last executing test programs: 22.102079187s ago: executing program 3 (id=497): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x110a99e, 0x10}) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 21.933140522s ago: executing program 3 (id=498): syz_open_dev$sndctrl(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x80049370, 0x1000000000000) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.104990309s ago: executing program 3 (id=499): chdir(0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_usbip_server_init(0x5) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94", 0x7b) socket(0x840000000002, 0x3, 0x100) 14.512091255s ago: executing program 3 (id=517): openat$tun(0xffffffffffffff9c, 0x0, 0x141341, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019080)={0x8, 0x2008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 12.196266537s ago: executing program 4 (id=521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x110a99e, 0x10}) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 12.187689038s ago: executing program 0 (id=523): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) 11.754942492s ago: executing program 3 (id=524): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet(0x2, 0x2, 0x1) 10.883853819s ago: executing program 0 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$video(0x0, 0xc, 0x200) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fc00100}]}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 9.662654157s ago: executing program 1 (id=526): chdir(0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_usbip_server_init(0x5) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94", 0x7b) socket(0x840000000002, 0x3, 0x100) 9.616999759s ago: executing program 4 (id=527): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.587981331s ago: executing program 4 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x1, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0xfffc, 0x1, 0x0}) 8.010006019s ago: executing program 1 (id=530): sync() sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 7.499975825s ago: executing program 0 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ftruncate(0xffffffffffffffff, 0x6000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0xa4000160) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r4, &(0x7f0000001400)=""/4046, 0xffd8) 7.228909444s ago: executing program 2 (id=532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x29, 0x10, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@nouid32}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7.168633666s ago: executing program 1 (id=533): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x4e24, 0x3, @mcast2, 0x200}}, {{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xc}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004811}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 6.886014214s ago: executing program 4 (id=534): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6.165497317s ago: executing program 0 (id=535): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) r5 = dup(r4) write$tun(r5, 0x0, 0xa4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000004a00010045000000000000000a000058df"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6.123982088s ago: executing program 1 (id=536): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 5.989015363s ago: executing program 2 (id=537): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x110a99e, 0x10}) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 5.213809617s ago: executing program 0 (id=538): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x40}}, 0x0) 5.09865038s ago: executing program 1 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) socket$phonet(0x23, 0x2, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 4.552250588s ago: executing program 2 (id=540): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x81000001, 0x1a1943) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000005008003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.309357056s ago: executing program 0 (id=541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000240)={{0x0, 0x2, 0xdbf2, 0x7, 0x7}, [{0x100000000, 0x7, 0x1, 0x2}, {0xb55, 0x7fffffff, 0x7, 0x2}, {0x2, 0x8001, 0x5, 0x7}, {0x280d, 0x80000001, 0x0, 0xf}, {0x401, 0x6, 0x2, 0x3}, {0xcd8, 0x101, 0x8, 0x5}, {0x100000001, 0xe784, 0x49, 0x22}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCGETA(r4, 0x540e, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto(r0, &(0x7f0000000200)='[', 0x1, 0x4040080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.336003107s ago: executing program 2 (id=542): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000019140)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000190c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019200)=ANY=[@ANYBLOB="240000001900010000000000001000001c14a4"], 0x24}}, 0x0) 2.166027492s ago: executing program 4 (id=543): mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.354723708s ago: executing program 2 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) 881.777272ms ago: executing program 3 (id=545): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000001280)="$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") r0 = openat$null(0xffffffffffffff9c, 0x0, 0x240a80, 0x0) preadv(r0, &(0x7f00000061c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 881.062672ms ago: executing program 1 (id=555): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet(0x2, 0x2, 0x1) 25.6449ms ago: executing program 4 (id=546): socket(0x27, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 2 (id=547): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$evdev(0x0, 0x1, 0x80) fcntl$setstatus(r5, 0x4, 0x2c00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 64.044720][ T4263] cgroup: Unknown subsys name 'net' [ 64.148423][ T4263] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.485098][ T4263] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.765749][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.765980][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.774311][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.781245][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.788864][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.796188][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.803046][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.809651][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.816461][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.823091][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.829876][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.837504][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.851246][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.851471][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.859086][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.866784][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.873734][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.880494][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.886812][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.894555][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.900999][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.907673][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.914798][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.922110][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.928464][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.935033][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.948992][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.950408][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.956915][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.970721][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.333096][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 67.367021][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 67.462675][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 67.493542][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 67.528368][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 67.543549][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.551188][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.559226][ T4287] device bridge_slave_0 entered promiscuous mode [ 67.573050][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.580132][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.588098][ T4275] device bridge_slave_0 entered promiscuous mode [ 67.611244][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.618445][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.629177][ T4287] device bridge_slave_1 entered promiscuous mode [ 67.645812][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.652969][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.660937][ T4275] device bridge_slave_1 entered promiscuous mode [ 67.730752][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.737979][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.747868][ T4277] device bridge_slave_0 entered promiscuous mode [ 67.757143][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.775411][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.784901][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.793423][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.801097][ T4277] device bridge_slave_1 entered promiscuous mode [ 67.811263][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.826869][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.878017][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.885277][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.893607][ T4276] device bridge_slave_0 entered promiscuous mode [ 67.901368][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.908633][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.916358][ T4278] device bridge_slave_0 entered promiscuous mode [ 67.940659][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.954905][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.962132][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.970309][ T4276] device bridge_slave_1 entered promiscuous mode [ 67.978557][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.986018][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.994080][ T4278] device bridge_slave_1 entered promiscuous mode [ 68.003565][ T4275] team0: Port device team_slave_0 added [ 68.017200][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.032297][ T4287] team0: Port device team_slave_0 added [ 68.053459][ T4275] team0: Port device team_slave_1 added [ 68.060744][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.078231][ T4287] team0: Port device team_slave_1 added [ 68.105023][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.127406][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.140018][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.157641][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.164806][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.191030][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.205103][ T4277] team0: Port device team_slave_0 added [ 68.219342][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.226349][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.252283][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.270835][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.278198][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.304563][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.320988][ T4277] team0: Port device team_slave_1 added [ 68.346703][ T4278] team0: Port device team_slave_0 added [ 68.353114][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.360103][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.386711][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.406303][ T4276] team0: Port device team_slave_0 added [ 68.414683][ T4278] team0: Port device team_slave_1 added [ 68.438282][ T4276] team0: Port device team_slave_1 added [ 68.464407][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.471384][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.497970][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.526738][ T4287] device hsr_slave_0 entered promiscuous mode [ 68.534452][ T4287] device hsr_slave_1 entered promiscuous mode [ 68.542127][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.549076][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.575413][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.587119][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.596760][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.622973][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.634506][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.641460][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.667941][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.698220][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.705370][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.731452][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.746440][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.753516][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.779550][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.793748][ T4275] device hsr_slave_0 entered promiscuous mode [ 68.803274][ T4275] device hsr_slave_1 entered promiscuous mode [ 68.809758][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.818040][ T4275] Cannot create hsr debugfs directory [ 68.920221][ T4276] device hsr_slave_0 entered promiscuous mode [ 68.927063][ T4276] device hsr_slave_1 entered promiscuous mode [ 68.933818][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.941461][ T4276] Cannot create hsr debugfs directory [ 68.954572][ T4277] device hsr_slave_0 entered promiscuous mode [ 68.962141][ T4277] device hsr_slave_1 entered promiscuous mode [ 68.969165][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.976787][ T4277] Cannot create hsr debugfs directory [ 68.986200][ T4278] device hsr_slave_0 entered promiscuous mode [ 68.992888][ T4278] device hsr_slave_1 entered promiscuous mode [ 68.999311][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.006914][ T4278] Cannot create hsr debugfs directory [ 69.042362][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 69.042372][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 69.042542][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 69.048602][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 69.054871][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 69.338351][ T4287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.354313][ T4287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.368181][ T4287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.385938][ T4287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.408418][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.417709][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.427801][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.438909][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.490311][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.514304][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.550115][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.583024][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.618654][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.647722][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.668587][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.695754][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.704974][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.747148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.757374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.770915][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.783881][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.795558][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.805102][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.816668][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.849748][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.863018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.875714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.885010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.892306][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.900821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.909932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.918636][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.925774][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.933843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.942608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.951191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.959959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.967831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.000561][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.012536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.021484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.037330][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.055782][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.065940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.074516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.083429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.117520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.127635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.137801][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.144954][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.154092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.163299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.172063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.180640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.189551][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.196729][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.205740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.214236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.228239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.236351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.248051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.257547][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.264668][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.273922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.283080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.291620][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.299091][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.311148][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.323200][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.349438][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.359380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.373077][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.392848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.401192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.413388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.422610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.432438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.464477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.498912][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.507743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.518387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.527781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.536648][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.545608][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.554494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.562941][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.576199][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.601101][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.631725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.653664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.662744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.673273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.683337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.692256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.701152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.709883][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.717099][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.725011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.734715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.743848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.752915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.761737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.770035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.789075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.802977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.825292][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.844895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.863051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.877843][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.885040][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.894243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.906763][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.919202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.942625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.975584][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.991322][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.001246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.011809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.023408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.033339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.042446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.051011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.061078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.070011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.085249][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.098530][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.129061][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 71.135467][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 71.142234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.146652][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 71.150175][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 71.156336][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 71.164673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.208220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.208264][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.228305][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.232700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.258332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.267649][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.274840][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.283678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.293373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.315046][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.322220][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.332097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.357587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.367636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.420336][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.435903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.446193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.470353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.506537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.516596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.526073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.536643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.548182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.557257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.572901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.580433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.592794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.607583][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.639178][ T4287] device veth0_vlan entered promiscuous mode [ 71.648310][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.657368][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.666916][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.674661][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.682791][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.690979][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.699465][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.707240][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.728212][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.745262][ T4287] device veth1_vlan entered promiscuous mode [ 71.781724][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.789886][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.802741][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.810244][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.819474][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.832836][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.879858][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.889149][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.905197][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.919076][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.931070][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.959280][ T4275] device veth0_vlan entered promiscuous mode [ 71.971053][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.984101][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.017359][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.032696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.052504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.070829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.085841][ T4275] device veth1_vlan entered promiscuous mode [ 72.098440][ T4276] device veth0_vlan entered promiscuous mode [ 72.110704][ T4287] device veth0_macvtap entered promiscuous mode [ 72.120841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.134921][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.147535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.158321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.194608][ T4287] device veth1_macvtap entered promiscuous mode [ 72.210358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.222384][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.230483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.245641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.265670][ T4275] device veth0_macvtap entered promiscuous mode [ 72.280346][ T4276] device veth1_vlan entered promiscuous mode [ 72.296829][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.304058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.313178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.322054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.330596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.346270][ T4275] device veth1_macvtap entered promiscuous mode [ 72.369691][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.398155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.409050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.418434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.432575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.459466][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.505902][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.516877][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.530852][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.539851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.549053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.559780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.569686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.578755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.588042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.596857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.605650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.616337][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.626120][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.637184][ T4287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.648665][ T4287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657968][ T4287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.667653][ T4287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.686072][ T4276] device veth0_macvtap entered promiscuous mode [ 72.700129][ T4277] device veth0_vlan entered promiscuous mode [ 72.707646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.716533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.726309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.734596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.764251][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.775935][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.788099][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.797503][ T4276] device veth1_macvtap entered promiscuous mode [ 72.815549][ T4277] device veth1_vlan entered promiscuous mode [ 72.824773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.833490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.842338][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.859349][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868198][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.876993][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.886547][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.947833][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.964451][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.975374][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.994082][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.005099][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.015310][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.025997][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.038064][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.046461][ T4278] device veth0_vlan entered promiscuous mode [ 73.071398][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.080462][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.089689][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.099402][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.116634][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.127311][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.141851][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.153713][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.165031][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.177937][ T4278] device veth1_vlan entered promiscuous mode [ 73.184818][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.194732][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.201802][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 73.204585][ T4277] device veth0_macvtap entered promiscuous mode [ 73.208016][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 73.214359][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 73.220761][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 73.226761][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 73.241724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.250822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.260023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.268570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.277488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.286868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.294834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.324774][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.335912][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.345081][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.354679][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.387277][ T4277] device veth1_macvtap entered promiscuous mode [ 73.426857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.436904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.445548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.454546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.467958][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.476829][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.482999][ T4278] device veth0_macvtap entered promiscuous mode [ 73.512813][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.520686][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.548810][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.558732][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.567207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.577401][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.589201][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.599715][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.611233][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.621308][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.632849][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643864][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.653705][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.664763][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.674775][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.694095][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.703988][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.714466][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.726485][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.743342][ T4278] device veth1_macvtap entered promiscuous mode [ 73.770566][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.781022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.790585][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.800377][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.809223][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.820160][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.829770][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.839142][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.848944][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.896599][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.939458][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.956153][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.980207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.003321][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.015905][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.026718][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.039030][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.051084][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.062027][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.072140][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.083704][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.097943][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.108465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.127236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.530567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.586847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.786430][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.789664][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.811105][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.823049][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.836973][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.849296][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.890796][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.906767][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.918522][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.929091][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.039506][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.085221][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.094953][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.105041][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.117891][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.153242][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.905189][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 75.911934][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 75.918749][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 75.926561][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 75.993046][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 76.466017][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.474814][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.521801][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.545874][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.700667][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.767418][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.879670][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.095628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.061534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 78.081532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 78.091536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 78.101537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 78.111529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 78.320697][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.341973][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.379536][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.402365][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.507504][ T4394] loop2: detected capacity change from 0 to 16 [ 78.595807][ T4394] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.628765][ T4394] syz.2.8: attempt to access beyond end of device [ 78.628765][ T4394] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 78.647331][ T4394] syz.2.8: attempt to access beyond end of device [ 78.647331][ T4394] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 78.658364][ T4394] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 78.685367][ T27] audit: type=1800 audit(1781245095.024:2): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 78.931194][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.931255][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.935098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.268298][ T4394] syz.2.8 (4394) used greatest stack depth: 19448 bytes left [ 79.639029][ T4407] loop2: detected capacity change from 0 to 40427 [ 79.730179][ T4407] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 79.961170][ T4407] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 79.961538][ T4407] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 80.409438][ T4415] xt_connbytes: Forcing CT accounting to be enabled [ 80.409567][ T4415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.536451][ T4387] tty tty22: ldisc open failed (-12), clearing slot 21 [ 81.890083][ T4430] loop0: detected capacity change from 0 to 512 [ 82.153340][ T4432] syz.4.16 sent an empty control message without MSG_MORE. [ 82.230673][ T4430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.418860][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.428453][ T4430] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.287522][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 84.471433][ T4464] Zero length message leads to an empty skb [ 84.732646][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.024934][ T4460] loop3: detected capacity change from 0 to 1024 [ 85.073076][ T4460] ======================================================= [ 85.073076][ T4460] WARNING: The mand mount option has been deprecated and [ 85.073076][ T4460] and is ignored by this kernel. Remove the mand [ 85.073076][ T4460] option from the mount to silence this warning. [ 85.073076][ T4460] ======================================================= [ 85.190949][ T4460] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.421633][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 85.436992][ T4321] usb 5-1: config 0 has no interfaces? [ 85.454095][ T4460] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 85.454095][ T4460] [ 86.277155][ T4321] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 86.334136][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.382897][ T4321] usb 5-1: Product: syz [ 86.413303][ T4321] usb 5-1: Manufacturer: syz [ 86.448415][ T4321] usb 5-1: SerialNumber: syz [ 86.500723][ T4321] usb 5-1: config 0 descriptor?? [ 86.552780][ T4479] Bluetooth: MGMT ver 1.22 [ 86.564088][ T14] cfg80211: failed to load regulatory.db [ 87.432279][ T14] usb 5-1: USB disconnect, device number 2 [ 88.494413][ T4499] loop1: detected capacity change from 0 to 1024 [ 88.533340][ T4499] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 88.542819][ T4499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.556047][ T4499] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 88.801546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.811533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.831549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.841534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.091572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 92.594553][ T4521] sctp: failed to load transform for md5: -2 [ 92.780301][ T4528] loop4: detected capacity change from 0 to 2048 [ 92.805277][ T4528] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.817444][ T4528] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 92.835096][ T4528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.213814][ T4585] loop4: detected capacity change from 0 to 2048 [ 99.449871][ T4590] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 99.463990][ T4590] Error parsing options; rc = [-22] [ 100.897618][ T4585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.434581][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 102.440376][ T4614] loop1: detected capacity change from 0 to 512 [ 102.488295][ T4614] ext2: Unknown parameter 'noacl' [ 109.161629][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.979206][ T4664] loop2: detected capacity change from 0 to 7 [ 109.994018][ T4389] Dev loop2: unable to read RDB block 7 [ 109.999993][ T4389] loop2: unable to read partition table [ 110.011687][ T4389] loop2: partition table beyond EOD, truncated [ 110.427666][ T4675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.761597][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 110.778224][ T4664] Dev loop2: unable to read RDB block 7 [ 110.793265][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.841649][ T4664] loop2: unable to read partition table [ 110.847538][ T4664] loop2: partition table beyond EOD, truncated [ 110.864266][ T4664] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.902763][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.914253][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.964508][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.988065][ T14] usb 3-1: Product: syz [ 111.009961][ T4680] device syzkaller0 entered promiscuous mode [ 111.014444][ T14] usb 3-1: Manufacturer: syz [ 112.456951][ T14] usb 3-1: SerialNumber: syz [ 112.541928][ T14] usb 3-1: can't set config #1, error -71 [ 112.566971][ T14] usb 3-1: USB disconnect, device number 2 [ 114.786731][ T4710] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.893456][ T4713] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 117.369641][ T4713] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.782253][ T4727] loop0: detected capacity change from 0 to 512 [ 117.789307][ T4727] EXT4-fs: Ignoring removed oldalloc option [ 117.795333][ T4727] EXT4-fs: Ignoring removed bh option [ 117.960815][ T4727] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 118.048675][ T4727] EXT4-fs (loop0): 1 truncate cleaned up [ 118.054434][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.298207][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 119.321776][ T4355] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.330308][ T4741] loop0: detected capacity change from 0 to 512 [ 119.430907][ T4741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.487382][ T4741] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.570312][ T4741] EXT4-fs (loop0): 1 truncate cleaned up [ 119.576604][ T4741] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.604311][ T4355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.844225][ T4355] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.559782][ T4749] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 121.120975][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.131575][ T4355] usb 2-1: config 0 descriptor?? [ 121.151920][ T4355] pwc: Askey VC010 type 2 USB webcam detected. [ 121.159738][ T4749] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.171269][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 121.228176][ T4752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.331411][ T4760] loop3: detected capacity change from 0 to 256 [ 121.399314][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 121.526359][ T4757] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.555097][ T4757] FAT-fs (loop3): Filesystem has been set read-only [ 121.572699][ T4757] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.582401][ T4355] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.600641][ T4355] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.611064][ T4355] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.632997][ T4355] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.638872][ T4757] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.648868][ T4355] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.657028][ T4770] syz.4.93 uses obsolete (PF_INET,SOCK_PACKET) [ 122.401015][ T4355] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.450621][ T4355] pwc: recv_control_msg error -32 req 02 val 2000 [ 122.513958][ T4355] pwc: recv_control_msg error -32 req 02 val 2100 [ 122.538888][ T4355] pwc: recv_control_msg error -32 req 04 val 1500 [ 122.722439][ T4355] pwc: recv_control_msg error -32 req 02 val 2500 [ 122.761930][ T4355] pwc: recv_control_msg error -32 req 02 val 2400 [ 123.413957][ T4355] pwc: recv_control_msg error -32 req 02 val 2900 [ 123.481956][ T4355] pwc: recv_control_msg error -32 req 02 val 2800 [ 124.375186][ T4355] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.395422][ T4355] pwc: Registered as video103. [ 124.403060][ T4355] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 124.420885][ T4355] usb 2-1: USB disconnect, device number 2 [ 127.905661][ T4817] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 127.981265][ T4820] process 'syz.3.106' launched '/dev/fd/5' with NULL argv: empty string added [ 130.039311][ T4838] loop1: detected capacity change from 0 to 8 [ 130.536354][ T4838] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.545309][ T4838] SQUASHFS error: Failed to read block 0x9b: -5 [ 130.554495][ T4838] SQUASHFS error: Unable to read metadata cache entry [99] [ 130.562046][ T4838] SQUASHFS error: Unable to read inode 0x127 [ 132.525211][ T4863] loop1: detected capacity change from 0 to 32768 [ 132.654913][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661260][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.894131][ T4355] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.259760][ T4872] jfs_strtoUCS: char2uni returned -22. [ 133.265526][ T4872] charset = iso8859-3, char = 0xbe [ 133.282599][ T4355] usb 3-1: Using ep0 maxpacket: 8 [ 133.290843][ T4355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.337631][ T4355] usb 3-1: config 0 has no interfaces? [ 133.444243][ T4355] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 133.457872][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.466183][ T4355] usb 3-1: Product: syz [ 133.470444][ T4355] usb 3-1: Manufacturer: syz [ 133.478015][ T4355] usb 3-1: SerialNumber: syz [ 133.503040][ T4355] usb 3-1: config 0 descriptor?? [ 133.649518][ T4875] loop4: detected capacity change from 0 to 32768 [ 133.767514][ T4881] loop0: detected capacity change from 0 to 128 [ 135.055144][ T4355] usb 3-1: USB disconnect, device number 3 [ 135.068371][ T4881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.077386][ T4875] XFS (loop4): Mounting V5 Filesystem [ 135.144081][ T4875] XFS (loop4): Ending clean mount [ 135.159551][ T4875] XFS (loop4): Quotacheck needed: Please wait. [ 135.174227][ T4881] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.239198][ T4875] XFS (loop4): Quotacheck: Done. [ 136.720491][ T4278] XFS (loop4): Unmounting Filesystem [ 136.967545][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 141.995186][ T4938] loop1: detected capacity change from 0 to 256 [ 142.087907][ T4938] FAT-fs (loop1): Directory bread(block 64) failed [ 142.209807][ T4938] FAT-fs (loop1): Directory bread(block 65) failed [ 142.346735][ T4938] FAT-fs (loop1): Directory bread(block 66) failed [ 142.417530][ T4938] FAT-fs (loop1): Directory bread(block 67) failed [ 142.461649][ T4938] FAT-fs (loop1): Directory bread(block 68) failed [ 142.498888][ T4938] FAT-fs (loop1): Directory bread(block 69) failed [ 142.551854][ T4938] FAT-fs (loop1): Directory bread(block 70) failed [ 142.558445][ T4938] FAT-fs (loop1): Directory bread(block 71) failed [ 142.850455][ T4938] FAT-fs (loop1): Directory bread(block 72) failed [ 143.215392][ T4938] FAT-fs (loop1): Directory bread(block 73) failed [ 143.280152][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 144.742061][ T4957] loop0: detected capacity change from 0 to 512 [ 146.545745][ T4972] loop2: detected capacity change from 0 to 1024 [ 146.651341][ T4972] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 146.737490][ T4974] loop3: detected capacity change from 0 to 8 [ 146.753826][ T4970] tc action pedit offset must be on 32 bit boundaries [ 146.789657][ T4972] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 146.863860][ T4974] SQUASHFS error: xz decompression failed, data probably corrupt [ 146.871952][ T4974] SQUASHFS error: Failed to read block 0x108: -5 [ 146.878466][ T4974] SQUASHFS error: Unable to read metadata cache entry [106] [ 146.885924][ T4974] SQUASHFS error: Unable to read inode 0x11f [ 146.987897][ T4972] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.141: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 147.299370][ T4972] EXT4-fs (loop2): no journal found [ 147.518905][ T4972] EXT4-fs (loop2): can't get journal size [ 148.722963][ T4972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.630827][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 150.811779][ T4999] loop1: detected capacity change from 0 to 256 [ 151.930145][ T4999] FAT-fs (loop1): Directory bread(block 64) failed [ 151.936811][ T4999] FAT-fs (loop1): Directory bread(block 65) failed [ 151.943728][ T4999] FAT-fs (loop1): Directory bread(block 66) failed [ 151.950245][ T4999] FAT-fs (loop1): Directory bread(block 67) failed [ 151.957170][ T4999] FAT-fs (loop1): Directory bread(block 68) failed [ 151.963708][ T4999] FAT-fs (loop1): Directory bread(block 69) failed [ 151.970255][ T4999] FAT-fs (loop1): Directory bread(block 70) failed [ 151.976812][ T4999] FAT-fs (loop1): Directory bread(block 71) failed [ 151.983391][ T4999] FAT-fs (loop1): Directory bread(block 72) failed [ 151.989881][ T4999] FAT-fs (loop1): Directory bread(block 73) failed [ 152.682059][ T5005] loop2: detected capacity change from 0 to 512 [ 152.756206][ T5005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.944921][ T5005] EXT4-fs (loop2): 1 truncate cleaned up [ 152.950717][ T5005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.093821][ T5014] MPTCP: addr_signal error, rm_addr=4 [ 154.127766][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 159.442796][ T5065] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 159.820891][ T5059] loop0: detected capacity change from 0 to 4096 [ 162.773699][ T5096] loop3: detected capacity change from 0 to 256 [ 162.801354][ T5096] FAT-fs (loop3): Unrecognized mount option "sec" or missing value [ 163.951527][ C0] sched: RT throttling activated [ 164.102389][ T5104] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 168.980071][ T27] audit: type=1800 audit(1781245185.344:3): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.174" name="bus" dev="ramfs" ino=36277 res=0 errno=0 [ 169.239676][ T5131] loop2: detected capacity change from 0 to 512 [ 169.295408][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.365425][ T5131] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 169.433998][ T5131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 169.449390][ T5131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 169.457232][ T5131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.178: bg 0: block 361: padding at end of block bitmap is not set [ 169.525443][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 169.541621][ T5131] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 169.589148][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 169.596289][ T5131] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.178: attempt to clear invalid blocks 33619980 len 1 [ 169.620480][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 169.873996][ T5139] loop0: detected capacity change from 0 to 32768 [ 169.930753][ T5139] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.181 (5139) [ 170.007662][ T5131] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.178: invalid indirect mapped block 1811939328 (level 0) [ 170.042568][ T5139] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 170.053208][ T5139] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 170.062338][ T5139] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 170.072164][ T5139] BTRFS info (device loop0): use zstd compression, level 3 [ 170.080001][ T5139] BTRFS info (device loop0): force clearing of disk cache [ 170.081830][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 170.087316][ T5139] BTRFS info (device loop0): enabling disk space caching [ 170.100786][ T5139] BTRFS info (device loop0): disk space caching is enabled [ 170.121105][ T5131] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.178: invalid indirect mapped block 2185560079 (level 1) [ 170.294803][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 170.323968][ T5131] EXT4-fs (loop2): 1 truncate cleaned up [ 170.329671][ T5131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.062790][ T5167] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.178: dx entry: limit 0 != root limit 125 [ 172.074841][ T5167] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.178: Corrupt directory, running e2fsck is recommended [ 172.282708][ T5139] BTRFS info (device loop0): enabling ssd optimizations [ 172.294076][ T5139] BTRFS info (device loop0): rebuilding free space tree [ 172.336576][ T5139] BTRFS info (device loop0): disabling free space tree [ 172.343644][ T5139] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.353738][ T5139] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.477532][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 174.372469][ T5187] device syzkaller0 entered promiscuous mode [ 174.456613][ T4277] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.814731][ T5179] mmap: syz.1.175 (5179) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.714730][ T27] audit: type=1800 audit(1781245197.084:4): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.191" name="bus" dev="ramfs" ino=35554 res=0 errno=0 [ 180.745288][ T5240] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 180.755052][ T5240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 180.764692][ T5240] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 181.002891][ T5246] loop1: detected capacity change from 0 to 512 [ 181.010174][ T5246] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.017610][ T27] audit: type=1800 audit(1781245197.114:5): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 182.370887][ T5246] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.480999][ T5246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 182.564387][ T5246] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.638700][ T5246] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.196: bg 0: block 361: padding at end of block bitmap is not set [ 182.778693][ T5251] loop4: detected capacity change from 0 to 128 [ 182.786096][ T5246] EXT4-fs (loop1): Remounting filesystem read-only [ 182.794055][ T5246] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 182.811628][ T5246] EXT4-fs (loop1): Remounting filesystem read-only [ 183.306649][ T5246] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.196: attempt to clear invalid blocks 33619980 len 1 [ 183.439526][ T5246] EXT4-fs (loop1): Remounting filesystem read-only [ 183.451091][ T5246] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.196: invalid indirect mapped block 1811939328 (level 0) [ 183.465840][ T5246] EXT4-fs (loop1): Remounting filesystem read-only [ 183.473054][ T5246] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.196: invalid indirect mapped block 2185560079 (level 1) [ 183.489440][ T5251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.567253][ T5251] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.577753][ T5246] EXT4-fs (loop1): Remounting filesystem read-only [ 183.586123][ T5246] EXT4-fs (loop1): 1 truncate cleaned up [ 183.610153][ T5246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.295629][ T4293] Bluetooth: hci2: Malformed Event: 0x02 [ 184.470222][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 184.499697][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 191.761649][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 191.761703][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 191.767788][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 191.773959][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 191.787686][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 194.972077][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.978415][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.893785][ T5374] random: crng reseeded on system resumption [ 198.604424][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 198.874535][ T5376] device syzkaller0 entered promiscuous mode [ 200.176881][ T5392] tipc: Started in network mode [ 200.179877][ T5397] loop0: detected capacity change from 0 to 128 [ 200.202913][ T5392] tipc: Node identity 829b37ac2988, cluster identity 4711 [ 200.208153][ T5397] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 200.210297][ T5392] tipc: Enabled bearer , priority 0 [ 200.843294][ T5397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.853391][ T5400] tipc: Resetting bearer [ 200.926536][ T5397] ext2 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.576464][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 202.259029][ T5391] tipc: Disabling bearer [ 202.473482][ T128] tipc: Node number set to 2870163372 [ 204.369825][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 205.825671][ T5430] loop3: detected capacity change from 0 to 512 [ 205.849197][ T5433] loop2: detected capacity change from 0 to 512 [ 206.649081][ T5430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.698956][ T5430] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.962526][ T5433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 206.989548][ T5433] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.369262][ T5445] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 208.311958][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 208.843438][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 209.056551][ T5454] loop1: detected capacity change from 0 to 32768 [ 209.277893][ T5463] loop0: detected capacity change from 0 to 256 [ 209.362326][ T5463] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.373423][ T5463] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 209.386909][ T5463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.819649][ T5457] loop3: detected capacity change from 0 to 32768 [ 209.838383][ T5457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.244 (5457) [ 210.876635][ T5457] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.887025][ T5457] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 210.895798][ T5457] BTRFS info (device loop3): metadata ratio 0 [ 210.902167][ T5457] BTRFS info (device loop3): turning on sync discard [ 210.908879][ T5457] BTRFS info (device loop3): using free space tree [ 210.965226][ T5454] XFS (loop1): Mounting V5 Filesystem [ 211.132848][ T5454] XFS (loop1): Ending clean mount [ 211.146336][ T5454] XFS (loop1): Quotacheck needed: Please wait. [ 211.185802][ T5454] XFS (loop1): Quotacheck: Done. [ 211.724670][ T27] audit: type=1800 audit(1781245227.804:6): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 212.069325][ T5457] BTRFS error (device loop3): open_ctree failed: -12 [ 212.105861][ T5482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.246'. [ 212.281472][ T5496] loop4: detected capacity change from 0 to 128 [ 212.334192][ T5496] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 212.501734][ T4275] XFS (loop1): Unmounting Filesystem [ 212.634485][ T4353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4353) [ 214.175031][ T5518] device syzkaller0 entered promiscuous mode [ 214.246038][ T5518] tipc: Started in network mode [ 214.251025][ T5518] tipc: Node identity 76c27a96f602, cluster identity 4711 [ 214.298140][ T5518] tipc: Enabled bearer , priority 0 [ 214.346866][ T5522] tipc: Resetting bearer [ 214.381845][ T5516] tipc: Resetting bearer [ 215.183353][ T5516] tipc: Disabling bearer [ 215.214446][ T5529] loop3: detected capacity change from 0 to 512 [ 216.402337][ T5529] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 218.857699][ T5534] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 218.864643][ T5534] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 218.874446][ T5534] vhci_hcd vhci_hcd.0: Device attached [ 218.881475][ T5535] vhci_hcd: connection closed [ 218.893697][ T4489] vhci_hcd: stop threads [ 218.987226][ T4489] vhci_hcd: release socket [ 219.066890][ T4489] vhci_hcd: disconnect device [ 219.112248][ T5196] tipc: Node number set to 2160097942 [ 222.530615][ T5547] loop2: detected capacity change from 0 to 256 [ 222.540433][ T5547] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 224.339297][ T5572] tipc: Started in network mode [ 224.382681][ T5572] tipc: Node identity f6b21e114383, cluster identity 4711 [ 224.391464][ T5572] tipc: Enabled bearer , priority 0 [ 224.416112][ T5576] device syzkaller0 entered promiscuous mode [ 224.428680][ T5572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 225.811279][ T5497] tipc: Node number set to 3039895057 [ 227.034668][ T5572] tipc: Resetting bearer [ 227.051929][ T5571] tipc: Resetting bearer [ 227.332571][ T5571] tipc: Disabling bearer [ 228.805069][ T5614] loop3: detected capacity change from 0 to 8192 [ 230.484613][ T5619] loop4: detected capacity change from 0 to 512 [ 230.662326][ T27] audit: type=1800 audit(1781245246.614:7): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.276" name="bus" dev="ramfs" ino=38023 res=0 errno=0 [ 230.704152][ T4457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.129318][ T5660] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 236.859959][ T5673] NILFS (nullb0): couldn't find nilfs on the device [ 237.085360][ T5661] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.097436][ T5661] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.107014][ T5661] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.132379][ T5661] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.259318][ T5661] bond1: (slave geneve2): making interface the new active one [ 237.294996][ T5661] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.352118][ T5665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 239.105877][ T5692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.126017][ T5692] loop1: detected capacity change from 0 to 2048 [ 239.167348][ T5692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.530914][ T5707] loop0: detected capacity change from 0 to 1024 [ 242.256632][ T5707] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 243.083381][ T5719] loop3: detected capacity change from 0 to 256 [ 243.105947][ T5719] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 244.950678][ T5742] tipc: Enabled bearer , priority 0 [ 244.968645][ T5742] device syzkaller0 entered promiscuous mode [ 245.020756][ T5742] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 245.137197][ T5745] tipc: Resetting bearer [ 245.299865][ T5741] tipc: Resetting bearer [ 245.580293][ T5741] tipc: Disabling bearer [ 246.638588][ T5755] loop1: detected capacity change from 0 to 16 [ 246.671753][ T5755] erofs: (device loop1): mounted with root inode @ nid 36. [ 246.922432][ T5759] loop4: detected capacity change from 0 to 4096 [ 247.302290][ T5763] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 247.313322][ T5763] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 247.324085][ T27] audit: type=1800 audit(1781245263.694:8): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 250.116808][ T5778] loop1: detected capacity change from 0 to 32768 [ 251.023249][ T46] read_mapping_page failed! [ 251.049273][ T46] ERROR: (device loop1): txCommit: [ 251.049273][ T46] [ 251.208744][ T46] jfs_write_inode: jfs_commit_inode failed! [ 251.506119][ T5791] loop0: detected capacity change from 0 to 32768 [ 251.925478][ T5791] XFS (loop0): Mounting V5 Filesystem [ 252.138812][ T5791] XFS (loop0): Ending clean mount [ 252.148144][ T5791] XFS (loop0): Quotacheck needed: Please wait. [ 252.236334][ T5791] XFS (loop0): Quotacheck: Done. [ 252.801903][ T27] audit: type=1800 audit(1781245269.134:9): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.319" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 253.412908][ T4277] XFS (loop0): Unmounting Filesystem [ 255.458995][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 255.476774][ T5836] NILFS (nullb0): couldn't find nilfs on the device [ 255.524468][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531106][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.521638][ T5860] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 258.528224][ T5860] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.626988][ T5860] vhci_hcd vhci_hcd.0: Device attached [ 259.619115][ T5861] vhci_hcd: connection closed [ 259.624146][ T4676] vhci_hcd: stop threads [ 259.775010][ T4676] vhci_hcd: release socket [ 259.942467][ T4676] vhci_hcd: disconnect device [ 260.879068][ T5871] loop4: detected capacity change from 0 to 32768 [ 261.035856][ T5887] loop3: detected capacity change from 0 to 128 [ 261.100136][ T5887] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 261.112593][ T5887] hpfs: filesystem error: improperly stopped [ 261.119063][ T5887] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 261.127341][ T5887] hpfs: You really don't want any checks? You are crazy... [ 261.134615][ T5887] hpfs: Code page index out of array [ 261.139945][ T5887] hpfs: code page support is disabled [ 261.153620][ T5887] hpfs: hpfs_map_4sectors(): unaligned read [ 261.160911][ T5887] hpfs: hpfs_map_4sectors(): unaligned read [ 261.166943][ T5887] hpfs: filesystem error: unable to find root dir [ 261.378779][ T5871] XFS (loop4): Mounting V5 Filesystem [ 261.755958][ T5871] XFS (loop4): Ending clean mount [ 261.766552][ T5871] XFS (loop4): Quotacheck needed: Please wait. [ 261.855354][ T5871] XFS (loop4): Quotacheck: Done. [ 262.342396][ T27] audit: type=1800 audit(1781245278.504:10): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.334" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 262.633378][ T4278] XFS (loop4): Unmounting Filesystem [ 264.044688][ T5913] NILFS (nullb0): couldn't find nilfs on the device [ 264.795673][ T5922] binder_alloc: 5921: pid 5921 spamming oneway? 2 buffers allocated for a total size of 5120 [ 264.812236][ T5922] netlink: 96 bytes leftover after parsing attributes in process `syz.4.338'. [ 266.557862][ T5938] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 266.586713][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.350'. [ 266.729993][ T5943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 266.736569][ T5943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 267.141200][ T5949] loop0: detected capacity change from 0 to 24 [ 267.268824][ T5943] vhci_hcd vhci_hcd.0: Device attached [ 267.772350][ T5944] vhci_hcd: connection closed [ 267.773488][ T4382] vhci_hcd: stop threads [ 267.844149][ T4382] vhci_hcd: release socket [ 267.950788][ T4382] vhci_hcd: disconnect device [ 268.122598][ T5951] loop3: detected capacity change from 0 to 32768 [ 268.214379][ T5467] usb 36-1: SetAddress Request (2) to port 0 [ 268.242876][ T5467] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 268.447835][ T5938] team0: Port device geneve0 added [ 268.553220][ T5467] usb 36-1: enqueue for inactive port 0 [ 268.696275][ T5961] block nbd2: NBD_DISCONNECT [ 268.739517][ T4389] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.776480][ T5951] XFS (loop3): Mounting V5 Filesystem [ 269.071143][ T5467] usb usb36-port1: attempt power cycle [ 269.344968][ T5951] XFS (loop3): Ending clean mount [ 269.353165][ T5951] XFS (loop3): Quotacheck needed: Please wait. [ 269.436202][ T5951] XFS (loop3): Quotacheck: Done. [ 270.672110][ T5467] usb usb36-port1: unable to enumerate USB device [ 270.721896][ T27] audit: type=1800 audit(1781245286.304:11): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 275.263744][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 275.423313][ T4276] XFS (loop3): Unmounting Filesystem [ 280.283411][ T6029] loop2: detected capacity change from 0 to 128 [ 280.384850][ T6031] loop3: detected capacity change from 0 to 16 [ 280.420733][ T6031] erofs: (device loop3): mounted with root inode @ nid 36. [ 280.606790][ T6029] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.651949][ T6029] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.754695][ T6040] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 280.765495][ T6040] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 280.921835][ T27] audit: type=1800 audit(1781245297.144:12): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.373" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 281.583636][ T6043] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 282.221628][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 284.156745][ T6056] loop2: detected capacity change from 0 to 512 [ 286.493171][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 286.622260][ T6069] loop0: detected capacity change from 0 to 1024 [ 288.584435][ T6088] NILFS (nullb0): couldn't find nilfs on the device [ 289.118469][ T6094] loop4: detected capacity change from 0 to 512 [ 289.163629][ T6094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.536058][ T6099] hub 8-0:1.0: USB hub found [ 289.541827][ T6099] hub 8-0:1.0: 1 port detected [ 299.054431][ T6152] Cannot find del_set index 14804 as target [ 300.381455][ T6163] IPVS: lc: FWM 3 0x00000003 - no destination available [ 301.496632][ T6169] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 303.121435][ T6180] NILFS (nullb0): couldn't find nilfs on the device [ 305.240164][ T6184] loop0: detected capacity change from 0 to 2048 [ 305.266533][ T6201] loop3: detected capacity change from 0 to 128 [ 305.295785][ T6201] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 305.524174][ T6201] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.537164][ T6116] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.944448][ T6184] loop0: detected capacity change from 0 to 8 [ 305.944972][ T6116] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.998040][ T6116] Buffer I/O error on dev loop0, logical block 0, async page read [ 306.016206][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 306.042897][ T6201] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 306.502734][ T6217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 306.509334][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.517380][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 307.061039][ T6219] vhci_hcd: connection closed [ 307.063612][ T33] vhci_hcd: stop threads [ 307.575749][ T6218] loop0: detected capacity change from 0 to 16 [ 307.611124][ T33] vhci_hcd: release socket [ 307.615893][ T33] vhci_hcd: disconnect device [ 307.770896][ T6218] erofs: (device loop0): mounted with root inode @ nid 36. [ 307.849736][ T6227] loop4: detected capacity change from 0 to 2048 [ 307.901905][ T6226] kAFS: unable to lookup cell '(,c¾Ì' [ 308.053748][ T6227] Alternate GPT is invalid, using primary GPT. [ 308.479425][ T6235] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 308.490764][ T6235] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 308.562041][ T27] audit: type=1800 audit(1781245324.874:13): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.414" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 308.822876][ T6227] loop4: p1 p2 p3 [ 309.028714][ T5196] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 309.068123][ T3640] Alternate GPT is invalid, using primary GPT. [ 309.553835][ T3640] loop4: p1 p2 p3 [ 309.633372][ T5196] usb 3-1: Using ep0 maxpacket: 16 [ 309.697551][ T5196] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.340812][ T5196] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.363857][ T5196] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 310.380940][ T5196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.396007][ T5196] usb 3-1: SerialNumber: syz [ 310.562274][ T5196] usb 3-1: 0:2 : does not exist [ 310.722112][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.084025][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.458052][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 311.501101][ T6116] udevd[6116]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 311.533716][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 311.647831][ T6116] udevd[6116]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 311.676549][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 311.694537][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 311.725908][ T6267] device syzkaller0 entered promiscuous mode [ 314.579992][ T6287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 314.586566][ T6287] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.594804][ T6287] vhci_hcd vhci_hcd.0: Device attached [ 314.795882][ T6288] vhci_hcd: connection closed [ 314.797774][ T5799] vhci_hcd: stop threads [ 314.922130][ T5499] usb 42-1: SetAddress Request (2) to port 0 [ 314.954012][ T5499] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 314.992818][ T5799] vhci_hcd: release socket [ 315.104362][ T5799] vhci_hcd: disconnect device [ 315.217155][ T5499] usb 42-1: enqueue for inactive port 0 [ 316.147652][ T5499] usb usb42-port1: attempt power cycle [ 316.559312][ T5198] usb 3-1: USB disconnect, device number 4 [ 317.204035][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.845270][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.069147][ T5499] usb usb42-port1: unable to enumerate USB device [ 318.270413][ T6319] bridge0: port 3(vlan2) entered blocking state [ 318.386089][ T6319] bridge0: port 3(vlan2) entered disabled state [ 318.418240][ T6322] loop4: detected capacity change from 0 to 32768 [ 318.428089][ T6319] device vlan2 entered promiscuous mode [ 318.434355][ T6319] device geneve0 entered promiscuous mode [ 318.623770][ T6322] XFS (loop4): Mounting V5 Filesystem [ 318.783869][ T6322] XFS (loop4): Ending clean mount [ 318.792668][ T6322] XFS (loop4): Quotacheck needed: Please wait. [ 320.077052][ T6322] XFS (loop4): Quotacheck: Done. [ 320.725913][ T4278] XFS (loop4): Unmounting Filesystem [ 320.813113][ T6333] can0: slcan on ttyS3. [ 321.025207][ T6331] can0 (unregistered): slcan off ttyS3. [ 321.971703][ T6366] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 321.971703][ T6366] program syz.2.448 not setting count and/or reply_len properly [ 325.682869][ T6403] loop4: detected capacity change from 0 to 128 [ 326.988645][ T6403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 327.095232][ T6403] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.127066][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.444952][ T6419] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 328.931710][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 329.736976][ T27] audit: type=1800 audit(1781769634.376:14): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.446" name="bus" dev="ramfs" ino=39284 res=0 errno=0 [ 332.583272][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 333.713428][ T6467] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 333.720015][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 333.734636][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 333.858291][ T6470] vhci_hcd: connection closed [ 333.859197][ T9] vhci_hcd: stop threads [ 333.945471][ T9] vhci_hcd: release socket [ 334.051801][ T9] vhci_hcd: disconnect device [ 334.058414][ T5497] usb 34-1: SetAddress Request (2) to port 0 [ 334.066553][ T5497] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 334.236501][ T5497] usb 34-1: enqueue for inactive port 0 [ 334.570911][ T6478] loop4: detected capacity change from 0 to 128 [ 335.869893][ T5497] usb usb34-port1: attempt power cycle [ 335.912640][ T6480] loop0: detected capacity change from 0 to 65536 [ 335.992710][ T6480] XFS (loop0): Mounting V5 Filesystem [ 336.153156][ T6480] XFS (loop0): Ending clean mount [ 337.392927][ T6498] loop4: detected capacity change from 0 to 32768 [ 338.230460][ T4277] XFS (loop0): Unmounting Filesystem [ 338.341945][ T6498] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 338.350466][ T6498] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 338.377496][ T5497] usb usb34-port1: unable to enumerate USB device [ 338.397589][ T6498] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 338.416438][ T5497] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 338.436394][ T5497] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 338.691039][ T5497] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 256ms [ 338.705997][ T5497] gfs2: fsid=syz:syz.0: jid=0: Done [ 339.155862][ T6498] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 339.425318][ T6498] gfs2: fsid=syz:syz.0: found 1 quota changes [ 339.573075][ T6516] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 339.573075][ T6516] inode = 11 2339 [ 339.573075][ T6516] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 339.880450][ T6516] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 340.024568][ T6516] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6516 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 340.214417][ T6516] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 341.085892][ T6516] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 341.101414][ T6516] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 341.110550][ T6516] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 341.121596][ T6516] gfs2: fsid=syz:syz.0: File system withdrawn [ 341.127979][ T6516] CPU: 0 PID: 6516 Comm: gfs2_quotad Not tainted syzkaller #0 [ 341.135454][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.145534][ T6516] Call Trace: [ 341.148816][ T6516] [ 341.151739][ T6516] dump_stack_lvl+0x188/0x24e [ 341.156417][ T6516] ? kobject_uevent_env+0x35f/0x8a0 [ 341.161609][ T6516] ? show_regs_print_info+0x12/0x12 [ 341.166801][ T6516] ? load_image+0x400/0x400 [ 341.171325][ T6516] ? kobject_uevent_env+0x35f/0x8a0 [ 341.176524][ T6516] gfs2_withdraw+0xde6/0x15d0 [ 341.181199][ T6516] ? gfs2_lm+0x240/0x240 [ 341.185427][ T6516] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 341.191061][ T6516] ? gfs2_consist_inode_i+0xf1/0x110 [ 341.196339][ T6516] gfs2_inode_refresh+0xc2a/0x1140 [ 341.201451][ T6516] ? gfs2_inode_metasync+0xf0/0xf0 [ 341.206556][ T6516] ? gfs2_glock_nq+0xcf0/0x14e0 [ 341.211397][ T6516] gfs2_instantiate+0x15e/0x210 [ 341.216241][ T6516] gfs2_glock_wait+0x1d0/0x2a0 [ 341.220999][ T6516] do_sync+0x4bf/0xc40 [ 341.225057][ T6516] ? gfs2_quota_sync+0x32c/0x700 [ 341.229990][ T6516] ? slot_put+0x1e0/0x1e0 [ 341.234313][ T6516] ? __lock_acquire+0x7d10/0x7d10 [ 341.239328][ T6516] ? do_raw_spin_lock+0x128/0x2f0 [ 341.244343][ T6516] ? gfs2_quota_sync+0x32c/0x700 [ 341.249273][ T6516] ? do_raw_spin_unlock+0x11d/0x230 [ 341.254462][ T6516] gfs2_quota_sync+0x32c/0x700 [ 341.259224][ T6516] gfs2_quotad+0x420/0x680 [ 341.263639][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 341.268737][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.274622][ T6516] ? wake_bit_function+0x200/0x200 [ 341.279726][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.285611][ T6516] ? __kthread_parkme+0x162/0x1c0 [ 341.290632][ T6516] kthread+0x29d/0x330 [ 341.294685][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 341.299788][ T6516] ? kthread_blkcg+0xd0/0xd0 [ 341.304369][ T6516] ret_from_fork+0x1f/0x30 [ 341.308792][ T6516] [ 341.322336][ T4278] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 341.385770][ T4278] CPU: 0 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 341.393374][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.403447][ T4278] Call Trace: [ 341.406737][ T4278] [ 341.409678][ T4278] dump_stack_lvl+0x188/0x24e [ 341.414367][ T4278] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 341.419489][ T4278] ? show_regs_print_info+0x12/0x12 [ 341.424700][ T4278] ? load_image+0x400/0x400 [ 341.429230][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 341.434444][ T4278] gfs2_assert_warn_i+0x18f/0x2c0 [ 341.439492][ T4278] gfs2_quota_cleanup+0x4b4/0x6a0 [ 341.444542][ T4278] gfs2_put_super+0x22f/0x8c0 [ 341.449241][ T4278] ? gfs2_evict_inode+0x11d0/0x11d0 [ 341.454458][ T4278] generic_shutdown_super+0x130/0x340 [ 341.459842][ T4278] kill_block_super+0x7c/0xe0 [ 341.464535][ T4278] deactivate_locked_super+0x93/0xf0 [ 341.469831][ T4278] cleanup_mnt+0x42c/0x4b0 [ 341.474258][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 341.479461][ T4278] task_work_run+0x1d0/0x260 [ 341.484050][ T4278] ? task_work_cancel+0x220/0x220 [ 341.489068][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 341.494526][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 341.499806][ T4278] exit_to_user_mode_prepare+0xee/0x180 [ 341.505347][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 341.510801][ T4278] do_syscall_64+0x58/0xa0 [ 341.515205][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 341.519877][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 341.524550][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.530436][ T4278] RIP: 0033:0x7fd73439e097 [ 341.534856][ T4278] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 341.554456][ T4278] RSP: 002b:00007fff188b1c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 341.562860][ T4278] RAX: 0000000000000000 RBX: 00007fd7344321ca RCX: 00007fd73439e097 [ 341.570822][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff188b1cd0 [ 341.578787][ T4278] RBP: 00007fff188b1cd0 R08: 00007fff188b2cd0 R09: 00000000ffffffff [ 341.586747][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff188b2d60 [ 341.594711][ T4278] R13: 00007fd7344321ca R14: 00000000000525d0 R15: 00007fff188b2da0 [ 341.602683][ T4278] [ 343.000227][ T6543] loop2: detected capacity change from 0 to 512 [ 343.030659][ T6543] EXT4-fs: inline encryption not supported [ 343.050196][ T6543] EXT4-fs: Invalid want_extra_isize 3 [ 344.349847][ T6550] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 344.356429][ T6550] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 344.364579][ T6550] vhci_hcd vhci_hcd.0: Device attached [ 344.694458][ T7] usb 42-1: SetAddress Request (6) to port 0 [ 344.705235][ T7] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 344.931512][ T6551] vhci_hcd: connection reset by peer [ 344.939283][ T4382] vhci_hcd: stop threads [ 344.945498][ T4382] vhci_hcd: release socket [ 345.024877][ T4382] vhci_hcd: disconnect device [ 345.662668][ T6561] device syzkaller0 entered promiscuous mode [ 348.587703][ T6589] loop2: detected capacity change from 0 to 128 [ 348.633987][ T6589] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.688850][ T6589] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.493465][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.569611][ T6589] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.890635][ T7] usb 42-1: device descriptor read/8, error -110 [ 350.699714][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.946414][ T7] usb usb42-port1: attempt power cycle [ 351.064988][ T6613] ipt_REJECT: ECHOREPLY no longer supported. [ 351.787658][ T6619] loop1: detected capacity change from 0 to 16 [ 351.812058][ T6619] erofs: (device loop1): mounted with root inode @ nid 36. [ 352.459502][ T7] usb usb42-port1: unable to enumerate USB device [ 352.951515][ T6632] xt_hashlimit: max too large, truncated to 1048576 [ 354.934164][ T6645] loop0: detected capacity change from 0 to 512 [ 355.105440][ T6645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.858844][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.512: iget: bad i_size value: 38620345925642 [ 355.907986][ T6654] capability: warning: `syz.1.515' uses deprecated v2 capabilities in a way that may be insecure [ 355.913891][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.512: couldn't read orphan inode 15 (err -117) [ 355.948119][ T6657] autofs4:pid:6657:autofs_fill_super: called with bogus options [ 356.139181][ T6645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.920729][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 361.988267][ T6710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 361.994919][ T6710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 362.026446][ T6710] vhci_hcd vhci_hcd.0: Device attached [ 362.034885][ T6711] vhci_hcd: connection closed [ 362.035694][ T4361] vhci_hcd: stop threads [ 362.147272][ T4361] vhci_hcd: release socket [ 362.252417][ T4361] vhci_hcd: disconnect device [ 362.967361][ T27] audit: type=1326 audit(1781769667.713:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.0.525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52959ce59 code=0x7fc00000 [ 366.528783][ T6769] program syz.0.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.539718][ T6769] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 367.261587][ T6771] autofs4:pid:6771:autofs_fill_super: called with bogus options [ 368.484360][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 371.475332][ T6803] xt_hashlimit: max too large, truncated to 1048576 [ 371.762555][ T6516] ================================================================== [ 371.770716][ T6516] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 371.778138][ T6516] Read of size 8 at addr ffff88807d480bb0 by task gfs2_quotad/6516 [ 371.786098][ T6516] [ 371.788478][ T6516] CPU: 0 PID: 6516 Comm: gfs2_quotad Not tainted syzkaller #0 [ 371.795982][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.806038][ T6516] Call Trace: [ 371.809390][ T6516] [ 371.812455][ T6516] dump_stack_lvl+0x188/0x24e [ 371.817234][ T6516] ? __lock_acquire+0x7d10/0x7d10 [ 371.822316][ T6516] ? show_regs_print_info+0x12/0x12 [ 371.827517][ T6516] ? load_image+0x400/0x400 [ 371.832041][ T6516] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 371.837584][ T6516] ? __virt_addr_valid+0x188/0x540 [ 371.842802][ T6516] ? __virt_addr_valid+0x465/0x540 [ 371.847922][ T6516] ? __lock_acquire+0x106/0x7d10 [ 371.852865][ T6516] print_report+0xa8/0x210 [ 371.857291][ T6516] kasan_report+0x10b/0x140 [ 371.861870][ T6516] ? __lock_acquire+0x106/0x7d10 [ 371.866837][ T6516] __lock_acquire+0x106/0x7d10 [ 371.871624][ T6516] ? verify_lock_unused+0x140/0x140 [ 371.876850][ T6516] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 371.882842][ T6516] ? lock_chain_count+0x20/0x20 [ 371.887703][ T6516] ? __free_object+0x218/0xa70 [ 371.892554][ T6516] ? lockdep_hardirqs_on+0x94/0x140 [ 371.897765][ T6516] ? verify_lock_unused+0x140/0x140 [ 371.902984][ T6516] ? alloc_object+0x640/0x640 [ 371.907675][ T6516] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 371.913679][ T6516] ? lock_chain_count+0x20/0x20 [ 371.918635][ T6516] lock_acquire+0x1bb/0x4a0 [ 371.923224][ T6516] ? finish_wait+0xb8/0x1d0 [ 371.927751][ T6516] ? timer_delete_sync+0x20/0x20 [ 371.932798][ T6516] ? __mod_timer+0x91e/0xd00 [ 371.937378][ T6516] ? read_lock_is_recursive+0x10/0x10 [ 371.942755][ T6516] _raw_spin_lock_irqsave+0xb0/0x100 [ 371.948038][ T6516] ? finish_wait+0xb8/0x1d0 [ 371.952537][ T6516] ? _raw_spin_lock+0x40/0x40 [ 371.957205][ T6516] ? update_process_times+0x1b0/0x1b0 [ 371.962573][ T6516] finish_wait+0xb8/0x1d0 [ 371.966901][ T6516] gfs2_quotad+0x4f3/0x680 [ 371.971332][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 371.976433][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 371.982315][ T6516] ? wake_bit_function+0x200/0x200 [ 371.987417][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 371.993300][ T6516] ? __kthread_parkme+0x162/0x1c0 [ 371.998444][ T6516] kthread+0x29d/0x330 [ 372.002515][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 372.007627][ T6516] ? kthread_blkcg+0xd0/0xd0 [ 372.012209][ T6516] ret_from_fork+0x1f/0x30 [ 372.016719][ T6516] [ 372.019777][ T6516] [ 372.022094][ T6516] Allocated by task 6498: [ 372.026450][ T6516] kasan_set_track+0x4b/0x70 [ 372.031034][ T6516] __kasan_kmalloc+0x8e/0xa0 [ 372.035613][ T6516] gfs2_fill_super+0x134/0x1fb0 [ 372.040448][ T6516] get_tree_bdev+0x3f1/0x610 [ 372.045074][ T6516] gfs2_get_tree+0x4d/0x1e0 [ 372.049563][ T6516] vfs_get_tree+0x88/0x270 [ 372.053982][ T6516] do_new_mount+0x24a/0xa40 [ 372.058517][ T6516] __se_sys_mount+0x2e3/0x3d0 [ 372.063190][ T6516] do_syscall_64+0x4c/0xa0 [ 372.067598][ T6516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.073481][ T6516] [ 372.075795][ T6516] The buggy address belongs to the object at ffff88807d480000 [ 372.075795][ T6516] which belongs to the cache kmalloc-8k of size 8192 [ 372.089913][ T6516] The buggy address is located 2992 bytes inside of [ 372.089913][ T6516] 8192-byte region [ffff88807d480000, ffff88807d482000) [ 372.103351][ T6516] [ 372.105660][ T6516] The buggy address belongs to the physical page: [ 372.112131][ T6516] page:ffffea0001f52000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807d480000 pfn:0x7d480 [ 372.123571][ T6516] head:ffffea0001f52000 order:3 compound_mapcount:0 compound_pincount:0 [ 372.131882][ T6516] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 372.139862][ T6516] raw: 00fff00000010200 ffffea0001c14600 dead000000000003 ffff888017442280 [ 372.148438][ T6516] raw: ffff88807d480000 0000000080020000 00000001ffffffff 0000000000000000 [ 372.157002][ T6516] page dumped because: kasan: bad access detected [ 372.163435][ T6516] page_owner tracks the page as allocated [ 372.169136][ T6516] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5932, tgid 5923 (syz.1.347), ts 265274266681, free_ts 265123192759 [ 372.191784][ T6516] post_alloc_hook+0x173/0x1a0 [ 372.196640][ T6516] get_page_from_freelist+0x1a1e/0x1ab0 [ 372.202196][ T6516] __alloc_pages+0x1ec/0x4f0 [ 372.206790][ T6516] alloc_slab_page+0x5d/0x160 [ 372.211462][ T6516] new_slab+0x87/0x2c0 [ 372.215527][ T6516] ___slab_alloc+0xbc6/0x1240 [ 372.220195][ T6516] __kmem_cache_alloc_node+0x1a0/0x260 [ 372.225641][ T6516] __kmalloc_node+0xa0/0x240 [ 372.230329][ T6516] kvmalloc_node+0x6c/0x180 [ 372.234826][ T6516] bpf_check+0x1b7/0x10db0 [ 372.239246][ T6516] bpf_prog_load+0x101a/0x1560 [ 372.244033][ T6516] __sys_bpf+0x5b8/0x780 [ 372.248272][ T6516] __x64_sys_bpf+0x78/0x90 [ 372.252678][ T6516] do_syscall_64+0x4c/0xa0 [ 372.257081][ T6516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.262969][ T6516] page last free stack trace: [ 372.267623][ T6516] free_unref_page_prepare+0x8b4/0x9a0 [ 372.273073][ T6516] free_unref_page+0x2e/0x3f0 [ 372.277737][ T6516] __unfreeze_partials+0x1a5/0x200 [ 372.282841][ T6516] put_cpu_partial+0x17c/0x250 [ 372.287590][ T6516] qlist_free_all+0x76/0xe0 [ 372.292140][ T6516] kasan_quarantine_reduce+0x144/0x160 [ 372.297591][ T6516] __kasan_slab_alloc+0x1e/0x80 [ 372.302434][ T6516] slab_post_alloc_hook+0x4b/0x480 [ 372.307532][ T6516] kmem_cache_alloc+0x123/0x2f0 [ 372.312391][ T6516] vm_area_alloc+0x20/0xe0 [ 372.316851][ T6516] mmap_region+0xc18/0x1ca0 [ 372.321374][ T6516] do_mmap+0x964/0xfd0 [ 372.325429][ T6516] vm_mmap_pgoff+0x1c1/0x2d0 [ 372.330011][ T6516] ksys_mmap_pgoff+0x516/0x6f0 [ 372.334761][ T6516] do_syscall_64+0x4c/0xa0 [ 372.339161][ T6516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.345044][ T6516] [ 372.347350][ T6516] Memory state around the buggy address: [ 372.352984][ T6516] ffff88807d480a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.361029][ T6516] ffff88807d480b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.369138][ T6516] >ffff88807d480b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.377185][ T6516] ^ [ 372.382819][ T6516] ffff88807d480c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.390880][ T6516] ffff88807d480c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.398943][ T6516] ================================================================== [ 372.407012][ T6516] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 372.414190][ T6516] CPU: 0 PID: 6516 Comm: gfs2_quotad Not tainted syzkaller #0 [ 372.421634][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.431735][ T6516] Call Trace: [ 372.435013][ T6516] [ 372.437930][ T6516] dump_stack_lvl+0x188/0x24e [ 372.442599][ T6516] ? memcpy+0x3c/0x60 [ 372.446569][ T6516] ? show_regs_print_info+0x12/0x12 [ 372.451767][ T6516] ? load_image+0x400/0x400 [ 372.456268][ T6516] panic+0x2e5/0x730 [ 372.460152][ T6516] ? __lock_acquire+0x7d10/0x7d10 [ 372.465166][ T6516] ? bpf_jit_dump+0xd0/0xd0 [ 372.469675][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 372.475557][ T6516] ? _raw_spin_unlock+0x40/0x40 [ 372.480397][ T6516] check_panic_on_warn+0x80/0xa0 [ 372.485325][ T6516] ? __lock_acquire+0x106/0x7d10 [ 372.490252][ T6516] end_report+0x66/0x110 [ 372.494488][ T6516] kasan_report+0x118/0x140 [ 372.498982][ T6516] ? __lock_acquire+0x106/0x7d10 [ 372.503935][ T6516] __lock_acquire+0x106/0x7d10 [ 372.508691][ T6516] ? verify_lock_unused+0x140/0x140 [ 372.513879][ T6516] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.519850][ T6516] ? lock_chain_count+0x20/0x20 [ 372.524711][ T6516] ? __free_object+0x218/0xa70 [ 372.529466][ T6516] ? lockdep_hardirqs_on+0x94/0x140 [ 372.534652][ T6516] ? verify_lock_unused+0x140/0x140 [ 372.539845][ T6516] ? alloc_object+0x640/0x640 [ 372.544506][ T6516] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 372.550480][ T6516] ? lock_chain_count+0x20/0x20 [ 372.555409][ T6516] lock_acquire+0x1bb/0x4a0 [ 372.559903][ T6516] ? finish_wait+0xb8/0x1d0 [ 372.564399][ T6516] ? timer_delete_sync+0x20/0x20 [ 372.569320][ T6516] ? __mod_timer+0x91e/0xd00 [ 372.573899][ T6516] ? read_lock_is_recursive+0x10/0x10 [ 372.579263][ T6516] _raw_spin_lock_irqsave+0xb0/0x100 [ 372.584574][ T6516] ? finish_wait+0xb8/0x1d0 [ 372.589069][ T6516] ? _raw_spin_lock+0x40/0x40 [ 372.593739][ T6516] ? update_process_times+0x1b0/0x1b0 [ 372.599100][ T6516] finish_wait+0xb8/0x1d0 [ 372.603419][ T6516] gfs2_quotad+0x4f3/0x680 [ 372.607828][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 372.612928][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 372.618812][ T6516] ? wake_bit_function+0x200/0x200 [ 372.623915][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 372.629796][ T6516] ? __kthread_parkme+0x162/0x1c0 [ 372.634814][ T6516] kthread+0x29d/0x330 [ 372.638870][ T6516] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 372.643967][ T6516] ? kthread_blkcg+0xd0/0xd0 [ 372.648541][ T6516] ret_from_fork+0x1f/0x30 [ 372.652950][ T6516] [ 372.656217][ T6516] Kernel Offset: disabled [ 372.660529][ T6516] Rebooting in 86400 seconds..