][ T4505] loop4: detected capacity change from 0 to 32768 [ 40.269636][ T4506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 40.405448][ T4505] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.15 (4505) [ 40.408961][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 40.410546][ T4433] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 40.421757][ T4505] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 40.423557][ T4505] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 40.425033][ T4505] BTRFS info (device loop4): using free space tree [ 40.550694][ T4505] BTRFS info (device loop4): enabling ssd optimizations [ 40.670318][ T4532] loop1: detected capacity change from 0 to 32768 [ 40.690814][ T4532] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.16 (4532) [ 40.709379][ T4532] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 40.711032][ T4532] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 40.712322][ T4532] BTRFS info (device loop1): enabling disk space caching [ 40.713374][ T4532] BTRFS info (device loop1): force clearing of disk cache [ 40.714447][ T4532] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 40.715895][ T4532] BTRFS info (device loop1): use zstd compression, level 3 [ 40.716855][ T4532] BTRFS info (device loop1): disk space caching is enabled [ 40.719464][ T4433] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 40.720743][ T4433] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.722209][ T4433] usb 1-1: config 0 has no interface number 0 [ 40.723065][ T4433] usb 1-1: config 0 interface 205 has no altsetting 0 [ 40.732987][ T4433] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 40.734399][ T4433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.735683][ T4433] usb 1-1: Product: syz [ 40.736291][ T4433] usb 1-1: Manufacturer: syz [ 40.737025][ T4433] usb 1-1: SerialNumber: syz [ 40.743517][ T4433] usb 1-1: config 0 descriptor?? [ 41.387102][ T4433] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 41.388867][ T4433] dvb-usb: bulk message failed: -22 (3/0) [ 41.400809][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 41.401458][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 41.401792][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 41.402816][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 41.417466][ T4433] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 41.425976][ T4433] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 41.427717][ T4433] usb 1-1: media controller created [ 41.428940][ T4433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 41.449178][ T4433] dvb-usb: bulk message failed: -22 (6/0) [ 41.450190][ T4433] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 41.454807][ T4331] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.474284][ T4433] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 41.483576][ T4433] dvb-usb: schedule remote query interval to 150 msecs. [ 41.484633][ T4534] loop2: detected capacity change from 0 to 32768 [ 41.484669][ T4433] dvb-usb: bulk message failed: -22 (3/0) [ 41.510870][ T4534] XFS (loop2): Mounting V5 Filesystem [ 41.528050][ T4433] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 41.559642][ T4567] loop3: detected capacity change from 0 to 512 [ 41.578697][ T4534] XFS (loop2): Ending clean mount [ 41.621233][ T4532] BTRFS info (device loop1): enabling ssd optimizations [ 41.623399][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.625711][ T4532] BTRFS info (device loop1): rebuilding free space tree [ 41.634864][ T4532] BTRFS info (device loop1): disabling free space tree [ 41.635923][ T4532] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 41.637328][ T4532] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 41.641127][ T4384] dvb-usb: bulk message failed: -22 (1/0) [ 41.642075][ T4384] dvb-usb: error while querying for an remote control event. [ 41.795240][ T4405] dvb-usb: bulk message failed: -22 (1/0) [ 41.796265][ T4405] dvb-usb: error while querying for an remote control event. [ 42.160280][ T4405] dvb-usb: bulk message failed: -22 (1/0) [ 42.162439][ T4405] dvb-usb: error while querying for an remote control event. [ 42.168100][ T527] wlan1: Trigger new scan to find an IBSS to join [ 42.365120][ T4405] dvb-usb: bulk message failed: -22 (1/0) [ 42.370976][ T4405] dvb-usb: error while querying for an remote control event. [ 42.513764][ T4594] loop4: detected capacity change from 0 to 1024 [ 42.520852][ T4335] XFS (loop2): Unmounting Filesystem [ 42.534629][ T4405] dvb-usb: bulk message failed: -22 (1/0) [ 42.536381][ T4405] dvb-usb: error while querying for an remote control event. [ 42.803081][ T4433] dvb-usb: bulk message failed: -22 (1/0) [ 42.803981][ T4433] dvb-usb: error while querying for an remote control event. [ 42.823010][ T4594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.861600][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 42.868468][ T4321] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 42.983647][ T4433] dvb-usb: bulk message failed: -22 (1/0) [ 42.984966][ T4433] dvb-usb: error while querying for an remote control event. [ 43.199340][ T4604] dvb-usb: bulk message failed: -22 (1/0) [ 43.200348][ T4604] dvb-usb: error while querying for an remote control event. [ 43.364842][ T4604] dvb-usb: bulk message failed: -22 (1/0) [ 43.366057][ T4604] dvb-usb: error while querying for an remote control event. [ 43.525148][ T4602] dvb-usb: bulk message failed: -22 (1/0) [ 43.526422][ T4602] dvb-usb: error while querying for an remote control event. [ 43.929437][ T4602] dvb-usb: bulk message failed: -22 (1/0) [ 43.931975][ T4602] dvb-usb: error while querying for an remote control event. [ 44.022557][ T1516] usb 1-1: USB disconnect, device number 2 [ 44.050681][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 44.295903][ T1516] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 44.656852][ T4634] loop4: detected capacity change from 0 to 128 [ 45.714999][ C0] sched: RT throttling activated [ 46.481432][ T4450] wlan1: Trigger new scan to find an IBSS to join [ 46.726504][ T4648] loop0: detected capacity change from 0 to 1024 [ 46.818353][ T4648] hfsplus: bad catalog entry type [ 48.717727][ T4665] wlan1: Creating new IBSS network, BSSID 32:f8:f9:6f:ec:a8 [ 49.172794][ T4673] loop4: detected capacity change from 0 to 512 [ 49.226528][ T4677] loop3: detected capacity change from 0 to 4096 [ 49.235793][ T4673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.237028][ T4593] hfsplus: b-tree write err: -5, ino 4 [ 49.249145][ T4673] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.251253][ T4673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.258669][ T4673] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.36: Invalid block bitmap block 0 in block_group 0 [ 49.263309][ T4673] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 49.267860][ T4673] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.36: attempt to clear invalid blocks 983261 len 1 [ 49.270335][ T4673] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.36: Invalid inode table block 0 in block_group 0 [ 49.283505][ T4673] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 49.550106][ T4686] loop2: detected capacity change from 0 to 2048 [ 50.483520][ T4688] loop0: detected capacity change from 0 to 16 [ 50.742036][ T4688] erofs: (device loop0): mounted with root inode @ nid 36. [ 50.812652][ T4686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 50.919323][ T4673] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 50.921528][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.931285][ T4673] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.36: Invalid inode table block 0 in block_group 0 [ 50.938202][ T4673] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 50.942285][ T4673] EXT4-fs error (device loop4): ext4_truncate:4318: inode #11: comm syz.4.36: mark_inode_dirty error [ 50.944809][ T4673] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 52.557240][ T4673] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.36: Invalid inode table block 0 in block_group 0 [ 52.561822][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.567807][ T4699] loop0: detected capacity change from 0 to 1024 [ 52.569151][ T4699] ext4: Bad value for 'barrier' [ 52.580286][ T4673] EXT4-fs (loop4): 1 truncate cleaned up [ 52.581307][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.653932][ T4696] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 52.676844][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 52.688048][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 53.055580][ T4705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.080328][ T4705] Zero length message leads to an empty skb [ 54.149760][ T4724] loop1: detected capacity change from 0 to 128 [ 54.462621][ T4731] process 'syz.2.48' launched './file0' with NULL argv: empty string added [ 54.589913][ T4732] loop3: detected capacity change from 0 to 512 [ 54.591415][ T4732] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.607009][ T4732] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 54.669585][ T4732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 54.671296][ T4732] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.674776][ T4732] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.49: bg 0: block 361: padding at end of block bitmap is not set [ 54.689547][ T4732] EXT4-fs (loop3): Remounting filesystem read-only [ 54.692799][ T4732] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 54.699322][ T4732] EXT4-fs (loop3): Remounting filesystem read-only [ 54.702333][ T4732] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.49: attempt to clear invalid blocks 33619980 len 1 [ 54.711199][ T4732] EXT4-fs (loop3): Remounting filesystem read-only [ 55.075344][ T4734] ubi0: attaching mtd0 [ 55.076630][ T4734] ubi0: scanning is finished [ 55.077374][ T4734] ubi0: empty MTD device detected [ 55.101206][ T4732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.49: invalid indirect mapped block 1811939328 (level 0) [ 55.104603][ T4734] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 55.105703][ T4734] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 55.106667][ T4734] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 55.107662][ T4734] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 55.108678][ T4734] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 55.109599][ T4734] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 55.110704][ T4734] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1162280519 [ 55.112159][ T4734] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 55.121870][ T4734] ubi0: detaching mtd0 [ 55.134034][ T4732] EXT4-fs (loop3): Remounting filesystem read-only [ 55.297686][ T4734] ubi0: mtd0 is detached [ 55.329264][ T4742] ubi0: attaching mtd0 [ 55.333176][ T4742] ubi0: scanning is finished [ 55.365832][ T4732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.49: invalid indirect mapped block 2185560079 (level 1) [ 55.371923][ T4732] EXT4-fs (loop3): Remounting filesystem read-only [ 55.373505][ T4732] EXT4-fs (loop3): 1 truncate cleaned up [ 55.375367][ T4742] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 55.376592][ T4742] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 55.376663][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.377570][ T4742] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 55.379886][ T4742] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 55.380940][ T4742] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 55.381889][ T4742] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 55.383081][ T4742] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1162280519 [ 55.384484][ T4742] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 55.386518][ T4743] ubi0: background thread "ubi_bgt0d" started, PID 4743 [ 56.170505][ T4746] loop2: detected capacity change from 0 to 1024 [ 56.684384][ T4765] loop4: detected capacity change from 0 to 2048 [ 57.727364][ T4767] loop1: detected capacity change from 0 to 16 [ 57.736638][ T4767] erofs: (device loop1): mounted with root inode @ nid 36. [ 57.876390][ T4765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.147353][ T4773] loop0: detected capacity change from 0 to 128 [ 59.071352][ T4746] EXT4-fs: error -4 creating inode table initialization thread [ 59.072918][ T4746] EXT4-fs (loop2): mount failed [ 59.100896][ T4751] bridge0: port 3(wlan1) entered blocking state [ 59.102009][ T4751] bridge0: port 3(wlan1) entered disabled state [ 59.104299][ T4751] device wlan1 entered promiscuous mode [ 59.147189][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 59.829606][ T4790] loop1: detected capacity change from 0 to 1024 [ 59.833382][ T4790] ext4: Bad value for 'barrier' [ 60.344787][ T4792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 60.669745][ T4803] loop4: detected capacity change from 0 to 512 [ 61.866204][ T4803] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 61.867717][ T4803] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 61.869203][ T4803] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 61.890649][ T4809] loop3: detected capacity change from 0 to 128 [ 61.892221][ T4803] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.893473][ T4803] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 61.894669][ T4803] EXT4-fs (loop4): failed to initialize system zone (-117) [ 61.895824][ T4803] EXT4-fs (loop4): mount failed [ 63.619682][ T4816] loop2: detected capacity change from 0 to 128 [ 63.713136][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.314458][ T4826] loop0: detected capacity change from 0 to 2048 [ 64.756228][ T4827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.892811][ T114] cfg80211: failed to load regulatory.db [ 65.176022][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.177198][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.617417][ T4832] loop3: detected capacity change from 0 to 128 [ 66.665679][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 66.666062][ T4826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.730991][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 67.377105][ T4847] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 67.886839][ T4849] loop4: detected capacity change from 0 to 4096 [ 68.853610][ T4849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.303844][ T4871] ubi: mtd0 is already attached to ubi0 [ 71.017887][ T4867] loop1: detected capacity change from 0 to 512 [ 71.034930][ T4874] EXT4-fs: error -4 creating inode table initialization thread [ 71.034975][ T4874] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 71.053341][ T4884] loop0: detected capacity change from 0 to 512 [ 71.056404][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.069404][ T4884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.072540][ T4884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.165169][ T4884] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.78: Invalid block bitmap block 0 in block_group 0 [ 71.167668][ T4867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.169637][ T4884] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 71.171153][ T4884] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.78: attempt to clear invalid blocks 983261 len 1 [ 71.495460][ T4884] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.78: Invalid inode table block 0 in block_group 0 [ 71.576559][ T4884] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 71.586120][ T4884] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 71.587679][ T4884] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.78: Invalid inode table block 0 in block_group 0 [ 71.591816][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 71.595255][ T4884] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 71.605606][ T4884] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.78: mark_inode_dirty error [ 71.614159][ T4884] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 72.484510][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 72.954324][ T4884] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.78: Invalid inode table block 0 in block_group 0 [ 72.999737][ T4884] EXT4-fs (loop0): 1 truncate cleaned up [ 73.000720][ T4884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.590069][ T4915] Bluetooth: MGMT ver 1.22 [ 73.879081][ T4916] loop2: detected capacity change from 0 to 8192 [ 73.897900][ T4916] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.907117][ T4916] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 73.908834][ T4916] REISERFS (device loop2): using ordered data mode [ 73.986066][ T4916] reiserfs: using flush barriers [ 74.003040][ T4916] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.014546][ T4916] REISERFS (device loop2): checking transaction log (loop2) [ 74.440509][ T4931] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.455664][ T4916] REISERFS (device loop2): Using r5 hash to sort names [ 74.468207][ T4916] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 74.583315][ T4936] netlink: 96 bytes leftover after parsing attributes in process `syz.4.93'. [ 74.589223][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 74.933366][ T4939] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3641, free_space(entry_count) 2 [ 74.935936][ T4939] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 74.937620][ T4939] REISERFS (device loop2): Remounting filesystem read-only [ 74.938632][ T4939] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 74.940589][ T4938] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3641, free_space(entry_count) 2 [ 74.942984][ T4938] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 76.388153][ T4955] loop3: detected capacity change from 0 to 128 [ 76.410110][ T4955] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 76.415872][ T4955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.780729][ T4957] loop1: detected capacity change from 0 to 512 [ 76.861705][ T4957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.360988][ T4969] loop0: detected capacity change from 0 to 64 [ 79.303288][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 80.245626][ T4989] loop4: detected capacity change from 0 to 128 [ 81.263105][ T5009] loop1: detected capacity change from 0 to 512 [ 81.268783][ T5009] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.108: inode has both inline data and extents flags [ 81.273408][ T5005] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 81.285425][ T5009] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.108: couldn't read orphan inode 15 (err -117) [ 81.294449][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.795771][ T5016] overlayfs: failed to resolve './file0': -2 [ 83.302131][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 84.510944][ T5043] loop0: detected capacity change from 0 to 128 [ 84.906322][ T5043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.350686][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 86.028110][ T5070] loop2: detected capacity change from 0 to 512 [ 86.432059][ T5070] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.122: inode has both inline data and extents flags [ 86.435653][ T5070] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.122: couldn't read orphan inode 15 (err -117) [ 86.437606][ T5070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.728906][ T5075] overlayfs: failed to resolve './file0': -2 [ 87.084705][ T5081] loop3: detected capacity change from 0 to 128 [ 88.056775][ T5089] loop4: detected capacity change from 0 to 32768 [ 88.060602][ T5089] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.126 (5089) [ 88.263283][ T5091] ubi: mtd0 is already attached to ubi0 [ 88.265068][ T5091] ubi0: detaching mtd0 [ 88.611761][ T5091] ubi0: mtd0 is detached [ 88.666895][ T5089] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 88.668619][ T5089] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 88.670098][ T5089] BTRFS info (device loop4): enabling disk space caching [ 88.671118][ T5089] BTRFS info (device loop4): force clearing of disk cache [ 88.672159][ T5089] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.673533][ T5089] BTRFS info (device loop4): use zstd compression, level 3 [ 88.674547][ T5089] BTRFS info (device loop4): disk space caching is enabled [ 88.689874][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 90.142667][ T5130] loop1: detected capacity change from 0 to 4096 [ 90.146128][ T5130] ntfs3: Unknown parameter '' [ 90.266648][ T5115] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.579078][ T5089] BTRFS info (device loop4): enabling ssd optimizations [ 90.582566][ T5089] BTRFS info (device loop4): rebuilding free space tree [ 90.604525][ T5089] BTRFS info (device loop4): disabling free space tree [ 90.605693][ T5089] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.607055][ T5089] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.575682][ T4331] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.941313][ T5155] loop3: detected capacity change from 0 to 512 [ 91.944965][ T5157] loop4: detected capacity change from 0 to 128 [ 91.953621][ T5157] FAT-fs (loop4): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 91.962849][ T5161] loop2: detected capacity change from 0 to 128 [ 92.390890][ T5155] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.137: inode has both inline data and extents flags [ 92.393507][ T5155] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.137: couldn't read orphan inode 15 (err -117) [ 92.396127][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.612944][ T5176] overlayfs: failed to resolve './file0': -2 [ 93.360685][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 94.988135][ T5197] netlink: 324 bytes leftover after parsing attributes in process `syz.2.145'. [ 95.682017][ T5197] [U] [ 95.682589][ T5197] [U] [ 95.682978][ T5197] [U] [ 95.683374][ T5197] [U] [ 95.683813][ T5197] [U] [ 95.684211][ T5197] [U] [ 95.684605][ T5197] [U] [ 95.684977][ T5197] [U] [ 95.686414][ T5197] [U] [ 95.686821][ T5197] [U] [ 95.687237][ T5197] [U] [ 95.994160][ T5197] loop2: detected capacity change from 0 to 4096 [ 97.561202][ T5197] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 98.220330][ T5191] [U] [ 98.543845][ T4335] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 98.545198][ T4335] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 99.386317][ T5217] netlink: 96 bytes leftover after parsing attributes in process `syz.3.152'. [ 100.571624][ T5236] loop2: detected capacity change from 0 to 512 [ 100.682304][ T5236] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.155: inode has both inline data and extents flags [ 100.685309][ T5236] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 100.687384][ T5236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.585573][ T5245] overlayfs: failed to resolve './file0': -2 [ 101.782611][ T5252] loop1: detected capacity change from 0 to 8 [ 101.821172][ T5254] loop0: detected capacity change from 0 to 128 [ 103.122056][ T5257] loop4: detected capacity change from 0 to 512 [ 103.624119][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 104.009462][ T5257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.405763][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 105.430072][ T5283] loop4: detected capacity change from 0 to 8 [ 105.968896][ T5288] IPVS: set_ctl: invalid protocol: 25974 49.95.118.105:29300 [ 108.384215][ T4329] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 109.734874][ T5328] loop3: detected capacity change from 0 to 32768 [ 109.737654][ T5328] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.173 (5328) [ 109.741501][ T5328] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 109.743031][ T5328] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 109.744319][ T5328] BTRFS info (device loop3): enabling disk space caching [ 109.745394][ T5328] BTRFS info (device loop3): force clearing of disk cache [ 109.746383][ T5328] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.747701][ T5328] BTRFS info (device loop3): use zstd compression, level 3 [ 109.748685][ T5328] BTRFS info (device loop3): disk space caching is enabled [ 110.097464][ T5328] BTRFS info (device loop3): enabling ssd optimizations [ 110.099246][ T5328] BTRFS info (device loop3): rebuilding free space tree [ 110.105049][ T5328] BTRFS info (device loop3): disabling free space tree [ 110.106225][ T5328] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.107640][ T5328] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.708033][ T4322] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 111.302351][ T5368] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.177639][ T5373] loop3: detected capacity change from 0 to 8 [ 113.934412][ T5394] loop2: detected capacity change from 0 to 512 [ 113.983423][ T5394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.719002][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 115.123123][ T5411] loop3: detected capacity change from 0 to 128 [ 115.220343][ T5413] loop2: detected capacity change from 0 to 32768 [ 115.223885][ T5413] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.190 (5413) [ 115.228745][ T5413] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 115.230492][ T5413] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 115.231968][ T5413] BTRFS info (device loop2): enabling disk space caching [ 115.233076][ T5413] BTRFS info (device loop2): force clearing of disk cache [ 115.234216][ T5413] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.235525][ T5413] BTRFS info (device loop2): use zstd compression, level 3 [ 115.236488][ T5413] BTRFS info (device loop2): disk space caching is enabled [ 115.930041][ T5429] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.402931][ T5413] BTRFS info (device loop2): enabling ssd optimizations [ 116.404563][ T5413] BTRFS info (device loop2): rebuilding free space tree [ 116.409772][ T5413] BTRFS info (device loop2): disabling free space tree [ 116.410851][ T5413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.412344][ T5413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.550494][ T5436] loop3: detected capacity change from 0 to 32768 [ 116.592731][ T5436] XFS (loop3): Mounting V5 Filesystem [ 116.643240][ T5436] XFS (loop3): Ending clean mount [ 117.089063][ T4335] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 117.192277][ T4322] XFS (loop3): Unmounting Filesystem [ 118.325325][ T5473] loop1: detected capacity change from 0 to 256 [ 118.331016][ T5473] exfat: Deprecated parameter 'utf8' [ 118.332564][ T5473] exfat: Deprecated parameter 'namecase' [ 118.376125][ T5473] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 120.005092][ T5479] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.929295][ T5501] device ipvlan0 entered promiscuous mode [ 121.169203][ T5507] loop4: detected capacity change from 0 to 128 [ 121.651556][ T5513] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.017317][ T5534] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.719336][ T5544] loop3: detected capacity change from 0 to 256 [ 123.742310][ T5544] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.744031][ T5544] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 123.757374][ T5544] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 125.551335][ T5556] netlink: 104 bytes leftover after parsing attributes in process `syz.2.215'. [ 125.629031][ T5553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.975839][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.975910][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.529862][ T5588] netlink: 324 bytes leftover after parsing attributes in process `syz.3.224'. [ 129.532763][ T5588] [U] [ 129.533244][ T5588] [U] [ 129.533639][ T5588] [U] [ 129.534053][ T5588] [U] [ 129.534474][ T5588] [U] [ 129.534883][ T5588] [U] [ 129.535277][ T5588] [U] [ 129.535681][ T5588] [U] [ 129.536216][ T5588] [U] [ 129.536615][ T5588] [U] [ 129.537006][ T5588] [U] [ 129.552632][ T5588] loop3: detected capacity change from 0 to 4096 [ 129.579119][ T5588] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 130.208652][ T5594] loop0: detected capacity change from 0 to 512 [ 130.277408][ T5594] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.473456][ T5594] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 130.477671][ T5594] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 130.479081][ T5594] System zones: 0-2, 18-18, 34-35 [ 130.561817][ T5594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.692415][ T5594] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 131.245580][ T5577] [U] [ 131.670391][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 131.713730][ T4322] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 131.715287][ T4322] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 131.785353][ T5606] loop0: detected capacity change from 0 to 256 [ 131.790225][ T5606] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.796301][ T5606] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 131.804114][ T5606] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 135.248260][ T5633] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.300345][ T5655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.316101][ T4329] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 136.316155][ T4329] Bluetooth: hci1: Malformed LE Event: 0x02 [ 137.507726][ T5662] loop1: detected capacity change from 0 to 40427 [ 137.820987][ T5682] loop4: detected capacity change from 0 to 128 [ 137.870348][ T5682] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 137.930333][ T5682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.941899][ T4577] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.619125][ T5691] nfs4: Unknown parameter 'workdir' [ 138.694034][ T5688] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 139.421985][ T5706] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.541043][ T5721] loop4: detected capacity change from 0 to 256 [ 140.542490][ T5721] exfat: Deprecated parameter 'utf8' [ 140.543435][ T5721] exfat: Deprecated parameter 'namecase' [ 140.642390][ T5721] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 140.998717][ T5727] loop3: detected capacity change from 0 to 47 [ 143.045794][ T5758] loop4: detected capacity change from 0 to 512 [ 144.045924][ T5759] loop0: detected capacity change from 0 to 512 [ 144.059920][ T4593] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 144.074816][ T5759] EXT4-fs (loop0): 1 truncate cleaned up [ 144.075813][ T5759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.084977][ T27] audit: type=1326 audit(16528.068:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.091395][ T27] audit: type=1326 audit(16528.068:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.095337][ T27] audit: type=1326 audit(16528.078:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.100059][ T27] audit: type=1326 audit(16528.078:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.105338][ T27] audit: type=1326 audit(16528.078:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.108607][ T27] audit: type=1326 audit(16528.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.339610][ T4469] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 144.484240][ T5758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.493829][ T27] audit: type=1326 audit(16528.078:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.511713][ T27] audit: type=1326 audit(16528.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.521790][ T27] audit: type=1326 audit(16528.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.532778][ T27] audit: type=1326 audit(16528.078:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 144.582981][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 147.325663][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 147.734707][ T5796] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 147.759610][ T5794] loop2: detected capacity change from 0 to 8192 [ 147.800302][ T5794] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.802842][ T5794] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 147.808884][ T5794] REISERFS (device loop2): using ordered data mode [ 147.809915][ T5794] reiserfs: using flush barriers [ 147.813980][ T5794] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.820026][ T5794] REISERFS (device loop2): checking transaction log (loop2) [ 147.823483][ T5794] REISERFS (device loop2): Using r5 hash to sort names [ 147.825826][ T5794] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 147.886633][ T5794] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 147.927503][ T5794] device bond1 entered promiscuous mode [ 148.006276][ T5794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 148.023733][ T5794] device bond2 entered promiscuous mode [ 149.270042][ T5821] loop2: detected capacity change from 0 to 512 [ 149.329681][ T5821] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.300181][ T5821] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 150.301874][ T5821] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 150.303096][ T5821] System zones: 0-2, 18-18, 34-35 [ 150.325366][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.346079][ T5820] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 150.359435][ T5826] loop3: detected capacity change from 0 to 512 [ 150.378840][ T5826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.822643][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 151.292265][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 151.300069][ T5832] loop2: detected capacity change from 0 to 32768 [ 151.561423][ T5840] device ipvlan0 entered promiscuous mode [ 151.700847][ T5851] loop0: detected capacity change from 0 to 256 [ 151.705956][ T5851] exfat: Deprecated parameter 'utf8' [ 151.707345][ T5851] exfat: Deprecated parameter 'namecase' [ 151.759755][ T5851] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 152.193294][ T5832] XFS (loop2): Mounting V5 Filesystem [ 152.249482][ T5832] XFS (loop2): Ending clean mount [ 152.314727][ T5855] fuse: root generation should be zero [ 152.901375][ T4335] XFS (loop2): Unmounting Filesystem [ 154.127989][ T5888] loop1: detected capacity change from 0 to 128 [ 154.134107][ T5888] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 154.141036][ T5888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.617287][ T5907] loop2: detected capacity change from 0 to 256 [ 158.618684][ T5907] exfat: Deprecated parameter 'utf8' [ 158.619589][ T5907] exfat: Deprecated parameter 'namecase' [ 158.642434][ T5907] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 158.715176][ T4323] Bluetooth: hci2: command 0x0406 tx timeout [ 158.716391][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 158.717365][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 158.826777][ T5917] loop1: detected capacity change from 0 to 512 [ 159.769734][ T5917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.846435][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 159.883169][ T5934] loop3: detected capacity change from 0 to 4096 [ 159.902035][ T5934] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.406506][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 161.406519][ T27] audit: type=1326 audit(16545.018:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.1.302" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7777368 code=0x7f010000 [ 161.442274][ T4322] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 162.535876][ T4720] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 162.647825][ T5967] loop3: detected capacity change from 0 to 2048 [ 162.704345][ T5823] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 162.721239][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.128609][ T5979] loop2: detected capacity change from 0 to 512 [ 165.929182][ T5991] loop4: detected capacity change from 0 to 128 [ 165.948344][ T5991] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 165.954957][ T5991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.089192][ T5979] EXT4-fs: error -4 creating inode table initialization thread [ 166.090509][ T5979] EXT4-fs (loop2): mount failed [ 167.879009][ T6013] loop2: detected capacity change from 0 to 512 [ 167.881641][ T6011] loop3: detected capacity change from 0 to 512 [ 167.906666][ T6011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.926548][ T6013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.096942][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 169.735700][ T6035] netlink: 68 bytes leftover after parsing attributes in process `syz.1.322'. [ 170.089353][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 173.980137][ T6073] loop1: detected capacity change from 0 to 512 [ 175.466664][ T6073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.526474][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 177.407317][ T6095] loop3: detected capacity change from 0 to 128 [ 177.934180][ T6095] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 177.947794][ T6095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.431602][ T6102] tipc: Started in network mode [ 178.432554][ T6102] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 178.433893][ T6102] tipc: Enabled bearer , priority 15 [ 179.704001][ T4578] tipc: Node number set to 8432298 [ 181.444085][ T6132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.375990][ T4619] Bluetooth: hci5: Frame reassembly failed (-90) [ 183.715257][ T6170] binder: 6165:6170 ioctl c0306201 0 returned -14 [ 183.717550][ T6170] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 185.838240][ T4329] Bluetooth: hci5: command 0x1003 tx timeout [ 185.838392][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.005138][ T27] audit: type=1326 audit(16570.628:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.008726][ T27] audit: type=1326 audit(16570.628:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.012046][ T27] audit: type=1326 audit(16570.628:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.117611][ T27] audit: type=1326 audit(16570.628:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.120998][ T27] audit: type=1326 audit(16570.628:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.130857][ T27] audit: type=1326 audit(16570.628:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.134157][ T27] audit: type=1326 audit(16570.628:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.148217][ T27] audit: type=1326 audit(16570.628:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.151420][ T27] audit: type=1326 audit(16570.638:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 187.739305][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.762241][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.274538][ T6225] loop0: detected capacity change from 0 to 512 [ 189.787160][ T27] audit: type=1326 audit(16570.638:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2977368 code=0x7ffc0000 [ 189.921870][ T6225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.015678][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 191.981906][ T6256] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.320020][ T6260] loop1: detected capacity change from 0 to 164 [ 194.263064][ T6275] loop1: detected capacity change from 0 to 512 [ 194.417983][ T6275] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 194.419777][ T6275] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 194.421316][ T6275] EXT4-fs (loop1): group descriptors corrupted! [ 194.788373][ T6282] netlink: 'syz.0.374': attribute type 21 has an invalid length. [ 194.849945][ T6270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.861433][ T6270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.074533][ T6273] loop2: detected capacity change from 0 to 32768 [ 195.127467][ T6273] XFS (loop2): Mounting V5 Filesystem [ 195.503651][ T6273] XFS (loop2): Ending clean mount [ 195.508405][ T6273] XFS (loop2): Quotacheck needed: Please wait. [ 195.520196][ T6299] loop0: detected capacity change from 0 to 32768 [ 195.526375][ T6299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (6299) [ 195.529729][ T6299] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.531186][ T6299] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 195.532495][ T6299] BTRFS info (device loop0): turning off barriers [ 195.533404][ T6299] BTRFS info (device loop0): setting nodatasum [ 195.534591][ T6299] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 195.539650][ T6299] BTRFS error (device loop0): open_ctree failed: -22 [ 195.618149][ T6273] XFS (loop2): Quotacheck: Done. [ 196.068607][ T4577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4577) [ 196.122729][ T4335] XFS (loop2): Unmounting Filesystem [ 196.741494][ T6310] loop3: detected capacity change from 0 to 1024 [ 198.797393][ T6329] binder: 6328:6329 ioctl c0306201 0 returned -14 [ 198.829331][ T6329] binder: 6328:6329 ioctl 4018620d 0 returned -22 [ 198.832253][ T6329] binder: 6328:6329 Acquire 1 refcount change on invalid ref 0 ret -22 [ 198.835597][ T6310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.115118][ T6338] 9pnet_fd: p9_fd_create_unix (6338): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 199.118525][ T6339] binder: 6328:6339 got transaction to invalid handle, 1 [ 199.132170][ T6339] binder: 6339:6328 cannot find target node [ 199.133063][ T6339] binder: 6328:6339 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3045 [ 199.135181][ T6339] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.387179][ T6341] loop4: detected capacity change from 0 to 512 [ 200.146964][ T6341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.597153][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 201.652739][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 201.676513][ T6362] loop3: detected capacity change from 0 to 512 [ 201.677893][ T6362] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 201.782002][ T4311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.995828][ T6374] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.191965][ T6374] overlayfs: failed to look up (tracing) for ino (-66) [ 203.214369][ T6374] loop1: detected capacity change from 0 to 4096 [ 203.266776][ T6374] NILFS (loop1): unrecognized mount option "./file0" [ 203.828652][ T6381] mmap: syz.2.390 (6381) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 204.156227][ T6364] loop4: detected capacity change from 0 to 32768 [ 204.588775][ T6392] loop2: detected capacity change from 0 to 128 [ 204.715181][ T6392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.420588][ T6398] syz.0.391 (6398): drop_caches: 2 [ 207.577319][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 208.077698][ T6415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.079549][ T6415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.086406][ T6415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.088004][ T6415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.161254][ T6430] loop2: detected capacity change from 0 to 512 [ 210.237302][ T6430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.420288][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 211.116109][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 211.900724][ T6453] loop4: detected capacity change from 0 to 1024 [ 211.902299][ T6453] EXT4-fs: Ignoring removed nobh option [ 211.903264][ T6453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.904734][ T6453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.946824][ T6453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 211.950816][ T6453] System zones: 0-1, 3-36 [ 211.953349][ T6453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.385534][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 213.735178][ T6489] loop3: detected capacity change from 0 to 16 [ 214.453112][ T6493] x_tables: duplicate underflow at hook 1 [ 214.721814][ T6489] erofs: (device loop3): mounted with root inode @ nid 36. [ 214.845962][ T6489] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 214.849154][ T6489] syz.3.413: attempt to access beyond end of device [ 214.849154][ T6489] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 214.855757][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.857435][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.858976][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.860475][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.865123][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.866860][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.868635][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.870234][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.872814][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.874533][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.877441][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.879175][ T6489] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 214.909663][ T6488] loop4: detected capacity change from 0 to 32768 [ 216.570180][ T6514] loop3: detected capacity change from 0 to 512 [ 216.993619][ T6514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.266835][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 219.270719][ T6529] loop4: detected capacity change from 0 to 1024 [ 219.338747][ T6529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.899859][ T6555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.430'. [ 222.593124][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 226.519619][ T6608] nfs4: Unknown parameter 'workdir' [ 228.245978][ T6617] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.796554][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.797875][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.799063][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.800315][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.833027][ T6672] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.877092][ T6665] ceph: No mds server is up or the cluster is laggy [ 232.903578][ T6655] loop4: detected capacity change from 0 to 32768 [ 232.904555][ T4575] libceph: connect (1)[c::]:6789 error -101 [ 232.910417][ T6667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.359948][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 234.361514][ T4323] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.445328][ T4575] libceph: mon0 (1)[c::]:6789 connect error [ 234.599641][ T6655] XFS (loop4): Mounting V5 Filesystem [ 234.998311][ T4575] libceph: connect (1)[c::]:6789 error -101 [ 235.004561][ T4575] libceph: mon0 (1)[c::]:6789 connect error [ 235.196527][ T6655] XFS (loop4): log mount failed [ 238.347935][ T6725] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.458125][ T6728] loop2: detected capacity change from 0 to 512 [ 239.727794][ T6728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.708389][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 247.633097][ T6784] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 248.612558][ T6788] loop3: detected capacity change from 0 to 32768 [ 249.123588][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.125855][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.550795][ T6816] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 251.663822][ T6821] loop2: detected capacity change from 0 to 256 [ 251.667497][ T6821] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.669274][ T6821] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 251.675615][ T6821] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 256.520149][ T6861] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.289578][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 259.289589][ T27] audit: type=1326 audit(16641.738:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.293746][ T27] audit: type=1326 audit(16641.738:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.305126][ T27] audit: type=1326 audit(16641.738:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.308349][ T27] audit: type=1326 audit(16641.738:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.311415][ T27] audit: type=1326 audit(16641.738:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.314480][ T27] audit: type=1326 audit(16641.738:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.342039][ T27] audit: type=1326 audit(16641.738:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.355179][ T27] audit: type=1326 audit(16641.738:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.358440][ T27] audit: type=1326 audit(16641.738:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4577368 code=0x7ffc0000 [ 259.375101][ T27] audit: type=1326 audit(16641.738:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb455a32c code=0x7ffc0000 [ 259.650240][ T6882] loop3: detected capacity change from 0 to 512 [ 259.739430][ T6882] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 259.740908][ T6882] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 260.151572][ T6896] lo speed is unknown, defaulting to 1000 [ 260.154041][ T6896] lo speed is unknown, defaulting to 1000 [ 260.161463][ T6896] lo speed is unknown, defaulting to 1000 [ 260.186499][ T6896] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 260.296746][ T6896] lo speed is unknown, defaulting to 1000 [ 260.303809][ T6896] lo speed is unknown, defaulting to 1000 [ 260.307167][ T6896] lo speed is unknown, defaulting to 1000 [ 260.311283][ T6896] lo speed is unknown, defaulting to 1000 [ 260.315552][ T6896] lo speed is unknown, defaulting to 1000 [ 260.398072][ T6882] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.508: Invalid inode table block 1 in block_group 0 [ 260.400425][ T6882] EXT4-fs (loop3): get root inode failed [ 260.401394][ T6882] EXT4-fs (loop3): mount failed [ 260.416999][ T6888] loop2: detected capacity change from 0 to 512 [ 260.775447][ T6902] tipc: Started in network mode [ 260.776243][ T6902] tipc: Node identity 4, cluster identity 4711 [ 260.777147][ T6902] tipc: Node number set to 4 [ 260.787943][ T6899] ubi0: attaching mtd0 [ 260.788992][ T6899] ubi0: scanning is finished [ 260.889509][ T6899] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 260.891189][ T6899] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 260.892199][ T6899] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 260.893190][ T6899] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 260.894249][ T6899] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 260.895322][ T6899] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 260.896505][ T6899] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1162280519 [ 260.897967][ T6899] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 261.430912][ T6908] ubi0: background thread "ubi_bgt0d" started, PID 6908 [ 261.681400][ T6915] loop4: detected capacity change from 0 to 64 [ 262.256384][ T6923] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 262.513573][ T6929] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 262.579314][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 262.580716][ T6925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.613663][ T6934] loop4: detected capacity change from 0 to 64 [ 266.711954][ T6988] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 271.367730][ T7011] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 273.833598][ T7047] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 275.278678][ T7062] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.737784][ T7088] loop3: detected capacity change from 0 to 512 [ 279.696611][ T7100] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.047378][ T7088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.171345][ T7117] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 284.485096][ T7136] loop4: detected capacity change from 0 to 512 [ 285.402481][ T7136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.674981][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 287.200617][ T7157] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 287.863277][ T7169] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.452027][ T7196] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 292.787533][ T7217] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 292.831866][ T7220] loop4: detected capacity change from 0 to 512 [ 292.894728][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.899646][ T7220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.908707][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.911841][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.915506][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.917821][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.919193][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.941766][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 293.083230][ T7223] lo speed is unknown, defaulting to 1000 [ 293.222752][ T7223] chnl_net:caif_netlink_parms(): no params data found [ 293.224417][ T7081] EXT4-fs (loop3): unmounting filesystem. [ 293.349857][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.459357][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.486782][ T7223] device bridge_slave_0 entered promiscuous mode [ 294.490273][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.505644][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.516351][ T7223] device bridge_slave_1 entered promiscuous mode [ 294.954792][ T7254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.959359][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 295.171197][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.173827][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.181782][ T7223] team0: Port device team_slave_0 added [ 295.184136][ T7223] team0: Port device team_slave_1 added [ 295.192744][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.193797][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.197783][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.201178][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.202245][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.207228][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.318622][ T7263] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.038192][ T7223] device hsr_slave_0 entered promiscuous mode [ 297.143545][ T4329] Bluetooth: hci5: command 0x041b tx timeout [ 297.563233][ T7223] device hsr_slave_1 entered promiscuous mode [ 297.626601][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.631170][ T7223] Cannot create hsr debugfs directory [ 298.819318][ T7298] loop4: detected capacity change from 0 to 512 [ 299.153887][ T7298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.448683][ T1614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.605105][ T4329] Bluetooth: hci5: command 0x040f tx timeout [ 299.607542][ T7296] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 299.680261][ T7308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.076571][ T1614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.163922][ T7312] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 300.442970][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 300.527362][ T1614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.328051][ T7322] loop4: detected capacity change from 0 to 512 [ 302.535131][ T4336] Bluetooth: hci5: command 0x0419 tx timeout [ 302.797138][ T7322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 303.807061][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 305.295727][ T1614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.325761][ T7223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.437351][ T7223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.991522][ T7356] loop4: detected capacity change from 0 to 512 [ 306.733527][ T7356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.896777][ T7223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.113440][ T7367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.596349][ T7223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.623232][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 308.200346][ T7384] loop4: detected capacity change from 0 to 512 [ 308.658234][ T7384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.902361][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.935361][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.936979][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.950742][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.576282][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.577939][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.579360][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.580397][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.581715][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.586800][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 310.672848][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.674564][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.678254][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.679401][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.681848][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.685801][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.697199][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.698206][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.708649][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.710672][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.712295][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.717486][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.719165][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.720662][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.723122][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.724593][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.146440][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.218703][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.097403][ T7446] xt_TPROXY: Can be used only with -p tcp or -p udp [ 313.121824][ T7445] loop4: detected capacity change from 0 to 512 [ 314.008880][ T7445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.320752][ T7454] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 314.814822][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 316.401248][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.402523][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.512432][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.435448][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 320.304210][ T7512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.187572][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.189257][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.491962][ T7538] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 322.494688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.498731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.500437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.501937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.666744][ T7223] device veth0_vlan entered promiscuous mode [ 322.691861][ T7223] device veth1_vlan entered promiscuous mode [ 323.472692][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.493791][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.495440][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.497833][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.500585][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.502098][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.503468][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.505293][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.516368][ T1614] IPVS: stopping master sync thread 5796 ... [ 323.531141][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.533769][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.542574][ T7223] device veth0_macvtap entered promiscuous mode [ 323.629469][ T7223] device veth1_macvtap entered promiscuous mode [ 324.455977][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.457650][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.479229][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.564176][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.574283][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.591342][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.592898][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.715915][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.717545][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.719210][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.722635][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.101307][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.103109][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.104706][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.112070][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.143738][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.148638][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.150211][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.152193][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.155131][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.156717][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.158149][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.159602][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.160982][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.162389][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.164539][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.196936][ T7223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.198283][ T7223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.199589][ T7223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.200889][ T7223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.215909][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.217536][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.677217][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 325.854612][ T7586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.151128][ T7544] lo speed is unknown, defaulting to 1000 [ 326.273746][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.276133][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.277724][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.330855][ T1614] bridge0: port 3(wlan1) entered disabled state [ 326.586539][ T1614] device wlan1 left promiscuous mode [ 326.587602][ T1614] bridge0: port 3(wlan1) entered disabled state [ 326.645308][ T5723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.646591][ T5723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.651091][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.926724][ T7605] netlink: 'syz.4.662': attribute type 21 has an invalid length. [ 327.183608][ T7627] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 327.743497][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 327.755348][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 327.766366][ T7639] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 328.304336][ T1614] device hsr_slave_0 left promiscuous mode [ 329.221980][ T7663] loop5: detected capacity change from 0 to 164 [ 330.015216][ T7664] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 330.452974][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 330.534534][ T1614] device hsr_slave_1 left promiscuous mode [ 331.955324][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.956758][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.959500][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.960729][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.963094][ T1614] device bridge_slave_1 left promiscuous mode [ 331.964125][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.206439][ T7679] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 332.219297][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.393604][ T7685] loop4: detected capacity change from 0 to 512 [ 332.436438][ T1614] device veth1_macvtap left promiscuous mode [ 332.443716][ T1614] device veth0_macvtap left promiscuous mode [ 332.456866][ T1614] device veth1_vlan left promiscuous mode [ 332.473811][ T1614] device veth0_vlan left promiscuous mode [ 332.475392][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 332.509726][ T7685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.113243][ T7700] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 334.227380][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 334.354432][ T7705] loop4: detected capacity change from 0 to 32768 [ 334.552914][ T7705] [ 334.553354][ T7705] ====================================================== [ 334.554515][ T7705] WARNING: possible circular locking dependency detected [ 334.555572][ T7705] syzkaller #0 Not tainted [ 334.556222][ T7705] ------------------------------------------------------ [ 334.557323][ T7705] syz.4.679/7705 is trying to acquire lock: [ 334.558179][ T7705] ffff0000c09208e0 (&type->i_mutex_dir_key#2){++++}-{3:3}, at: lookup_slow+0x4c/0x80 [ 334.559530][ T7705] [ 334.559530][ T7705] but task is already holding lock: [ 334.560563][ T7705] ffff0000f4a828e0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: device_list_add+0x7f4/0x1c84 [ 334.562111][ T7705] [ 334.562111][ T7705] which lock already depends on the new lock. [ 334.562111][ T7705] [ 334.563603][ T7705] [ 334.563603][ T7705] the existing dependency chain (in reverse order) is: [ 334.564901][ T7705] [ 334.564901][ T7705] -> #5 (&fs_devs->device_list_mutex){+.+.}-{3:3}: [ 334.566159][ T7705] __mutex_lock_common+0x190/0x1f60 [ 334.567017][ T7705] mutex_lock_nested+0x38/0x44 [ 334.567785][ T7705] btrfs_run_dev_stats+0xf8/0xe4c [ 334.568570][ T7705] commit_cowonly_roots+0x170/0x71c [ 334.569426][ T7705] btrfs_commit_transaction+0x1108/0x29fc [ 334.570396][ T7705] btrfs_sync_fs+0x530/0xa28 [ 334.571156][ T7705] sync_filesystem+0x1a0/0x218 [ 334.571949][ T7705] generic_shutdown_super+0x70/0x324 [ 334.572806][ T7705] kill_anon_super+0x4c/0x80 [ 334.573586][ T7705] btrfs_kill_super+0x40/0x58 [ 334.574344][ T7705] deactivate_locked_super+0xac/0x120 [ 334.575183][ T7705] deactivate_super+0xe4/0x104 [ 334.575957][ T7705] cleanup_mnt+0x390/0x418 [ 334.576680][ T7705] __cleanup_mnt+0x20/0x30 [ 334.577439][ T7705] task_work_run+0x1ec/0x278 [ 334.578180][ T7705] do_notify_resume+0x1fa0/0x2aa4 [ 334.579003][ T7705] el0_svc+0x98/0x128 [ 334.579630][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.580489][ T7705] el0t_64_sync+0x18c/0x190 [ 334.581268][ T7705] [ 334.581268][ T7705] -> #4 (&fs_info->reloc_mutex){+.+.}-{3:3}: [ 334.582414][ T7705] __mutex_lock_common+0x190/0x1f60 [ 334.583245][ T7705] mutex_lock_nested+0x38/0x44 [ 334.584043][ T7705] start_transaction+0x434/0x1050 [ 334.584904][ T7705] btrfs_start_transaction+0x34/0x44 [ 334.585697][ T7705] btrfs_create_common+0x148/0x240 [ 334.586486][ T7705] btrfs_create+0x104/0x128 [ 334.587204][ T7705] path_openat+0xe18/0x26bc [ 334.587934][ T7705] do_filp_open+0x194/0x384 [ 334.588693][ T7705] do_sys_openat2+0x134/0x3f4 [ 334.589410][ T7705] __arm64_sys_openat+0x118/0x14c [ 334.590177][ T7705] invoke_syscall+0x98/0x2b4 [ 334.590845][ T7705] el0_svc_common+0x138/0x258 [ 334.591555][ T7705] do_el0_svc+0x58/0x130 [ 334.592209][ T7705] el0_svc+0x58/0x128 [ 334.592821][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.593612][ T7705] el0t_64_sync+0x18c/0x190 [ 334.594309][ T7705] [ 334.594309][ T7705] -> #3 (btrfs_trans_num_extwriters){++++}-{0:0}: [ 334.595532][ T7705] join_transaction+0x180/0xb68 [ 334.596346][ T7705] start_transaction+0x858/0x1050 [ 334.597197][ T7705] btrfs_start_transaction+0x34/0x44 [ 334.597993][ T7705] btrfs_create_common+0x148/0x240 [ 334.598811][ T7705] btrfs_create+0x104/0x128 [ 334.599510][ T7705] path_openat+0xe18/0x26bc [ 334.600209][ T7705] do_filp_open+0x194/0x384 [ 334.600968][ T7705] do_sys_openat2+0x134/0x3f4 [ 334.601723][ T7705] __arm64_sys_openat+0x118/0x14c [ 334.602536][ T7705] invoke_syscall+0x98/0x2b4 [ 334.603280][ T7705] el0_svc_common+0x138/0x258 [ 334.604062][ T7705] do_el0_svc+0x58/0x130 [ 334.604796][ T7705] el0_svc+0x58/0x128 [ 334.605448][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.606162][ T7705] el0t_64_sync+0x18c/0x190 [ 334.606837][ T7705] [ 334.606837][ T7705] -> #2 (btrfs_trans_num_writers){++++}-{0:0}: [ 334.608071][ T7705] lock_release+0x308/0x908 [ 334.608772][ T7705] sb_end_intwrite+0x54/0x364 [ 334.609517][ T7705] __btrfs_end_transaction+0x1f4/0x5f0 [ 334.610363][ T7705] btrfs_end_transaction+0x24/0x34 [ 334.611138][ T7705] btrfs_dirty_inode+0x16c/0x1c0 [ 334.611922][ T7705] btrfs_update_time+0x170/0x18c [ 334.612727][ T7705] touch_atime+0x368/0x7dc [ 334.613456][ T7705] btrfs_file_mmap+0xb0/0x11c [ 334.614257][ T7705] mmap_file+0x6c/0xc8 [ 334.614940][ T7705] mmap_region+0xcec/0x1900 [ 334.615647][ T7705] do_mmap+0x9cc/0x1138 [ 334.616332][ T7705] vm_mmap_pgoff+0x190/0x294 [ 334.617044][ T7705] ksys_mmap_pgoff+0x3b8/0x5a0 [ 334.617816][ T7705] __arm64_sys_mmap+0xf8/0x110 [ 334.618616][ T7705] invoke_syscall+0x98/0x2b4 [ 334.619347][ T7705] el0_svc_common+0x138/0x258 [ 334.620154][ T7705] do_el0_svc+0x58/0x130 [ 334.620882][ T7705] el0_svc+0x58/0x128 [ 334.621616][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.622449][ T7705] el0t_64_sync+0x18c/0x190 [ 334.623166][ T7705] [ 334.623166][ T7705] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 334.624256][ T7705] __might_fault+0xc4/0x124 [ 334.624974][ T7705] filldir64+0x2cc/0x8fc [ 334.625702][ T7705] dcache_readdir+0x140/0x62c [ 334.626486][ T7705] iterate_dir+0x1f0/0x4cc [ 334.627227][ T7705] __arm64_sys_getdents64+0x11c/0x320 [ 334.628125][ T7705] invoke_syscall+0x98/0x2b4 [ 334.628875][ T7705] el0_svc_common+0x138/0x258 [ 334.629617][ T7705] do_el0_svc+0x58/0x130 [ 334.630338][ T7705] el0_svc+0x58/0x128 [ 334.631043][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.631893][ T7705] el0t_64_sync+0x18c/0x190 [ 334.632668][ T7705] [ 334.632668][ T7705] -> #0 (&type->i_mutex_dir_key#2){++++}-{3:3}: [ 334.633877][ T7705] __lock_acquire+0x2880/0x6800 [ 334.634666][ T7705] lock_acquire+0x20c/0x63c [ 334.635385][ T7705] down_read+0x64/0x300 [ 334.636083][ T7705] lookup_slow+0x4c/0x80 [ 334.636749][ T7705] walk_component+0x270/0x364 [ 334.637520][ T7705] path_lookupat+0x13c/0x3d0 [ 334.638269][ T7705] filename_lookup+0x1c4/0x480 [ 334.639066][ T7705] kern_path+0x48/0x6c [ 334.639702][ T7705] device_list_add+0x129c/0x1c84 [ 334.640519][ T7705] btrfs_scan_one_device+0x368/0x57c [ 334.641371][ T7705] btrfs_mount_root+0x45c/0x7d0 [ 334.642201][ T7705] legacy_get_tree+0xd4/0x16c [ 334.642897][ T7705] vfs_get_tree+0x90/0x274 [ 334.643620][ T7705] vfs_kern_mount+0xdc/0x178 [ 334.644464][ T7705] btrfs_mount+0x2dc/0x974 [ 334.645163][ T7705] legacy_get_tree+0xd4/0x16c [ 334.645894][ T7705] vfs_get_tree+0x90/0x274 [ 334.646632][ T7705] do_new_mount+0x228/0x810 [ 334.647375][ T7705] path_mount+0x5bc/0xe80 [ 334.648157][ T7705] __arm64_sys_mount+0x49c/0x59c [ 334.649003][ T7705] invoke_syscall+0x98/0x2b4 [ 334.649801][ T7705] el0_svc_common+0x138/0x258 [ 334.650554][ T7705] do_el0_svc+0x58/0x130 [ 334.651249][ T7705] el0_svc+0x58/0x128 [ 334.651923][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.652686][ T7705] el0t_64_sync+0x18c/0x190 [ 334.653422][ T7705] [ 334.653422][ T7705] other info that might help us debug this: [ 334.653422][ T7705] [ 334.654843][ T7705] Chain exists of: [ 334.654843][ T7705] &type->i_mutex_dir_key#2 --> &fs_info->reloc_mutex --> &fs_devs->device_list_mutex [ 334.654843][ T7705] [ 334.657013][ T7705] Possible unsafe locking scenario: [ 334.657013][ T7705] [ 334.658099][ T7705] CPU0 CPU1 [ 334.658867][ T7705] ---- ---- [ 334.659626][ T7705] lock(&fs_devs->device_list_mutex); [ 334.660457][ T7705] lock(&fs_info->reloc_mutex); [ 334.661532][ T7705] lock(&fs_devs->device_list_mutex); [ 334.662704][ T7705] lock(&type->i_mutex_dir_key#2); [ 334.663452][ T7705] [ 334.663452][ T7705] *** DEADLOCK *** [ 334.663452][ T7705] [ 334.664617][ T7705] 2 locks held by syz.4.679/7705: [ 334.665350][ T7705] #0: ffff800015923aa8 (uuid_mutex){+.+.}-{3:3}, at: btrfs_mount_root+0x1fc/0x7d0 [ 334.666760][ T7705] #1: ffff0000f4a828e0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: device_list_add+0x7f4/0x1c84 [ 334.668369][ T7705] [ 334.668369][ T7705] stack backtrace: [ 334.669237][ T7705] CPU: 1 PID: 7705 Comm: syz.4.679 Not tainted syzkaller #0 [ 334.670316][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 334.671717][ T7705] Call trace: [ 334.672175][ T7705] dump_backtrace+0x1c0/0x1ec [ 334.672859][ T7705] show_stack+0x2c/0x3c [ 334.673456][ T7705] __dump_stack+0x30/0x40 [ 334.674108][ T7705] dump_stack_lvl+0xf4/0x15c [ 334.674780][ T7705] dump_stack+0x1c/0x5c [ 334.675442][ T7705] print_circular_bug+0x148/0x1b0 [ 334.676173][ T7705] check_noncircular+0x264/0x2f8 [ 334.676904][ T7705] __lock_acquire+0x2880/0x6800 [ 334.677618][ T7705] lock_acquire+0x20c/0x63c [ 334.678230][ T7705] down_read+0x64/0x300 [ 334.678764][ T7705] lookup_slow+0x4c/0x80 [ 334.679379][ T7705] walk_component+0x270/0x364 [ 334.680093][ T7705] path_lookupat+0x13c/0x3d0 [ 334.680749][ T7705] filename_lookup+0x1c4/0x480 [ 334.681447][ T7705] kern_path+0x48/0x6c [ 334.682053][ T7705] device_list_add+0x129c/0x1c84 [ 334.682812][ T7705] btrfs_scan_one_device+0x368/0x57c [ 334.683614][ T7705] btrfs_mount_root+0x45c/0x7d0 [ 334.684315][ T7705] legacy_get_tree+0xd4/0x16c [ 334.685016][ T7705] vfs_get_tree+0x90/0x274 [ 334.685701][ T7705] vfs_kern_mount+0xdc/0x178 [ 334.686418][ T7705] btrfs_mount+0x2dc/0x974 [ 334.687069][ T7705] legacy_get_tree+0xd4/0x16c [ 334.687743][ T7705] vfs_get_tree+0x90/0x274 [ 334.688422][ T7705] do_new_mount+0x228/0x810 [ 334.689102][ T7705] path_mount+0x5bc/0xe80 [ 334.689770][ T7705] __arm64_sys_mount+0x49c/0x59c [ 334.690459][ T7705] invoke_syscall+0x98/0x2b4 [ 334.691139][ T7705] el0_svc_common+0x138/0x258 [ 334.691799][ T7705] do_el0_svc+0x58/0x130 [ 334.692428][ T7705] el0_svc+0x58/0x128 [ 334.693008][ T7705] el0t_64_sync_handler+0x84/0xf0 [ 334.693732][ T7705] el0t_64_sync+0x18c/0x190 [ 334.706898][ T7705] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.708430][ T7705] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 334.709680][ T7705] BTRFS info (device loop4): turning off barriers [ 334.710614][ T7705] BTRFS info (device loop4): setting nodatasum [ 334.711547][ T7705] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 334.712963][ T7705] BTRFS error (device loop4): open_ctree failed: -22 [ 336.756004][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 336.915504][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 337.095615][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.315460][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.806831][ T1614] bond0 (unregistering): Released all slaves [ 339.099710][ T7660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 339.219305][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.221299][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.222393][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.245377][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.246470][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.249445][ T7544] device bridge_slave_0 entered promiscuous mode [ 339.251302][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.252406][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.253799][ T7544] device bridge_slave_1 entered promiscuous mode [ 339.261067][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.263296][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.271324][ T7544] team0: Port device team_slave_0 added [ 339.274598][ T7544] team0: Port device team_slave_1 added [ 339.280575][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.281659][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.287906][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.297039][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.298048][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.301875][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.347725][ T7544] device hsr_slave_0 entered promiscuous mode [ 339.375331][ T7544] device hsr_slave_1 entered promiscuous mode [ 339.406943][ T7544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.408277][ T7544] Cannot create hsr debugfs directory [ 339.433765][ T7544] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.493039][ T7544] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.536428][ T7544] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.576563][ T7544] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.644544][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.649554][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 339.651558][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.652879][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.668189][ T7544] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.676213][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.677763][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.679248][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.680279][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.681832][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.683335][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.684705][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.685870][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.695888][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.698209][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.699860][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.701343][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.702756][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.705335][ T7544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.709432][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.756327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.757551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.761156][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.863829][ T7544] device veth0_vlan entered promiscuous mode [ 339.865617][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.867275][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.868825][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.870126][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.873237][ T7544] device veth1_vlan entered promiscuous mode [ 339.880556][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.882100][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.883563][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.886817][ T7544] device veth0_macvtap entered promiscuous mode [ 339.889081][ T7544] device veth1_macvtap entered promiscuous mode [ 339.892942][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.894381][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.897179][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.898663][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.900319][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.902017][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.903376][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.904887][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.906650][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.908105][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.910174][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.196699][ T1614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.198950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.200960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.203580][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.204934][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.206423][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.207925][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.209275][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.210843][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.212234][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.213731][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.215159][ T7544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.216618][ T7544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.218709][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.221322][ T7544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.222610][ T7544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.224011][ T7544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.225468][ T7544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.228541][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.241284][ T7544] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 340.248865][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.250037][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.251156][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.252690][ T7544] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 340.296016][ T1614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.301620][ T4622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.302887][ T4622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.304058][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.376148][ T1614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.456136][ T1614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.645450][ T1614] tipc: Left network mode [ 342.673958][ T1614] device hsr_slave_0 left promiscuous mode [ 342.717093][ T1614] device hsr_slave_1 left promiscuous mode [ 342.805079][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.806407][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.807832][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.808972][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.810221][ T1614] device bridge_slave_1 left promiscuous mode [ 342.811131][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.855421][ T1614] device bridge_slave_0 left promiscuous mode [ 342.856387][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.975142][ T1614] device veth1_macvtap left promiscuous mode [ 342.976153][ T1614] device veth0_macvtap left promiscuous mode [ 342.977086][ T1614] device veth1_vlan left promiscuous mode [ 342.977917][ T1614] device veth0_vlan left promiscuous mode [ 343.006455][ T1614] bond2 (unregistering): Released all slaves [ 343.009670][ T1614] bond1 (unregistering): Released all slaves