last executing test programs: 42.50715511s ago: executing program 1 (id=367): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x7fffffff}) setpriority(0x2, 0x0, 0x8) 42.298650335s ago: executing program 1 (id=369): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) syz_io_uring_complete(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 39.092134552s ago: executing program 1 (id=402): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x40, 0x4, 0x8, 0x6, 0xd, 0x0, 0x3, 0x0, 0x1, 0x1, 0x4, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, 0x0, 0x0) 38.054664517s ago: executing program 1 (id=415): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x4, 0x1f5, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x88800, 0x1b0) creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8007, 0x9, 0x1b) 37.789950834s ago: executing program 1 (id=419): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f00000003c0)={[{@nombcache}, {@nouid32}, {@norecovery}, {@nodelalloc}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='cgroup\x00', 0xfffffffffffffffc, 0xffffffffffffff9c) open(&(0x7f0000000140)='.\x00', 0xa0c0, 0x172) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)=0x4202c78) set_mempolicy(0x6006, 0x0, 0x4800000004) write$ppp(r3, &(0x7f0000000200)='\x00\x00', 0x2) 37.466497892s ago: executing program 1 (id=423): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000740), 0x5005) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 37.239259637s ago: executing program 32 (id=423): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000740), 0x5005) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 10.415193928s ago: executing program 5 (id=640): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003140)=""/4141, 0x102d}], 0x1, 0x800, 0xfffffffc) 10.207507053s ago: executing program 5 (id=642): r0 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r1}) 9.947029679s ago: executing program 5 (id=645): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 2.589264968s ago: executing program 2 (id=727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000900)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000b00)={'erspan0\x00', r1, 0xa0, 0x10, 0xd, 0x7, {{0x19, 0x4, 0x1, 0x24, 0x64, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x13, 0xce, [@empty, @multicast1, @local, @private=0xa010100]}, @end, @generic={0x0, 0x2}, @noop, @rr={0x7, 0x17, 0x4f, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast]}, @rr={0x7, 0xb, 0x7a, [@multicast1, @local]}, @lsrr={0x83, 0x13, 0x2d, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$eJzs3c9rHFUcAPBvt21+abo5iKAiPupFL0sa/4EGaUEMKLEr1YMwNRtdss2GnSWyRbQ3r/4dxaM3Qbx6yEHv3rzl4rGH0pHsZJPND1NCTIbq5wPhfbPvfWfem2GGdxm+23e/v7+2mjdWs37UbqaoRUTtccTcMCpd2m1rw3gixj2Mt+t3/3j9o08+fX9xaenWckq3F++8s5BSuvbGz199/cP1X/ovfPzjtZ8mY2vus+2/Fv7cennrle2nd75s56mdp/VuP2XpXrfbz+51Wmmlna81Uvqw08ryVmqv563egf7VTndjY5Cy9ZXZmY1eK89Ttj5Ia61B6ndTvzdI2RdZez01Go00OxM8S/PR8nK2WMZTJ4y7eVET4hz0eovZzjM8eaSn+aiSCQEAlTrr/n/ilPv/0VGP3/9fDfv/izS+/+e/amf/PzF8fn891GP/DwAAAAAAAAAAAAAAz4PHRVEviqI+aovRR8K7/1c8Pc7Zkft/6K/q+XG+xj7cm4rofLfZ3GyWbdm/uBrt6EQr5qMeT3ZeCyNlfPu9pVvzaWguZu9/O8y//ltE8/LB/BtR3/t0cDx/OiLK/LSXHzvt1ZgZz1+Ierx0/PkXjuSX3npzLL8R9fj98+hGJ1aGU9jP/+ZGSu9+sHTo/JPDcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8PzTSyGtR1r3fbEZMx+Zu/f7G/oC5g/Xxy/y9+vrzUY8nx9fnnz+2vv+VePVKtWsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJF88GAt63RavYsKRjX/h79MjIJ/zrpUDn94qGs6Dg6efNZxzhjUTpU1vbvIY7qeFkXxr03schz4Zepib+VZgqsRccKYYvcCnv1cL0bECWMmI+L8l1yr/oKfOqjibQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADV2i/6XfVMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFI+eLCWdTqt3jkGVa8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgefJ3AAAA//9kOwAn") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fallocate(r2, 0x0, 0x3, 0x9) unshare(0x8040480) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0, 0x12}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a310000000009000100"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x5, &(0x7f0000000400)) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x1) 1.774731868s ago: executing program 2 (id=735): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 1.618281721s ago: executing program 2 (id=737): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f00000003c0)={[{@nombcache}, {@nouid32}, {@norecovery}, {@nodelalloc}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='cgroup\x00', 0xfffffffffffffffc, 0xffffffffffffff9c) open(&(0x7f0000000140)='.\x00', 0xa0c0, 0x172) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)=0x4202c78) set_mempolicy(0x6006, 0x0, 0x4800000004) write$ppp(r3, &(0x7f0000000200)='\x00\x00', 0x2) 1.458728245s ago: executing program 0 (id=739): socket$rds(0x15, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc400, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.378320387s ago: executing program 0 (id=741): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100808000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 1.170757942s ago: executing program 0 (id=743): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x2f}) 1.120805973s ago: executing program 5 (id=744): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, 0x0, 0x0, 0x800, 0xfffffffc) 1.120440364s ago: executing program 4 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x100, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xac, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.055599195s ago: executing program 3 (id=746): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x20040400) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x8000000000000001, 0x0, 0x0, 0x81f, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x200000004, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x80000000b, 0x13}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 1.016866046s ago: executing program 0 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 996.359876ms ago: executing program 5 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8004) 995.681207ms ago: executing program 2 (id=749): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 922.662328ms ago: executing program 4 (id=750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x9, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000007e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 912.971298ms ago: executing program 3 (id=751): r0 = socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 840.40428ms ago: executing program 4 (id=752): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 785.726892ms ago: executing program 5 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c3051f8441da8"]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x419183a9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005f00)={{{@in6=@private2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000006000)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc07f080e, &(0x7f0000000940)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r4}}, {@inlinecrypt}, {@errors_continue}], [{@fowner_gt={'fowner>', r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']{'}}, {@euid_gt}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) write$binfmt_misc(r6, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x20000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 785.208412ms ago: executing program 0 (id=754): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001040)={{0x1, 0x1, 0x9, 0xffffffff, 0x7f, 0x9}, 0x289, [0x1, 0x4, 0x3ff, 0x65f6, 0x2, 0xfff, 0x7, 0x3, 0xf1, 0xffff, 0x0, 0x6, 0xfffffffd, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0xd, 0x6, 0x71, 0x8000, 0x80000001, 0xc306, 0x7f, 0x800, 0x3c, 0xb0, 0x5b0c5208, 0xb, 0x80, 0x7, 0x3ff, 0x9, 0x6, 0x800, 0xa, 0x1137, 0x6, 0x10, 0xfff, 0x7ff, 0x6, 0xea56, 0x8, 0x9, 0x9, 0xd9588000, 0x80, 0xff, 0x40964e8a, 0xe30, 0x3, 0x2, 0x40, 0x15e, 0xffff, 0xffffff81, 0x4, 0x1, 0x3, 0x2, 0xf, 0x1ff, 0x10, 0x5, 0x8, 0xcc, 0xffffffff, 0x2860cf75, 0xdca, 0x9, 0x3, 0x5, 0x2, 0x3, 0x20000000, 0x1ff, 0x4, 0xffffff67, 0x100, 0x9, 0x1, 0x530, 0x9bc, 0x8000, 0x8, 0x0, 0xf24, 0x1, 0x76, 0x3, 0x7, 0x80000000, 0x4d62, 0x3, 0x4, 0x1, 0x9, 0x80000000, 0xc, 0x3, 0x7, 0x1, 0x1, 0x5, 0xfff, 0x8001, 0x4, 0x101, 0x0, 0xffff, 0x3, 0xef2d, 0x5, 0xff, 0x4, 0x7, 0x3, 0x3, 0x5, 0x9, 0x9, 0x8, 0x7, 0x3, 0xfffffffa, 0x8002, 0xfffffff7, 0x9e00, 0x4, 0x20080, 0x8000, 0x40000000, 0x1, 0x8001, 0x1ff, 0x80, 0x9, 0x9, 0x1ad7, 0x2, 0xf, 0xd2f, 0x3e1, 0x9, 0xa3, 0x4, 0x8, 0x5, 0x4, 0x1, 0x2, 0x7, 0x100, 0x9, 0x5, 0x9, 0x2, 0x7, 0x9, 0x10, 0x401, 0x6, 0x647df837, 0x8, 0x40, 0x7446, 0xffdffffd, 0x8, 0x7, 0x6c, 0x8ca, 0x3, 0x2, 0x1, 0x5, 0xfffffff7, 0xccc, 0x101, 0x7, 0x9, 0x5, 0x1, 0x6, 0x2, 0xfffffff7, 0x1000, 0xb, 0x18f, 0xc6, 0x8000, 0x5, 0xff, 0xae7, 0x4, 0x8, 0xf8fb, 0x1, 0x1, 0x6, 0x22, 0x8, 0x1, 0x2, 0x42, 0x3, 0x40, 0x9, 0x0, 0x9, 0xfffffffa, 0x4, 0x7f, 0x7, 0x4, 0x7, 0xf, 0x9, 0xe7, 0xb, 0x6, 0x80000000, 0x8, 0x1, 0x1ff, 0x6, 0x8000, 0x3, 0x3, 0x6, 0x9, 0x7b200, 0x6, 0x10001, 0x3, 0xff, 0x0, 0x8, 0x81, 0x5, 0x8, 0x8, 0xc8b, 0x3, 0x8, 0x6, 0xf7, 0x5, 0xa0000000, 0x5, 0x5, 0x3, 0x74f, 0x8, 0x6, 0x1f, 0x2, 0x4, 0xe, 0x39f7, 0x0, 0x2, 0x2, 0xadd, 0x1, 0x8, 0x0, 0xd, 0x1, 0x5eb1, 0xd0, 0x5, 0x523f, 0x0, 0x5, 0x8, 0x5ba7fcc, 0x173d, 0x0, 0x207c, 0x6, 0x5, 0x8, 0xff, 0x5e1, 0xe6, 0x9, 0x0, 0x40, 0x0, 0x1, 0x978, 0x9, 0xffffff80, 0x9, 0x7, 0x7ff, 0xfffffff8, 0x1ff, 0x7aa4, 0x1800, 0x6, 0x8000, 0x8, 0x7, 0x80000, 0x5c, 0x100, 0x1000, 0x5, 0x8000, 0x0, 0x20000000, 0x6, 0x2, 0x8ec, 0x6, 0x8, 0x8, 0x8, 0x61, 0x133, 0x69, 0x89d, 0x5, 0x35d0, 0xe, 0xfffffff8, 0x80, 0x2, 0xfff, 0x8, 0x9, 0x3960000, 0x6, 0x7, 0x7bcff236, 0x4, 0x8001, 0x9, 0x4, 0x5, 0x1, 0x8, 0xd797, 0x5, 0x7, 0x9, 0x1, 0x4, 0x101, 0x295f, 0x2, 0x2, 0x5, 0x8000, 0x80000000, 0x100, 0xf, 0x8, 0x10001, 0x8, 0xffff, 0xfd84, 0x7, 0x7, 0x5, 0x2, 0x3, 0x3, 0x1, 0x731e, 0x1, 0xff, 0x1000, 0x7, 0x9, 0xfffffff7, 0x54d, 0x5a, 0x0, 0xa, 0x8, 0xf, 0x8, 0x40, 0xc27683f, 0x0, 0x10000, 0x7, 0x5, 0x2, 0x80, 0x7fff, 0xfffffffe, 0x8, 0x0, 0x3, 0x62da, 0xd5f, 0x38, 0x10000, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x44, 0x1, 0x0, 0x3, 0x6, 0x5, 0x3ff, 0x4, 0x7fff, 0xd4, 0x4, 0x0, 0x0, 0x7, 0x80000001, 0x31, 0x7, 0x9, 0x8, 0x1, 0x8d, 0x7, 0x1, 0x100, 0x1, 0x800, 0x80000000, 0x9, 0x6, 0xfffffffd, 0x81, 0xf4ae, 0xdc, 0x2, 0x8000, 0xffff, 0x80000001, 0x9, 0x6, 0x61, 0x80000000, 0xffffffbe, 0xaae, 0x8000, 0x1, 0x80000000, 0x80, 0xb300, 0x5, 0x2, 0x9, 0x1b599e53, 0x1, 0xfffffff7, 0x6, 0xe1c, 0xc, 0x1, 0x1, 0x4b, 0x5, 0x0, 0x4, 0x8, 0x0, 0x4, 0x400, 0x5, 0x828, 0x1, 0x8, 0xfffffff9, 0x854, 0x5, 0x1, 0x9fc0, 0x4, 0xb, 0x5, 0x3, 0x7, 0x400, 0xbb3, 0x0, 0xe291, 0xffff4b0b, 0x9, 0x4, 0x80000001, 0x4, 0x8, 0x0, 0x5be4, 0x240, 0x4, 0x10001, 0xffffe450, 0xf8000000, 0x1, 0x200, 0x6, 0x3c1, 0x2, 0x2, 0x85ef, 0x5, 0x6, 0x1000000, 0x9, 0x7, 0xed9, 0x800, 0x1, 0x80000000, 0x1200, 0x0, 0x1, 0x101, 0x985, 0x8, 0x9, 0x736, 0xfffffff9, 0x3, 0x6, 0xc, 0x5, 0xfffffffd, 0x4, 0xb4, 0x8, 0x5c2b, 0x10, 0xffffffff, 0x200, 0x7fff, 0x6065, 0x1, 0x9, 0xcfc, 0x80, 0xd, 0xff, 0x1, 0x2, 0x1, 0x4, 0x80000001, 0x7, 0x1000, 0x9, 0x6, 0x0, 0x8, 0x1c1e5cb6, 0x1, 0x1, 0x0, 0x1, 0xffffffff, 0x4, 0x7f, 0x1, 0x7, 0x0, 0x8, 0x2, 0x8001, 0x9, 0xfffffbff, 0x9, 0x1, 0x2, 0x9150, 0x2, 0x8, 0xfffffffe, 0x54, 0x5, 0x6, 0x5, 0x5, 0x9, 0x10, 0x80000001, 0x0, 0x3, 0x8, 0x10, 0x20, 0x5c71, 0xf, 0x9, 0x80000000, 0x101, 0x7, 0x3, 0x7f, 0x3, 0x2, 0x2, 0x7f, 0x5, 0x10, 0x6, 0x3, 0xf, 0x5, 0x6, 0x10001, 0x0, 0x80000001, 0x4, 0x4, 0x4, 0x4, 0x5fe4, 0x3e, 0x9, 0x38, 0x80000001, 0x1, 0x20000, 0x5, 0x7, 0x8, 0x0, 0x9, 0x8, 0x5, 0x7fff, 0x3ff, 0x5, 0xe, 0xe3b295a, 0xfffffff8, 0x3, 0x101, 0xfffffff9, 0x10, 0xfb17, 0x9, 0x3, 0x3, 0x6b, 0x3, 0x800, 0x1, 0x4, 0xcf, 0x2, 0x0, 0x40, 0x82, 0x8, 0x3, 0xbf, 0x2, 0x5, 0xffff, 0x1000, 0x5, 0x8, 0x102, 0x6, 0x5a, 0x7, 0x80000000, 0x4, 0x2, 0xffff, 0xb405, 0x7ffe, 0x4, 0x2, 0x9, 0x7, 0x3, 0x0, 0x8, 0x8, 0xd0, 0xd, 0x5, 0x8, 0x0, 0xffffffff, 0x1, 0x9, 0x8e, 0x8, 0x6, 0xb47, 0x29d9b475, 0x8, 0x3cbf, 0x9, 0x9, 0x2, 0x7, 0x8, 0x25, 0x120, 0xffffffff, 0x3, 0x8, 0x7, 0x8, 0x8b4ea987, 0x3, 0x4, 0xffff, 0x3, 0x3, 0x1, 0x9, 0xfffffe00, 0x5, 0xa, 0xfffffff7, 0x3, 0x7, 0xfffffff8, 0x1, 0xfff, 0xa413, 0xbb3, 0x9, 0xf, 0x5, 0x9, 0x40, 0xd, 0x9, 0x6, 0x7f, 0x2, 0xb09, 0x9, 0x8, 0xe3, 0x7, 0x40400000, 0x200, 0x7, 0xfffffff8, 0x0, 0x6, 0xfffffffc, 0x5, 0x3, 0xa51f, 0x2, 0x8, 0x2, 0x32c, 0x2, 0xfffffffe, 0x4, 0x40, 0xbfe5, 0x6, 0x10, 0xffffffff, 0x0, 0xaa, 0x5, 0x9, 0x9, 0x6, 0x10000, 0x0, 0x1ff, 0x7, 0x1, 0x1, 0x5, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x1, 0x100, 0x4, 0x6c85, 0x8, 0xb, 0x100, 0x4, 0x7ff, 0x8, 0x2eb, 0xe893, 0x9, 0x7, 0x80d4, 0x0, 0x9861, 0xf000, 0x80000000, 0x7, 0x8000, 0x7, 0x2, 0x80, 0x6, 0x8, 0x8, 0x9, 0x7, 0x9, 0x5, 0x3, 0x2e8, 0x80004, 0x10, 0xffffffb9, 0x0, 0x1, 0x1000, 0x5, 0x40, 0x7, 0x100, 0x9, 0x8a0, 0xfa, 0x9, 0x4, 0x45, 0x1c, 0x0, 0xda, 0x6, 0x3, 0x4, 0x4, 0xef7e, 0x40, 0x9, 0x1, 0xf243, 0x7, 0x9, 0x9, 0x2, 0x0, 0x2000000, 0x620f, 0x6, 0x3, 0x0, 0x8, 0x2, 0x5, 0x3, 0xfffffffa, 0x3, 0x0, 0xf0f8, 0x4, 0x7, 0x5, 0x7, 0x4, 0x4, 0x5, 0x1e, 0x1, 0x401, 0x81, 0xfffffff2, 0x9, 0x4, 0x7ff, 0x5, 0x7, 0x7, 0xfffff52f, 0x2, 0x5, 0x6, 0x7, 0x0, 0x3, 0x2, 0xd7, 0x5e58, 0x9, 0xa, 0x8, 0x8000, 0x9, 0x800, 0xa95, 0x0, 0x8, 0x1, 0x5, 0x1, 0x7, 0x8, 0x3, 0x9, 0x7, 0x10000, 0xd, 0xc, 0x6, 0x825, 0x6, 0x101, 0x8, 0x80, 0x4, 0x10, 0x9, 0x7fffffff, 0x140, 0x7, 0x1, 0x9, 0x101, 0x0, 0x101, 0x4, 0xa33, 0x7, 0x3, 0x10001, 0xf, 0x2, 0xe724, 0x3, 0x200, 0x5, 0x9, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x0, 0x9, 0x100, 0x3, 0x95f, 0x6, 0x9, 0x3, 0x8001, 0x1, 0x0, 0x3, 0x0, 0x3, 0x97, 0x7, 0x400, 0xffffff78, 0xa, 0x800, 0x5, 0x7, 0x79b, 0x8, 0x10000, 0x6, 0x3, 0xfd340000, 0xa61, 0xfffffffc, 0x1ff, 0x3, 0x3, 0xffff0000, 0x8001, 0x4, 0x0, 0x6, 0x78da, 0x40004, 0x200, 0x650, 0x3c, 0x80000001, 0x6, 0x9, 0xa1, 0x10, 0x8000, 0xfffff800, 0x8, 0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x6, 0xf3b, 0x2, 0x4, 0x7, 0xd157, 0x8, 0xe3, 0x0, 0x2, 0xccf1]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 740.939353ms ago: executing program 4 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 645.207985ms ago: executing program 0 (id=756): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 566.735037ms ago: executing program 3 (id=757): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r2}) 530.445547ms ago: executing program 4 (id=758): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x800, 0xfffffffc) 400.655741ms ago: executing program 3 (id=759): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000032101"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 350.701032ms ago: executing program 4 (id=760): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f00000003c0)={[{@nombcache}, {@nouid32}, {@norecovery}, {@nodelalloc}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='cgroup\x00', 0xfffffffffffffffc, 0xffffffffffffff9c) open(&(0x7f0000000140)='.\x00', 0xa0c0, 0x172) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)=0x4202c78) set_mempolicy(0x6006, 0x0, 0x4800000004) write$ppp(r3, &(0x7f0000000200)='\x00\x00', 0x2) 292.784693ms ago: executing program 3 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) 264.118814ms ago: executing program 2 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000160000000010800024000"], 0xdc}}, 0x0) 90.646619ms ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008000100000000000c0001"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d92a4fbab27cfa3c000000", @ANYRESDEC=r3, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='rd_pa', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) 0s ago: executing program 2 (id=764): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 65.434249][ T4173] cgroup: Unknown subsys name 'net' [ 65.582520][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.126517][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.305202][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.414573][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.452788][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.460159][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.469474][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.481265][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.488939][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.497078][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.523841][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.590742][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.610726][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.628384][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.688767][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.699441][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.707397][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.716267][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.743432][ T4186] team0: Port device team_slave_0 added [ 69.754958][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.762239][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.770367][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.792414][ T4186] team0: Port device team_slave_1 added [ 69.826709][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.834027][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.842771][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.852140][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.859630][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.868176][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.888330][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.895714][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.922553][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.963740][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.971509][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.997980][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.011270][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.037169][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.058200][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.069520][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.079258][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.086854][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.095377][ T4197] device bridge_slave_0 entered promiscuous mode [ 70.107961][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.115576][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.123975][ T4197] device bridge_slave_1 entered promiscuous mode [ 70.172801][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.197976][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.205265][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.213368][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.230200][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.248551][ T4188] team0: Port device team_slave_0 added [ 70.262941][ T4187] team0: Port device team_slave_0 added [ 70.272417][ T4187] team0: Port device team_slave_1 added [ 70.278701][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.286482][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.294641][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.312956][ T4197] team0: Port device team_slave_0 added [ 70.321790][ T4197] team0: Port device team_slave_1 added [ 70.329796][ T4188] team0: Port device team_slave_1 added [ 70.372702][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.379902][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.403425][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.410662][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.445578][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.469295][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.476522][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.503008][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.521888][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.530202][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.557207][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.577945][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.585201][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.612510][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.626188][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.638751][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.660452][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.667599][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.695013][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.731393][ T4190] team0: Port device team_slave_0 added [ 70.738640][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.747077][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.773667][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.820585][ T4190] team0: Port device team_slave_1 added [ 70.836429][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.843708][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.850600][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.858538][ T4188] Cannot create hsr debugfs directory [ 70.886646][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.896083][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.903041][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.911796][ T4187] Cannot create hsr debugfs directory [ 70.953900][ T4197] device hsr_slave_0 entered promiscuous mode [ 70.962717][ T4197] device hsr_slave_1 entered promiscuous mode [ 70.970119][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.980379][ T4197] Cannot create hsr debugfs directory [ 70.991447][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.998738][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.025902][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.042428][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.050125][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.058025][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 71.077210][ T4193] Bluetooth: hci3: command 0x0409 tx timeout [ 71.089911][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 71.096222][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 71.096419][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.102631][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 71.219349][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.226508][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.233452][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.241500][ T4190] Cannot create hsr debugfs directory [ 71.466647][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473405][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.503215][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.521376][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.533457][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.553727][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.599000][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.623040][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.635480][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.646917][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.699435][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.719966][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.732025][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.755987][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.803920][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.828293][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.839686][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.852292][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.871280][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.915587][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.926872][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.949735][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.982403][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.016416][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.027980][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.038629][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.047964][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.057987][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.069004][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.076561][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.086083][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.098762][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.110827][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.123143][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.136358][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.147890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.157459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.167075][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.174288][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.182997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.194352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.203397][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.210546][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.218595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.232466][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.261897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.271419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.280442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.294466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.304563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.314032][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.321408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.333470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.342968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.356748][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.369915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.411010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.423423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.432669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.443506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.452845][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.460160][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.468955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.479628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.488514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.497934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.506951][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.514149][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.522331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.531595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.540647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.550103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.559787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.569247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.578211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.587381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.601789][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.632413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.646831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.660707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.669654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.679266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.688601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.699005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.708346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.717804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.727896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.737584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.746871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.755939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.764779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.781905][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.801674][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.816589][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.834492][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.845823][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.854596][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.876544][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.909054][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.932772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.942337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.985382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.023800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.041345][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.048748][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.096116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.105568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.120735][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.127931][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.135825][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 73.142525][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 73.148822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.155772][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 73.160281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.185342][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 73.195795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.205355][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 73.216802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.240051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.263238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.286102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.313782][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.346113][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.378996][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.387043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.397197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.405814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.417344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.426434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.435597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.443427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.451820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.487784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.498664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.518909][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.534778][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.572270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.580838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.600086][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.640197][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.668858][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.695291][ T4186] device veth0_vlan entered promiscuous mode [ 73.712811][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.722090][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.734444][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.743619][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.752550][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.782440][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.792089][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.806178][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.830959][ T4186] device veth1_vlan entered promiscuous mode [ 73.848263][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.870594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.883884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.897016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.912644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.921349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.939822][ T4197] device veth0_vlan entered promiscuous mode [ 73.961412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.969609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.992636][ T4197] device veth1_vlan entered promiscuous mode [ 74.003261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.012488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.022780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.033337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.042352][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.049680][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.062349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.071294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.080020][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.087511][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.096566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.114034][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.131871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.167173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.180305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.189946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.203116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.212077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.226388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.235908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.244750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.253708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.277190][ T4197] device veth0_macvtap entered promiscuous mode [ 74.291407][ T4186] device veth0_macvtap entered promiscuous mode [ 74.305004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.313496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.322552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.332858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.346460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.355148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.364237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.373316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.381788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.390472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.400666][ T4188] device veth0_vlan entered promiscuous mode [ 74.411373][ T4197] device veth1_macvtap entered promiscuous mode [ 74.426668][ T4186] device veth1_macvtap entered promiscuous mode [ 74.458529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.467431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.476258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.487176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.497758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.507113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.528030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.537913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.561187][ T4187] device veth0_vlan entered promiscuous mode [ 74.568991][ T4188] device veth1_vlan entered promiscuous mode [ 74.587101][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.599437][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.609914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.618971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.628450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.637917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.647178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.657562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.666653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.677053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.686167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.713200][ T4187] device veth1_vlan entered promiscuous mode [ 74.723160][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.737629][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.751153][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.765602][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.774504][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784169][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.793395][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.819355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.829680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.843905][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.858483][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.874493][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.919138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.932653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.944911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.954146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.966603][ T4188] device veth0_macvtap entered promiscuous mode [ 74.990764][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.006146][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.019348][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.030763][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069100][ T4187] device veth0_macvtap entered promiscuous mode [ 75.086583][ T4188] device veth1_macvtap entered promiscuous mode [ 75.094361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.108522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.118194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.127849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.189889][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.203881][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.215363][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 75.216619][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.225685][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 75.236097][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.250329][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.256926][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 75.263766][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 75.269795][ T4187] device veth1_macvtap entered promiscuous mode [ 75.276484][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 75.284643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.294543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.303587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.314219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.339495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.348767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.366768][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.382221][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.393112][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.404556][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.416647][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.430835][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440380][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.449706][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.460802][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.497821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.541593][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.546572][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.557229][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.571175][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.582506][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.593673][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.606518][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.617335][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.633813][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.653005][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.670000][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.682648][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.693201][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.705008][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.715415][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.726263][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.738099][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.747809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.756333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.766607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.780724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.790359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.841345][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.852430][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.864430][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.873749][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.901588][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.927301][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.963070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.971436][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.980629][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.015209][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.023184][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.025192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.049585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.085132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.103391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.186462][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.201252][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.219186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.235339][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.251255][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.272030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.314712][ T4190] device veth0_vlan entered promiscuous mode [ 76.322324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.331505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.344106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.352446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.362643][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.381603][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.413302][ T4190] device veth1_vlan entered promiscuous mode [ 76.444587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.461845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.508767][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.546567][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.578196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.610990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.625761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.664502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.689074][ T4190] device veth0_macvtap entered promiscuous mode [ 76.702406][ T4279] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 76.720275][ T4190] device veth1_macvtap entered promiscuous mode [ 76.765030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.778438][ T4276] loop4: detected capacity change from 0 to 512 [ 76.786949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.857402][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.896151][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.954749][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.993669][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.027862][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.070040][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.089236][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.109462][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.142503][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.198998][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.233575][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.269028][ T4297] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9'. [ 77.280898][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.295348][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 77.298966][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302492][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 77.350643][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 77.351100][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.367042][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 77.375956][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 77.427311][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.447820][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.463074][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.478782][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.488607][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.535534][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.553507][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.567209][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.611280][ T4299] netlink: 'syz.2.10': attribute type 12 has an invalid length. [ 77.634645][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.645002][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.686987][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714675][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727140][ T4301] loop3: detected capacity change from 0 to 512 [ 77.796000][ T4301] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.841073][ T4301] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.856348][ T4301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.875562][ T4301] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 77.954036][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.974450][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.154342][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.199651][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.208382][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.225815][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.638806][ T4308] loop1: detected capacity change from 0 to 128 [ 78.897047][ T4308] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 79.004185][ T4315] loop3: detected capacity change from 0 to 764 [ 79.142542][ T4319] loop2: detected capacity change from 0 to 1024 [ 79.163343][ T4319] ======================================================= [ 79.163343][ T4319] WARNING: The mand mount option has been deprecated and [ 79.163343][ T4319] and is ignored by this kernel. Remove the mand [ 79.163343][ T4319] option from the mount to silence this warning. [ 79.163343][ T4319] ======================================================= [ 79.175534][ T4315] netlink: 'syz.3.13': attribute type 9 has an invalid length. [ 79.270676][ T4315] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.393705][ T4324] loop1: detected capacity change from 0 to 2048 [ 79.438904][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 79.571744][ T4319] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 79.617069][ T4324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.625908][ T4319] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.658105][ T26] audit: type=1800 audit(1787244597.795:2): pid=4324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.770205][ T4338] loop3: detected capacity change from 0 to 512 [ 79.784663][ T4340] device erspan0 entered promiscuous mode [ 80.009342][ T4338] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.031300][ T4340] syz.0.25 (4340) used greatest stack depth: 20240 bytes left [ 80.065099][ T4338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.094180][ T4343] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.105446][ T4338] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 80.226723][ T4276] ODEBUG: Out of memory. ODEBUG disabled [ 81.010239][ T4359] netlink: 96 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.039383][ T4357] loop1: detected capacity change from 0 to 8192 [ 81.046882][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.063322][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.074652][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.163328][ T4357] attempt to access beyond end of device [ 81.163328][ T4357] loop1: rw=0, want=57848, limit=8192 [ 81.191849][ T4357] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.209797][ T4357] attempt to access beyond end of device [ 81.209797][ T4357] loop1: rw=0, want=57848, limit=8192 [ 81.222317][ T4357] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.244228][ T26] audit: type=1800 audit(1787244599.375:3): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.30" name="file2" dev="loop1" ino=1048601 res=0 errno=0 [ 81.310706][ T4367] loop0: detected capacity change from 0 to 512 [ 81.404992][ T4367] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.462383][ T4367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.515024][ T4367] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 82.946185][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 82.992187][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 83.008284][ T4417] device veth0_macvtap left promiscuous mode [ 83.036322][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 83.062026][ T4276] Set syz0 is full, maxelem 65536 reached [ 83.084161][ T4417] Zero length message leads to an empty skb [ 83.288399][ T4429] loop3: detected capacity change from 0 to 512 [ 83.394671][ T4439] netlink: 88 bytes leftover after parsing attributes in process `syz.2.64'. [ 83.463187][ T4429] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.479087][ T4437] loop1: detected capacity change from 0 to 1764 [ 83.510701][ T4429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.539084][ T4429] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 83.597632][ T4437] attempt to access beyond end of device [ 83.597632][ T4437] loop1: rw=0, want=7180648576, limit=1764 [ 83.686625][ T4437] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 83.711717][ T4437] attempt to access beyond end of device [ 83.711717][ T4437] loop1: rw=0, want=7180648576, limit=1764 [ 83.774594][ T4437] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 83.855234][ T26] audit: type=1800 audit(1787244601.995:4): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 83.915205][ T4445] loop4: detected capacity change from 0 to 512 [ 84.506571][ T4464] device syzkaller0 entered promiscuous mode [ 84.522430][ T4464] tipc: Started in network mode [ 84.528448][ T4464] tipc: Node identity 2652e8b48cdd, cluster identity 4711 [ 84.536289][ T4464] tipc: Enabled bearer , priority 0 [ 84.596600][ T4463] tipc: Resetting bearer [ 84.663158][ T4463] tipc: Disabling bearer [ 85.389591][ T4496] loop2: detected capacity change from 0 to 512 [ 85.440261][ T4445] Set syz0 is full, maxelem 65536 reached [ 85.453833][ T4496] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.480385][ T4496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.549985][ T4496] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 85.689003][ T4504] loop0: detected capacity change from 0 to 512 [ 86.247760][ T4520] loop1: detected capacity change from 0 to 128 [ 86.509290][ T26] audit: type=1800 audit(1787244604.655:5): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 86.634005][ T4526] attempt to access beyond end of device [ 86.634005][ T4526] loop1: rw=2049, want=186, limit=128 [ 86.679802][ T4520] attempt to access beyond end of device [ 86.679802][ T4520] loop1: rw=2049, want=250, limit=128 [ 86.814405][ T4532] 9pnet: Could not find request transport: fd0x0000000000000003 [ 86.889251][ T4533] loop4: detected capacity change from 0 to 2048 [ 86.986892][ T4533] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 87.005769][ T4533] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.077909][ T4533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.96: bg 0: block 345: padding at end of block bitmap is not set [ 87.097981][ T4533] EXT4-fs (loop4): Remounting filesystem read-only [ 87.438979][ T4550] loop3: detected capacity change from 0 to 512 [ 87.562777][ T4550] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.639137][ T4550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.639247][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 87.665099][ T4550] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 88.375705][ T4572] netlink: 48 bytes leftover after parsing attributes in process `syz.1.112'. [ 88.515932][ T4576] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 89.007689][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 89.042472][ T4588] device macvlan0 entered promiscuous mode [ 89.052561][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 89.266470][ T4601] device syzkaller0 entered promiscuous mode [ 89.293495][ T4604] loop2: detected capacity change from 0 to 512 [ 89.318025][ T4601] tipc: Enabled bearer , priority 0 [ 89.365466][ T4601] tipc: Resetting bearer [ 89.431968][ T4604] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.451423][ T4598] tipc: Resetting bearer [ 89.465150][ T4604] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.492343][ T4604] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 89.505921][ T4598] tipc: Disabling bearer [ 90.352162][ T4621] device dummy0 entered promiscuous mode [ 90.432834][ T4621] device dummy0 left promiscuous mode [ 90.776568][ T4638] device vlan0 entered promiscuous mode [ 90.845772][ T4638] team0: Port device vlan0 added [ 90.873766][ T4642] device syzkaller0 entered promiscuous mode [ 90.918567][ T4642] tipc: Started in network mode [ 90.923507][ T4642] tipc: Node identity 16a4140d4436, cluster identity 4711 [ 91.000705][ T4642] tipc: Enabled bearer , priority 0 [ 91.037941][ T4652] loop2: detected capacity change from 0 to 512 [ 91.075389][ T4644] tipc: Resetting bearer [ 91.132588][ T4641] tipc: Resetting bearer [ 91.225658][ T4652] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.226066][ T4641] tipc: Disabling bearer [ 91.244907][ T4652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.260868][ T4652] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 91.296543][ T4656] netlink: 44 bytes leftover after parsing attributes in process `syz.4.148'. [ 92.063010][ T4504] Set syz0 is full, maxelem 65536 reached [ 92.203780][ T1107] cfg80211: failed to load regulatory.db [ 92.442551][ T4688] loop3: detected capacity change from 0 to 1024 [ 92.499578][ T4688] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 92.558898][ T4691] device syzkaller0 entered promiscuous mode [ 92.595119][ T4688] EXT4-fs (loop3): invalid journal inode [ 92.613384][ T4691] tipc: Started in network mode [ 92.618666][ T4688] EXT4-fs (loop3): can't get journal size [ 92.635637][ T4688] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 92.643713][ T4691] tipc: Node identity 56f9f8c4ce2b, cluster identity 4711 [ 92.665845][ T4691] tipc: Enabled bearer , priority 0 [ 92.747008][ T4691] tipc: Resetting bearer [ 92.847231][ T4690] tipc: Resetting bearer [ 92.890900][ T4690] tipc: Disabling bearer [ 93.110442][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 93.244249][ T4719] loop1: detected capacity change from 0 to 512 [ 93.368190][ T4719] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.380370][ T4721] loop2: detected capacity change from 0 to 512 [ 93.449728][ T4719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.511690][ T4719] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 94.040931][ T4739] loop3: detected capacity change from 0 to 1024 [ 94.069556][ T4738] loop0: detected capacity change from 0 to 1024 [ 94.086737][ T4741] device syzkaller0 entered promiscuous mode [ 94.126601][ T4738] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 94.127899][ T4741] tipc: Started in network mode [ 94.155595][ T4741] tipc: Node identity eaad6383f592, cluster identity 4711 [ 94.173365][ T4741] tipc: Enabled bearer , priority 0 [ 94.199730][ T4738] EXT4-fs (loop0): invalid journal inode [ 94.208570][ T4738] EXT4-fs (loop0): can't get journal size [ 94.231103][ T4741] tipc: Resetting bearer [ 94.257359][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 94.271416][ T4739] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,mb_optimize_scan=0x0000000000000001,resuid=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: writeback. [ 94.315175][ T4740] tipc: Resetting bearer [ 94.325217][ T4739] ext4 filesystem being mounted at /37/mysys supports timestamps until 2038-01-19 (0x7fffffff) [ 94.383230][ T4740] tipc: Disabling bearer [ 94.960835][ T4757] loop0: detected capacity change from 0 to 2048 [ 95.065056][ T4747] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 95.175343][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 95.283215][ T4756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 95.341218][ T4756] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.364333][ T4756] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.364333][ T4756] [ 95.403399][ T4756] EXT4-fs (loop0): Total free blocks count 0 [ 95.429578][ T4756] EXT4-fs (loop0): Free/Dirty block details [ 95.437285][ T4756] EXT4-fs (loop0): free_blocks=2415919504 [ 95.445201][ T4756] EXT4-fs (loop0): dirty_blocks=16 [ 95.450486][ T4756] EXT4-fs (loop0): Block reservation details [ 95.491929][ T4756] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 95.571853][ T4618] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 95.587375][ T4618] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.587375][ T4618] [ 96.472642][ T4782] loop4: detected capacity change from 0 to 1024 [ 96.538267][ T4782] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 96.595990][ T4782] EXT4-fs (loop4): invalid journal inode [ 96.602423][ T4782] EXT4-fs (loop4): can't get journal size [ 96.611007][ T4785] device syzkaller0 entered promiscuous mode [ 96.639410][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 96.669632][ T4785] tipc: Started in network mode [ 96.725581][ T4785] tipc: Node identity 12ea6d8a228, cluster identity 4711 [ 96.733177][ T4785] tipc: Enabled bearer , priority 0 [ 96.747999][ T4721] FAULT_INJECTION: forcing a failure. [ 96.747999][ T4721] name failslab, interval 1, probability 10, space 0, times 1 [ 96.748048][ T4795] FAULT_INJECTION: forcing a failure. [ 96.748048][ T4795] name failslab, interval 1, probability 10, space 0, times 1 [ 96.748090][ T4795] CPU: 1 PID: 4795 Comm: syz.1.193 Not tainted syzkaller #0 [ 96.748112][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.791887][ T4795] Call Trace: [ 96.795295][ T4795] [ 96.798287][ T4795] dump_stack_lvl+0x188/0x250 [ 96.803006][ T4795] ? show_regs_print_info+0x20/0x20 [ 96.808463][ T4795] ? load_image+0x410/0x410 [ 96.813049][ T4795] ? prandom_u32+0x217/0x250 [ 96.817767][ T4795] should_fail+0x383/0x4b0 [ 96.822302][ T4795] should_failslab+0x5/0x20 [ 96.826827][ T4795] slab_pre_alloc_hook+0x51/0xc0 [ 96.831802][ T4795] __kmalloc+0x6b/0x340 [ 96.835983][ T4795] ? sk_prot_alloc+0xe7/0x210 [ 96.840776][ T4795] sk_prot_alloc+0xe7/0x210 [ 96.845303][ T4795] ? sk_alloc+0x1d/0x310 [ 96.849582][ T4795] sk_alloc+0x2f/0x310 [ 96.853677][ T4795] __netlink_create+0x6c/0x290 [ 96.858466][ T4795] ? __lock_acquire+0x7b50/0x7b50 [ 96.863591][ T4795] netlink_create+0x3a7/0x510 [ 96.868568][ T4795] ? genl_rcv+0x40/0x40 [ 96.872923][ T4795] __sock_create+0x473/0x910 [ 96.877557][ T4795] __sys_socket+0xe2/0x170 [ 96.882139][ T4795] __x64_sys_socket+0x76/0x80 [ 96.887130][ T4795] do_syscall_64+0x4c/0xa0 [ 96.891686][ T4795] ? clear_bhb_loop+0x30/0x80 [ 96.896484][ T4795] ? clear_bhb_loop+0x30/0x80 [ 96.901275][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.907210][ T4795] RIP: 0033:0x7f6344bdf0d9 [ 96.911657][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.931370][ T4795] RSP: 002b:00007f6342e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 96.939808][ T4795] RAX: ffffffffffffffda RBX: 00007f6344e66fa0 RCX: 00007f6344bdf0d9 [ 96.947893][ T4795] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 96.956122][ T4795] RBP: 00007f6344c76024 R08: 0000000000000000 R09: 0000000000000000 [ 96.964118][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.972253][ T4795] R13: 00007f6344e67038 R14: 00007f6344e66fa0 R15: 00007fff8e1f5c98 [ 96.980347][ T4795] [ 96.983395][ T4721] CPU: 0 PID: 4721 Comm: syz.2.168 Not tainted syzkaller #0 [ 96.985622][ C1] FAULT_INJECTION: forcing a failure. [ 96.985622][ C1] name failslab, interval 1, probability 10, space 0, times 1 [ 96.990887][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.014098][ T4721] Call Trace: [ 97.017413][ T4721] [ 97.020370][ T4721] dump_stack_lvl+0x188/0x250 [ 97.025370][ T4721] ? show_regs_print_info+0x20/0x20 [ 97.030592][ T4721] ? load_image+0x410/0x410 [ 97.035125][ T4721] ? prandom_u32+0x217/0x250 [ 97.039746][ T4721] should_fail+0x383/0x4b0 [ 97.044191][ T4721] should_failslab+0x5/0x20 [ 97.048710][ T4721] slab_pre_alloc_hook+0x51/0xc0 [ 97.053682][ T4721] __kmalloc+0x6b/0x340 [ 97.057862][ T4721] ? hash_ipmark4_resize+0x954/0x1830 [ 97.063356][ T4721] hash_ipmark4_resize+0x954/0x1830 [ 97.068612][ T4721] call_ad+0x437/0x9a0 [ 97.072722][ T4721] ? ip_set_ad+0x9c0/0x9c0 [ 97.077192][ T4721] ? __nla_parse+0x3c/0x50 [ 97.082151][ T4721] ip_set_ad+0x816/0x9c0 [ 97.086508][ T4721] ? ip_set_dump_done+0x2f0/0x2f0 [ 97.091591][ T4721] nfnetlink_rcv_msg+0xbf7/0x1180 [ 97.096639][ T4721] ? arch_stack_walk+0xf2/0x140 [ 97.101755][ T4721] ? nfnetlink_bind+0x280/0x280 [ 97.106688][ T4721] netlink_rcv_skb+0x1e9/0x430 [ 97.111480][ T4721] ? nfnetlink_bind+0x280/0x280 [ 97.116355][ T4721] ? netlink_ack+0xb10/0xb10 [ 97.120978][ T4721] ? bpf_lsm_capable+0x5/0x10 [ 97.125796][ T4721] ? security_capable+0x85/0xb0 [ 97.130684][ T4721] nfnetlink_rcv+0x2b4/0x2450 [ 97.135505][ T4721] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.140916][ T4721] ? lockdep_hardirqs_on+0x94/0x140 [ 97.146140][ T4721] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.151799][ T4721] ? _local_bh_enable+0xa0/0xa0 [ 97.156803][ T4721] ? __dev_queue_xmit+0x1b64/0x2e50 [ 97.162314][ T4721] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 97.167985][ T4721] ? dev_queue_xmit+0x20/0x20 [ 97.172690][ T4721] ? memcpy+0x3c/0x60 [ 97.176696][ T4721] ? __copy_skb_header+0x3ba/0x4f0 [ 97.181851][ T4721] ? skb_clone+0x1f1/0x350 [ 97.186379][ T4721] ? rcu_lock_release+0x5/0x20 [ 97.191193][ T4721] ? __lock_acquire+0x7b50/0x7b50 [ 97.196364][ T4721] netlink_unicast+0x78f/0x940 [ 97.201306][ T4721] netlink_sendmsg+0x8ba/0xbe0 [ 97.206339][ T4721] ? netlink_getsockopt+0x570/0x570 [ 97.211580][ T4721] ? aa_sock_msg_perm+0x94/0x150 [ 97.216560][ T4721] ? apparmor_socket_sendmsg+0x88/0x230 [ 97.222255][ T4721] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.227701][ T4721] ? security_socket_sendmsg+0x7c/0xa0 [ 97.233206][ T4721] ? netlink_getsockopt+0x570/0x570 [ 97.238439][ T4721] ____sys_sendmsg+0x5be/0x8f0 [ 97.243259][ T4721] ? __sys_sendmsg_sock+0x30/0x30 [ 97.248320][ T4721] ? import_iovec+0x6f/0xa0 [ 97.252854][ T4721] ___sys_sendmsg+0x236/0x2e0 [ 97.257570][ T4721] ? __sys_sendmsg+0x290/0x290 [ 97.262403][ T4721] __se_sys_sendmsg+0x1b7/0x2a0 [ 97.267375][ T4721] ? __x64_sys_sendmsg+0x80/0x80 [ 97.272354][ T4721] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.278388][ T4721] ? lockdep_hardirqs_on+0x94/0x140 [ 97.283627][ T4721] do_syscall_64+0x4c/0xa0 [ 97.288078][ T4721] ? clear_bhb_loop+0x30/0x80 [ 97.292906][ T4721] ? clear_bhb_loop+0x30/0x80 [ 97.297706][ T4721] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.303638][ T4721] RIP: 0033:0x7f8a6402f0d9 [ 97.308083][ T4721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.328040][ T4721] RSP: 002b:00007f8a62287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.336600][ T4721] RAX: ffffffffffffffda RBX: 00007f8a642b6fa0 RCX: 00007f8a6402f0d9 [ 97.344606][ T4721] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 97.352608][ T4721] RBP: 00007f8a640c6024 R08: 0000000000000000 R09: 0000000000000000 [ 97.360618][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.368619][ T4721] R13: 00007f8a642b7038 R14: 00007f8a642b6fa0 R15: 00007ffee19c41f8 [ 97.376807][ T4721] [ 97.379855][ C1] CPU: 1 PID: 4795 Comm: syz.1.193 Not tainted syzkaller #0 [ 97.387276][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.397551][ C1] Call Trace: [ 97.400875][ C1] [ 97.403759][ C1] dump_stack_lvl+0x188/0x250 [ 97.408503][ C1] ? show_regs_print_info+0x20/0x20 [ 97.413770][ C1] ? load_image+0x410/0x410 [ 97.418344][ C1] ? prandom_u32+0x217/0x250 [ 97.423529][ C1] should_fail+0x383/0x4b0 [ 97.428107][ C1] should_failslab+0x5/0x20 [ 97.432665][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 97.437835][ C1] ? skb_clone+0x1bd/0x350 [ 97.442401][ C1] kmem_cache_alloc+0x3d/0x280 [ 97.447401][ C1] skb_clone+0x1bd/0x350 [ 97.451712][ C1] ? netem_enqueue+0x11aa/0x37f0 [ 97.456720][ C1] netem_enqueue+0x11b7/0x37f0 [ 97.461562][ C1] ? qdisc_purge_queue+0x3d0/0x3d0 [ 97.466839][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 97.471906][ C1] ? __rwlock_init+0x140/0x140 [ 97.476848][ C1] dev_qdisc_enqueue+0x48/0x210 [ 97.481829][ C1] __dev_queue_xmit+0xbde/0x2e50 [ 97.487058][ C1] ? call_timer_fn+0x17b/0x540 [ 97.491857][ C1] ? __run_timers+0x56c/0x810 [ 97.496753][ C1] ? dev_queue_xmit+0x20/0x20 [ 97.501455][ C1] ? rcu_lock_release+0x5/0x20 [ 97.506253][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 97.511558][ C1] ? mark_lock+0x94/0x320 [ 97.515935][ C1] ? eth_header+0x117/0x200 [ 97.520466][ C1] ? memcpy+0x3c/0x60 [ 97.524470][ C1] ? eth_header+0x117/0x200 [ 97.529003][ C1] ? llc_sysctl_exit+0x60/0x60 [ 97.533802][ C1] tipc_l2_send_msg+0x2eb/0x3a0 [ 97.538692][ C1] tipc_bearer_xmit_skb+0x292/0x3c0 [ 97.544199][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 97.549563][ C1] tipc_disc_timeout+0x5e1/0x740 [ 97.554532][ C1] ? tipc_disc_create+0x910/0x910 [ 97.559629][ C1] ? tipc_disc_create+0x910/0x910 [ 97.564677][ C1] call_timer_fn+0x17b/0x540 [ 97.569304][ C1] ? tipc_disc_create+0x910/0x910 [ 97.574357][ C1] ? __run_timers+0x810/0x810 [ 97.579071][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 97.584295][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 97.589525][ C1] ? tipc_disc_create+0x910/0x910 [ 97.594591][ C1] __run_timers+0x56c/0x810 [ 97.599153][ C1] ? detach_timer+0x2b0/0x2b0 [ 97.603867][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.609891][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 97.614871][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 97.621370][ C1] run_timer_softirq+0x63/0xf0 [ 97.626187][ C1] handle_softirqs+0x336/0x830 [ 97.631097][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 97.635984][ C1] ? do_softirq+0x210/0x210 [ 97.640536][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 97.645807][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 97.651058][ C1] __irq_exit_rcu+0x13b/0x230 [ 97.655769][ C1] ? irq_exit_rcu+0x20/0x20 [ 97.660307][ C1] irq_exit_rcu+0x5/0x20 [ 97.664585][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 97.670250][ C1] [ 97.673208][ C1] [ 97.676180][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.682184][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 97.688103][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 66 89 f7 e8 f0 43 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 97.707861][ C1] RSP: 0018:ffffc9000328f9c0 EFLAGS: 00000282 [ 97.713953][ C1] RAX: 3f2bcfdd3228e800 RBX: 0000000000000000 RCX: 3f2bcfdd3228e800 [ 97.722126][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 97.730301][ C1] RBP: ffffc9000328fa60 R08: ffffffff8d8b18ef R09: 1ffffffff1b1631d [ 97.738412][ C1] R10: dffffc0000000000 R11: fffffbfff1b1631e R12: 0000000000000000 [ 97.746583][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000651f38 [ 97.754785][ C1] ? __cond_resched+0xd0/0xd0 [ 97.759593][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 97.765509][ C1] irqentry_exit+0x63/0x70 [ 97.770041][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 97.775527][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 97.781103][ C1] Code: e8 87 51 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 73 51 c0 f7 eb 06 e8 6c 51 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 97.800852][ C1] RSP: 0018:ffffc9000328fb20 EFLAGS: 00000287 [ 97.807125][ C1] RAX: ffffffff89b8ac24 RBX: dffffc0000000000 RCX: 0000000000080000 [ 97.815131][ C1] RDX: ffffc90003c33000 RSI: 000000000003f7ed RDI: 000000000003f7ee [ 97.823119][ C1] RBP: ffffc9000328fc18 R08: 0000000000000003 R09: 0000000000000004 [ 97.831205][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 97.839198][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000651f68 [ 97.847285][ C1] ? dump_stack_lvl+0x204/0x250 [ 97.852261][ C1] ? show_regs_print_info+0x20/0x20 [ 97.857701][ C1] ? load_image+0x410/0x410 [ 97.862236][ C1] ? prandom_u32+0x217/0x250 [ 97.866872][ C1] should_fail+0x383/0x4b0 [ 97.871321][ C1] should_failslab+0x5/0x20 [ 97.875850][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 97.881516][ C1] __kmalloc+0x6b/0x340 [ 97.885772][ C1] ? sk_prot_alloc+0xe7/0x210 [ 97.890675][ C1] sk_prot_alloc+0xe7/0x210 [ 97.895624][ C1] ? sk_alloc+0x1d/0x310 [ 97.899975][ C1] sk_alloc+0x2f/0x310 [ 97.904181][ C1] __netlink_create+0x6c/0x290 [ 97.908964][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 97.914108][ C1] netlink_create+0x3a7/0x510 [ 97.918898][ C1] ? genl_rcv+0x40/0x40 [ 97.923338][ C1] __sock_create+0x473/0x910 [ 97.927967][ C1] __sys_socket+0xe2/0x170 [ 97.932497][ C1] __x64_sys_socket+0x76/0x80 [ 97.937281][ C1] do_syscall_64+0x4c/0xa0 [ 97.941716][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.946545][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.951273][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.957187][ C1] RIP: 0033:0x7f6344bdf0d9 [ 97.961675][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.981733][ C1] RSP: 002b:00007f6342e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 97.990646][ C1] RAX: ffffffffffffffda RBX: 00007f6344e66fa0 RCX: 00007f6344bdf0d9 [ 97.998730][ C1] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 98.006985][ C1] RBP: 00007f6344c76024 R08: 0000000000000000 R09: 0000000000000000 [ 98.015452][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.024172][ C1] R13: 00007f6344e67038 R14: 00007f6344e66fa0 R15: 00007fff8e1f5c98 [ 98.032530][ C1] [ 98.121703][ T4237] tipc: Node number set to 812281226 [ 98.184951][ T4800] loop3: detected capacity change from 0 to 512 [ 98.210915][ T4785] tipc: Resetting bearer [ 98.230788][ T4800] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.250790][ T4784] tipc: Resetting bearer [ 98.271088][ T4800] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.300868][ T4784] tipc: Disabling bearer [ 98.312166][ T4800] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 98.482022][ T4808] loop1: detected capacity change from 0 to 512 [ 99.916238][ T4838] tmpfs: Bad value for 'mpol' [ 100.088877][ T4842] loop2: detected capacity change from 0 to 1024 [ 100.150912][ T4842] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 100.213250][ T4842] EXT4-fs (loop2): invalid journal inode [ 100.225141][ T4842] EXT4-fs (loop2): can't get journal size [ 100.243851][ T4842] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 102.025310][ T4808] Set syz0 is full, maxelem 65536 reached [ 102.110854][ T4858] loop2: detected capacity change from 0 to 128 [ 102.166041][ T4858] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.212781][ T4858] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.263522][ T4872] loop3: detected capacity change from 0 to 512 [ 102.357365][ T4872] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.407275][ T4872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.473645][ T4872] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 103.110155][ T4884] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.167994][ T4883] loop1: detected capacity change from 0 to 1024 [ 103.222918][ T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.256850][ T4879] loop0: detected capacity change from 0 to 8192 [ 103.276977][ T4883] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 103.301746][ T4883] EXT4-fs (loop1): invalid journal inode [ 103.307807][ T4883] EXT4-fs (loop1): can't get journal size [ 103.342658][ T4883] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 103.510598][ T4889] loop2: detected capacity change from 0 to 512 [ 103.814555][ T4619] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x26 [ 103.989655][ T4907] loop1: detected capacity change from 0 to 164 [ 104.840268][ T4889] Set syz0 is full, maxelem 65536 reached [ 104.938218][ T4920] loop4: detected capacity change from 0 to 128 [ 104.976604][ T4920] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.994579][ T4920] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.127619][ T4930] loop3: detected capacity change from 0 to 1024 [ 105.231103][ T4930] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 105.249313][ T4930] EXT4-fs (loop3): invalid journal inode [ 105.256886][ T4930] EXT4-fs (loop3): can't get journal size [ 105.265115][ T4930] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 105.995596][ T4877] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.035342][ T4939] loop1: detected capacity change from 0 to 512 [ 106.075217][ T4939] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.098943][ T4939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.112003][ T4939] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 106.283936][ T4947] loop3: detected capacity change from 0 to 512 [ 106.678100][ T4898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.108396][ T4969] loop1: detected capacity change from 0 to 128 [ 107.173225][ T4969] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.203136][ T4969] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.210130][ T155] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.322466][ T4989] loop0: detected capacity change from 0 to 512 [ 108.365993][ T4989] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.469548][ T4994] loop1: detected capacity change from 0 to 512 [ 108.522097][ T4999] loop2: detected capacity change from 0 to 128 [ 108.539069][ T4994] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.556930][ T4994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.566079][ T4997] Need at least one configuration in g1. [ 108.574204][ T4994] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 108.607981][ T4997] udc usbip-vudc.0: failed to start g1: -22 [ 108.663106][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.715446][ T4999] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.162900][ T5014] loop0: detected capacity change from 0 to 128 [ 109.241651][ T5014] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.281730][ T5014] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.620585][ T5023] device syzkaller1 entered promiscuous mode [ 110.274584][ T4934] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.432650][ T5030] loop4: detected capacity change from 0 to 512 [ 110.609521][ T5030] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.941424][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 111.946156][ T4947] Set syz0 is full, maxelem 65536 reached [ 112.014575][ T5054] loop4: detected capacity change from 0 to 512 [ 112.052143][ T5060] device syzkaller1 entered promiscuous mode [ 112.080183][ T5062] loop3: detected capacity change from 0 to 128 [ 112.103239][ T5054] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.132753][ T5054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.152222][ T5063] loop0: detected capacity change from 0 to 512 [ 112.161480][ T5054] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 112.205829][ T5062] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.257730][ T5062] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.372690][ T5069] loop2: detected capacity change from 0 to 512 [ 112.547092][ T5069] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.638400][ T5071] loop1: detected capacity change from 0 to 1024 [ 113.172453][ T4244] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.334753][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.561663][ T5058] Set syz0 is full, maxelem 65536 reached [ 113.612820][ T5089] loop4: detected capacity change from 0 to 1024 [ 113.708942][ T5089] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 113.782952][ T5089] EXT4-fs (loop4): invalid journal inode [ 113.802758][ T5095] netlink: 'syz.0.303': attribute type 3 has an invalid length. [ 113.814758][ T5089] EXT4-fs (loop4): can't get journal size [ 113.876871][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 114.300538][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 114.342798][ T5107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.310'. [ 114.371229][ T5107] device geneve2 entered promiscuous mode [ 114.412245][ T5110] device syzkaller1 entered promiscuous mode [ 114.467714][ T5112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.547701][ T5114] loop4: detected capacity change from 0 to 512 [ 114.598739][ T5114] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.614011][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 114.645055][ T5114] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.675284][ T5114] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 115.609874][ T5120] loop3: detected capacity change from 0 to 512 [ 115.708200][ T5120] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.772622][ T5120] EXT4-fs (loop3): 1 truncate cleaned up [ 115.778779][ T5120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.839474][ T5126] loop4: detected capacity change from 0 to 512 [ 116.155342][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.163841][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.548086][ T5135] loop2: detected capacity change from 0 to 1024 [ 116.574214][ T5135] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 116.606567][ T5135] EXT4-fs (loop2): invalid journal inode [ 116.612428][ T5135] EXT4-fs (loop2): can't get journal size [ 116.638900][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 116.663327][ T5122] Set syz0 is full, maxelem 65536 reached [ 116.773852][ T5139] capability: warning: `syz.4.319' uses 32-bit capabilities (legacy support in use) [ 116.928032][ T5144] loop4: detected capacity change from 0 to 4096 [ 116.973928][ T5144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.243397][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.331802][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.363540][ T5154] loop4: detected capacity change from 0 to 128 [ 117.551078][ T5156] loop4: detected capacity change from 0 to 512 [ 117.608539][ T5156] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.639306][ T5156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.652326][ T5156] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 118.560102][ T5115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.576173][ T5115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.594887][ T5115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.610298][ T5115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.878594][ T5160] openvswitch: netlink: Message has 34 unknown bytes. [ 119.103717][ T5174] loop4: detected capacity change from 0 to 512 [ 119.141931][ T5178] loop2: detected capacity change from 0 to 512 [ 119.421593][ T5187] loop2: detected capacity change from 0 to 512 [ 119.556271][ T5187] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.601738][ T5187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.664615][ T5187] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 119.978113][ T5199] loop1: detected capacity change from 0 to 1024 [ 120.342101][ T5204] device syzkaller1 entered promiscuous mode [ 120.620149][ T5169] Set syz0 is full, maxelem 65536 reached [ 120.653160][ T5206] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.665925][ T5199] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 120.716732][ T5206] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.732532][ T5199] EXT4-fs (loop1): invalid journal inode [ 120.764738][ T5199] EXT4-fs (loop1): can't get journal size [ 120.796408][ T5199] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 121.357892][ T5240] set_capacity_and_notify: 1 callbacks suppressed [ 121.357908][ T5240] loop0: detected capacity change from 0 to 512 [ 121.494022][ T5240] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.515444][ T5240] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.571308][ T5244] loop3: detected capacity change from 0 to 512 [ 121.576415][ T5240] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 121.909032][ T5258] autofs4:pid:5258:autofs_fill_super: called with bogus options [ 122.214164][ T5267] loop1: detected capacity change from 0 to 1024 [ 122.276831][ T5267] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 122.328696][ T5267] EXT4-fs (loop1): invalid journal inode [ 122.334586][ T5267] EXT4-fs (loop1): can't get journal size [ 122.372979][ T5267] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 122.439496][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 122.490891][ T5270] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 122.520408][ T5270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 122.799961][ T5244] Set syz0 is full, maxelem 65536 reached [ 123.002820][ T5283] loop4: detected capacity change from 0 to 1024 [ 123.020907][ T5284] usb usb1: usbfs: process 5284 (syz.3.372) did not claim interface 0 before use [ 123.138342][ T5283] EXT4-fs (loop4): Ignoring removed bh option [ 123.231770][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none. [ 123.394473][ T5296] loop0: detected capacity change from 0 to 512 [ 123.431388][ T5297] loop3: detected capacity change from 0 to 1024 [ 123.507605][ T5296] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 123.565831][ T5296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 123.585064][ T5296] System zones: 1-12 [ 123.599617][ T5297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 123.613779][ T5296] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.686278][ T5297] EXT4-fs (loop3): invalid journal inode [ 123.692039][ T5297] EXT4-fs (loop3): can't get journal size [ 123.700845][ T5297] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 123.741116][ T5296] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.378: attempt to clear invalid blocks 1024 len 1 [ 123.835698][ T5307] capability: warning: `syz.2.381' uses deprecated v2 capabilities in a way that may be insecure [ 123.863536][ T5296] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.378: bg 0: block 361: padding at end of block bitmap is not set [ 123.922299][ T5296] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 123.961694][ T5296] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.378: invalid indirect mapped block 1811939328 (level 0) [ 124.009344][ T5296] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.378: invalid indirect mapped block 2 (level 2) [ 124.039244][ T5313] loop4: detected capacity change from 0 to 512 [ 124.112449][ T5296] EXT4-fs (loop0): 1 truncate cleaned up [ 124.143732][ T5296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 124.530401][ T5323] loop2: detected capacity change from 0 to 512 [ 124.609743][ T5323] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.715245][ T5323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.744987][ T5323] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 125.273527][ T5311] Set syz0 is full, maxelem 65536 reached [ 125.443636][ T5343] loop3: detected capacity change from 0 to 1024 [ 125.630923][ T5343] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 125.675181][ T5343] EXT4-fs (loop3): invalid journal inode [ 125.728729][ T5343] EXT4-fs (loop3): can't get journal size [ 125.787209][ T5343] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 126.419437][ T5368] loop0: detected capacity change from 0 to 512 [ 127.048534][ T5389] loop1: detected capacity change from 0 to 256 [ 127.201153][ T5387] loop4: detected capacity change from 0 to 8192 [ 127.345114][ T5395] loop2: detected capacity change from 0 to 1024 [ 127.392414][ T5397] loop3: detected capacity change from 0 to 256 [ 127.418201][ T5395] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.446084][ T5395] EXT4-fs (loop2): group descriptors corrupted! [ 127.680823][ T5365] Set syz0 is full, maxelem 65536 reached [ 128.063154][ T5415] loop0: detected capacity change from 0 to 256 [ 128.312210][ T4570] tipc: Left network mode [ 128.345649][ T5421] loop4: detected capacity change from 0 to 1024 [ 128.399115][ T5421] EXT4-fs (loop4): Ignoring removed bh option [ 128.523292][ T5421] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none. [ 128.561850][ T5426] loop0: detected capacity change from 0 to 1024 [ 128.589384][ T5426] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 128.670822][ T5426] EXT4-fs (loop0): invalid journal inode [ 128.688581][ T5426] EXT4-fs (loop0): can't get journal size [ 128.701574][ T5429] loop3: detected capacity change from 0 to 512 [ 128.730338][ T5426] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 128.747010][ T5444] program syz.2.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.959950][ T5450] sctp: [Deprecated]: syz.2.438 (pid 5450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.959950][ T5450] Use struct sctp_sack_info instead [ 130.053815][ T5424] chnl_net:caif_netlink_parms(): no params data found [ 130.221259][ T5467] loop4: detected capacity change from 0 to 1024 [ 130.454370][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 130.575004][ T4237] Bluetooth: hci3: command 0x0409 tx timeout [ 130.597949][ T5467] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.646864][ T5467] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.441: Freeing blocks not in datazone - block = 0, count = 16 [ 130.700669][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.770490][ T5429] Set syz0 is full, maxelem 65536 reached [ 130.776584][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.802209][ T5424] device bridge_slave_0 entered promiscuous mode [ 130.856222][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.891977][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.935224][ T5424] device bridge_slave_1 entered promiscuous mode [ 131.085426][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.183096][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.400549][ T5494] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 131.449925][ T5494] EXT4-fs (loop3): invalid journal inode [ 131.460186][ T5494] EXT4-fs (loop3): can't get journal size [ 131.467078][ T4570] device hsr_slave_0 left promiscuous mode [ 131.495794][ T4570] device hsr_slave_1 left promiscuous mode [ 131.522740][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.527768][ T5494] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 131.576015][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.635124][ T4570] device bridge_slave_1 left promiscuous mode [ 131.642418][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.662882][ T4570] device bridge_slave_0 left promiscuous mode [ 131.676908][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.052949][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 132.069682][ T5504] set_capacity_and_notify: 1 callbacks suppressed [ 132.069699][ T5504] loop4: detected capacity change from 0 to 32768 [ 132.097931][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 132.114983][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.131194][ T5504] loop4: p1 p2 p3 < p5 > [ 132.146751][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.158483][ T5504] loop4: p1 size 242222080 extends beyond EOD, truncated [ 132.178696][ T5504] loop4: p2 start 16777215 is beyond EOD, truncated [ 132.309162][ T4570] bond0 (unregistering): Released all slaves [ 132.435416][ T5424] team0: Port device team_slave_0 added [ 132.493591][ T5424] team0: Port device team_slave_1 added [ 132.575750][ T5017] udevd[5017]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.589215][ T5477] udevd[5477]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.603893][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 132.644360][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.655189][ T5141] Bluetooth: hci3: command 0x041b tx timeout [ 132.705666][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.737966][ T5424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.751323][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.761542][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.861525][ T5424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.899614][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906408][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924435][ T5527] loop4: detected capacity change from 0 to 512 [ 133.048215][ T5424] device hsr_slave_0 entered promiscuous mode [ 133.083811][ T5424] device hsr_slave_1 entered promiscuous mode [ 133.100375][ T5424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.120287][ T5424] Cannot create hsr debugfs directory [ 133.548325][ T5545] loop2: detected capacity change from 0 to 1024 [ 133.618267][ T5545] EXT4-fs (loop2): Ignoring removed nobh option [ 133.624698][ T5545] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 133.732059][ T5545] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,jqfmt=vfsv1,sysvgroups,resuid=0x000000000000ee01,init_itable,nobh,bsdgroups,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 133.808803][ T5424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.843897][ T5527] Set syz0 is full, maxelem 65536 reached [ 133.891029][ T5424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.950512][ T5424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.981655][ T5424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.256072][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.281636][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.294321][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.309797][ T5424] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.366378][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.397132][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.415358][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.423355][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.455284][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.485453][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.505722][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.512986][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.545336][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.571448][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.599753][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.647536][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.672799][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.695471][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.714647][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.735745][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.756016][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.785019][ T5141] Bluetooth: hci3: command 0x040f tx timeout [ 134.806572][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.833644][ T5424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.853448][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.866977][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.876523][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.098133][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.106879][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.127514][ T5424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.399117][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.426071][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.481706][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.491116][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.508809][ T5424] device veth0_vlan entered promiscuous mode [ 135.519278][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.538926][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.552715][ T5424] device veth1_vlan entered promiscuous mode [ 135.575336][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.583753][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.617161][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.636174][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.669369][ T5424] device veth0_macvtap entered promiscuous mode [ 135.694265][ T5424] device veth1_macvtap entered promiscuous mode [ 135.737109][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.748693][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.759305][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.770790][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.781224][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.792375][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.803159][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.825190][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.857065][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.879443][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.914854][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.935465][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.954864][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.984872][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.004907][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.020530][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.036176][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.054250][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.063615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.078942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.093542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.107122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.122620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.133134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.160553][ T5424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.170555][ T5424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.180773][ T5424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.189983][ T5424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.312919][ T4934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.332117][ T4934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.345688][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.384070][ T4934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.398229][ T4934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.414070][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.684275][ T5604] loop2: detected capacity change from 0 to 512 [ 136.814913][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 136.833293][ T5613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.462'. [ 137.457283][ T5632] loop4: detected capacity change from 0 to 1024 [ 137.618506][ T5632] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 137.665176][ T5632] EXT4-fs (loop4): invalid journal inode [ 137.671188][ T5632] EXT4-fs (loop4): can't get journal size [ 137.706433][ T5632] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 137.868498][ T5615] loop3: detected capacity change from 0 to 32768 [ 137.930189][ T5017] loop3: p1 p2 p3 < p5 > [ 137.940236][ T5017] loop3: p1 size 242222080 extends beyond EOD, truncated [ 138.003299][ T5017] loop3: p2 start 16777215 is beyond EOD, truncated [ 138.069777][ T5615] loop3: p1 p2 p3 < p5 > [ 138.111921][ T5600] Set syz0 is full, maxelem 65536 reached [ 138.127468][ T5615] loop3: p1 size 242222080 extends beyond EOD, truncated [ 138.211582][ T5615] loop3: p2 start 16777215 is beyond EOD, truncated [ 138.279450][ T5648] loop2: detected capacity change from 0 to 512 [ 138.293667][ T5650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 138.372705][ T5648] EXT4-fs (loop2): Ignoring removed bh option [ 138.432812][ T5648] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.474: corrupted in-inode xattr [ 138.526637][ T5648] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.474: couldn't read orphan inode 15 (err -117) [ 138.625425][ T5648] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 139.111264][ T5681] loop2: detected capacity change from 0 to 512 [ 139.274703][ T5686] loop4: detected capacity change from 0 to 1024 [ 139.355432][ T5686] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 139.367424][ T5681] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.479: invalid block [ 139.398050][ T5681] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.479: invalid indirect mapped block 4294967295 (level 1) [ 139.483821][ T5686] EXT4-fs (loop4): invalid journal inode [ 139.525512][ T5681] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.479: invalid indirect mapped block 4294967295 (level 1) [ 139.546524][ T5686] EXT4-fs (loop4): can't get journal size [ 139.565304][ T5681] EXT4-fs (loop2): 2 truncates cleaned up [ 139.602386][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,i_version,discard,noload,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 139.621890][ T5686] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 139.792499][ T5697] loop5: detected capacity change from 0 to 512 [ 140.190266][ T5714] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 140.332972][ T5477] udevd[5477]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 140.351992][ T5017] udevd[5017]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 140.367064][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 140.462942][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 140.482985][ T5477] udevd[5477]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 140.534443][ T5017] udevd[5017]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 140.888346][ T5740] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 141.073016][ T5743] loop3: detected capacity change from 0 to 512 [ 141.211813][ T5743] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.497: invalid indirect mapped block 4294967295 (level 1) [ 141.341896][ T5743] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.497: invalid indirect mapped block 4294967295 (level 1) [ 141.463808][ T5752] loop2: detected capacity change from 0 to 1024 [ 141.476962][ T5743] EXT4-fs (loop3): 2 truncates cleaned up [ 141.482956][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,i_version,discard,noload,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 141.685020][ T5752] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 141.765874][ T5762] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 141.786056][ T5752] EXT4-fs (loop2): invalid journal inode [ 141.792099][ T5752] EXT4-fs (loop2): can't get journal size [ 141.818309][ T5752] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 142.169123][ T5774] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 143.129460][ T5809] loop4: detected capacity change from 0 to 512 [ 143.187585][ T5809] EXT4-fs (loop4): Ignoring removed nobh option [ 143.253881][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.516: corrupted inode contents [ 143.299862][ T5809] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #3: comm syz.4.516: mark_inode_dirty error [ 143.362620][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.516: corrupted inode contents [ 143.395896][ T5809] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.516: mark_inode_dirty error [ 143.415472][ T5794] loop2: detected capacity change from 0 to 32768 [ 143.439677][ T5809] Quota error (device loop4): write_blk: dquota write failed [ 143.470751][ T5794] loop2: p1 p2 p3 < p5 > [ 143.475387][ T5809] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 143.499153][ T5809] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.516: Failed to acquire dquot type 0 [ 143.500110][ T5794] loop2: p1 size 242222080 extends beyond EOD, [ 143.541452][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.516: corrupted inode contents [ 143.565905][ T5794] truncated [ 143.590286][ T5809] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.516: mark_inode_dirty error [ 143.597105][ T5794] loop2: p2 start 16777215 is beyond EOD, truncated [ 143.624363][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.516: corrupted inode contents [ 143.661669][ T5809] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.516: mark_inode_dirty error [ 143.704472][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.516: corrupted inode contents [ 143.731438][ T5809] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 143.741398][ T5809] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.516: corrupted inode contents [ 143.766249][ T5809] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.516: mark_inode_dirty error [ 143.783628][ T5815] loop0: detected capacity change from 0 to 512 [ 143.800797][ T5809] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 143.832886][ T5809] EXT4-fs (loop4): 1 truncate cleaned up [ 143.864388][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 143.878833][ T5809] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.890888][ T5815] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.517: invalid indirect mapped block 4294967295 (level 1) [ 143.931152][ T5815] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.517: invalid indirect mapped block 4294967295 (level 1) [ 143.947007][ T5815] EXT4-fs (loop0): 2 truncates cleaned up [ 143.952821][ T5815] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,i_version,discard,noload,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 144.416960][ T5823] loop4: detected capacity change from 0 to 1024 [ 144.427212][ T5824] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 144.491774][ T5823] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 144.512611][ T5823] EXT4-fs (loop4): invalid journal inode [ 144.536638][ T5823] EXT4-fs (loop4): can't get journal size [ 144.612298][ T5823] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 144.893125][ T5830] loop0: detected capacity change from 0 to 1024 [ 144.961548][ T5830] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 145.005319][ T5830] EXT4-fs (loop0): invalid journal inode [ 145.011228][ T5830] EXT4-fs (loop0): can't get journal size [ 145.060480][ T5832] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 145.063696][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 146.002325][ T5697] Set syz0 is full, maxelem 65536 reached [ 146.167267][ T5858] loop2: detected capacity change from 0 to 1024 [ 146.203501][ T5858] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 146.276957][ T5858] EXT4-fs (loop2): invalid journal inode [ 146.282856][ T5858] EXT4-fs (loop2): can't get journal size [ 146.316015][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 146.505328][ T5868] loop0: detected capacity change from 0 to 1024 [ 146.604879][ T5868] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 146.646528][ T5868] EXT4-fs (loop0): invalid journal inode [ 146.661174][ T5868] EXT4-fs (loop0): can't get journal size [ 146.732560][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 146.861300][ T5878] ieee802154 phy0 wpan0: encryption failed: -126 [ 147.407180][ T5890] loop0: detected capacity change from 0 to 512 [ 147.446714][ T5897] netlink: 64 bytes leftover after parsing attributes in process `syz.2.552'. [ 147.623140][ T5901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.739065][ T5901] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 147.781159][ T5901] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 147.967567][ T5913] loop3: detected capacity change from 0 to 1024 [ 148.028614][ T5913] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 148.041705][ T5917] ieee802154 phy0 wpan0: encryption failed: -126 [ 148.089828][ T5913] EXT4-fs (loop3): invalid journal inode [ 148.115011][ T5913] EXT4-fs (loop3): can't get journal size [ 148.136420][ T5913] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 149.000740][ T5890] Set syz0 is full, maxelem 65536 reached [ 149.228306][ T5949] ieee802154 phy0 wpan0: encryption failed: -126 [ 149.272022][ T5951] loop2: detected capacity change from 0 to 1024 [ 149.391767][ T5951] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 149.418524][ T5951] EXT4-fs (loop2): invalid journal inode [ 149.442836][ T5951] EXT4-fs (loop2): can't get journal size [ 149.483126][ T5951] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 150.181408][ T5984] loop0: detected capacity change from 0 to 512 [ 150.201713][ T5981] loop5: detected capacity change from 0 to 512 [ 150.319827][ T5984] EXT4-fs (loop0): inline encryption not supported [ 150.349581][ T5984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.411804][ T5984] EXT4-fs (loop0): 1 truncate cleaned up [ 150.448622][ T5984] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,minixdf,,errors=continue. Quota mode: none. [ 150.669862][ T5992] loop3: detected capacity change from 0 to 1024 [ 150.729151][ T5992] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 150.765127][ T5992] EXT4-fs (loop3): invalid journal inode [ 150.778777][ T5992] EXT4-fs (loop3): can't get journal size [ 150.885265][ T5992] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 150.909997][ T5977] Set syz0 is full, maxelem 65536 reached [ 151.832896][ T6018] process 'syz.0.600' launched './file0' with NULL argv: empty string added [ 152.231449][ T6040] loop0: detected capacity change from 0 to 512 [ 152.289628][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 152.334480][ T6048] loop3: detected capacity change from 0 to 1024 [ 152.462454][ T6048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 152.524355][ T6048] EXT4-fs (loop3): invalid journal inode [ 152.548715][ T6048] EXT4-fs (loop3): can't get journal size [ 152.576946][ T6048] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 153.027312][ T6036] Set syz0 is full, maxelem 65536 reached [ 153.139815][ T6070] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.623439][ T6095] loop3: detected capacity change from 0 to 1024 [ 153.654226][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 153.678192][ T6095] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 153.755268][ T6095] EXT4-fs (loop3): invalid journal inode [ 153.761055][ T6095] EXT4-fs (loop3): can't get journal size [ 153.800214][ T6103] loop2: detected capacity change from 0 to 512 [ 153.853649][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 154.773554][ T6145] loop4: detected capacity change from 0 to 1024 [ 154.815366][ T6145] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 154.845998][ T6145] EXT4-fs (loop4): invalid journal inode [ 154.851775][ T6145] EXT4-fs (loop4): can't get journal size [ 154.868056][ T6152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.641'. [ 154.917481][ T6145] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 155.101207][ T6100] Set syz0 is full, maxelem 65536 reached [ 155.334637][ T6167] netlink: 104 bytes leftover after parsing attributes in process `syz.4.646'. [ 156.007138][ T6191] loop0: detected capacity change from 0 to 512 [ 156.081225][ T6202] loop2: detected capacity change from 0 to 1024 [ 156.168675][ T6202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 156.198328][ T6202] EXT4-fs (loop2): invalid journal inode [ 156.225219][ T6208] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.246212][ T6202] EXT4-fs (loop2): can't get journal size [ 156.264116][ T6202] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 157.334370][ T6249] loop4: detected capacity change from 0 to 512 [ 157.569315][ T6255] loop0: detected capacity change from 0 to 1024 [ 157.630486][ T6255] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 157.670633][ T6255] EXT4-fs (loop0): invalid journal inode [ 157.693454][ T6255] EXT4-fs (loop0): can't get journal size [ 157.732792][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 158.061015][ T6272] loop4: detected capacity change from 0 to 1024 [ 158.137801][ T6272] EXT4-fs (loop4): Ignoring removed oldalloc option [ 158.255528][ T6272] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 158.297382][ T6272] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.322220][ T6272] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.676: lblock 3 mapped to illegal pblock 3 (length 3) [ 158.485175][ T6272] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 158.596710][ T6272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.596710][ T6272] [ 158.677629][ T6301] loop3: detected capacity change from 0 to 512 [ 158.772655][ T155] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 158.885430][ T155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 158.921703][ T155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.921703][ T155] [ 159.160995][ T6314] loop0: detected capacity change from 0 to 1024 [ 159.265962][ T6314] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 159.349978][ T6314] EXT4-fs (loop0): invalid journal inode [ 159.389438][ T6314] EXT4-fs (loop0): can't get journal size [ 159.412829][ T6324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.691'. [ 159.434428][ T6314] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 159.475022][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 159.950839][ T6343] loop4: detected capacity change from 0 to 512 [ 160.299299][ T6360] loop0: detected capacity change from 0 to 1024 [ 160.372583][ T6360] EXT4-fs (loop0): Ignoring removed nobh option [ 160.399337][ T6360] EXT4-fs (loop0): Ignoring removed bh option [ 160.446438][ T6360] EXT4-fs (loop0): Ignoring removed nobh option [ 160.522359][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none. [ 160.555127][ T6368] loop2: detected capacity change from 0 to 1024 [ 160.635216][ T6368] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 160.691383][ T6368] EXT4-fs (loop2): invalid journal inode [ 160.749737][ T26] audit: type=1800 audit(1787244678.885:6): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.702" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 160.776372][ T6368] EXT4-fs (loop2): can't get journal size [ 160.785283][ T6360] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.856671][ T6368] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 161.261417][ T6343] Set syz0 is full, maxelem 65536 reached [ 161.790888][ T6413] loop2: detected capacity change from 0 to 1024 [ 161.927033][ T6413] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 162.016512][ T6413] EXT4-fs (loop2): invalid journal inode [ 162.022419][ T6413] EXT4-fs (loop2): can't get journal size [ 162.101857][ T6413] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 162.211656][ T6429] loop4: detected capacity change from 0 to 4096 [ 162.230861][ T6435] loop3: detected capacity change from 0 to 512 [ 162.507974][ T6429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.782382][ T6446] loop2: detected capacity change from 0 to 512 [ 162.835536][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 162.864684][ T6450] netlink: 9 bytes leftover after parsing attributes in process `syz.0.730'. [ 163.007237][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 163.554248][ T6466] loop2: detected capacity change from 0 to 1024 [ 163.688190][ T6435] Set syz0 is full, maxelem 65536 reached [ 163.720387][ T6466] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 163.746550][ T6466] EXT4-fs (loop2): invalid journal inode [ 163.756050][ T5141] logitech-hidpp-device 0003:046D:C082.0001: item fetching failed at offset 0/2 [ 163.773376][ T6466] EXT4-fs (loop2): can't get journal size [ 163.792421][ T5141] logitech-hidpp-device 0003:046D:C082.0001: hidpp_probe:parse failed [ 163.805619][ T6466] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 163.839311][ T5141] logitech-hidpp-device: probe of 0003:046D:C082.0001 failed with error -22 [ 164.324185][ T6502] loop5: detected capacity change from 0 to 512 [ 164.764259][ T6517] loop4: detected capacity change from 0 to 1024 [ 164.825763][ T6517] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 164.875072][ T6517] EXT4-fs (loop4): invalid journal inode [ 164.883620][ T6517] EXT4-fs (loop4): can't get journal size [ 164.925077][ T6517] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nouid32,norecovery,nodelalloc,nombcache,,errors=continue. Quota mode: writeback. [ 165.051488][ T6502] Set syz0 is full, maxelem 65536 reached [ 165.104558][ T6524] [ 165.106951][ T6524] ====================================================== [ 165.114176][ T6524] WARNING: possible circular locking dependency detected [ 165.121262][ T6524] syzkaller #0 Not tainted [ 165.125781][ T6524] ------------------------------------------------------ [ 165.132831][ T6524] syz.3.763/6524 is trying to acquire lock: [ 165.138754][ T6524] ffff888145e8eee0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 165.150305][ T6524] [ 165.150305][ T6524] but task is already holding lock: [ 165.157791][ T6524] ffff88805ec1d120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 165.166987][ T6524] [ 165.166987][ T6524] which lock already depends on the new lock. [ 165.166987][ T6524] [ 165.177421][ T6524] [ 165.177421][ T6524] the existing dependency chain (in reverse order) is: [ 165.186464][ T6524] [ 165.186464][ T6524] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 165.194274][ T6524] __mutex_lock_common+0x1e5/0x2400 [ 165.200041][ T6524] mutex_lock_nested+0x17/0x20 [ 165.205466][ T6524] tcm_set_name+0x26/0x90 [ 165.210370][ T6524] function_make+0x195/0x350 [ 165.215550][ T6524] configfs_mkdir+0x511/0x9e0 [ 165.220927][ T6524] vfs_mkdir+0x386/0x570 [ 165.225738][ T6524] do_mkdirat+0x1dd/0x5c0 [ 165.230637][ T6524] __x64_sys_mkdir+0x6a/0x80 [ 165.235798][ T6524] do_syscall_64+0x4c/0xa0 [ 165.240999][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.247467][ T6524] [ 165.247467][ T6524] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 165.255798][ T6524] __mutex_lock_common+0x1e5/0x2400 [ 165.261565][ T6524] mutex_lock_nested+0x17/0x20 [ 165.266896][ T6524] configfs_rmdir+0x638/0x980 [ 165.272224][ T6524] vfs_rmdir+0x19d/0x410 [ 165.277203][ T6524] do_rmdir+0x27f/0x710 [ 165.281939][ T6524] __x64_sys_rmdir+0x45/0x50 [ 165.287085][ T6524] do_syscall_64+0x4c/0xa0 [ 165.292151][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.298608][ T6524] [ 165.298608][ T6524] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 165.307463][ T6524] __lock_acquire+0x2c66/0x7b50 [ 165.313062][ T6524] lock_acquire+0x19e/0x400 [ 165.318138][ T6524] down_write+0x38/0x60 [ 165.323067][ T6524] configfs_depend_item_unlocked+0x14f/0x430 [ 165.330130][ T6524] usbg_make_tpg+0x1f3/0x580 [ 165.335278][ T6524] target_fabric_make_tpg+0xa0/0x6d0 [ 165.341159][ T6524] configfs_mkdir+0x511/0x9e0 [ 165.346418][ T6524] vfs_mkdir+0x386/0x570 [ 165.351228][ T6524] do_mkdirat+0x1dd/0x5c0 [ 165.356332][ T6524] __x64_sys_mkdir+0x6a/0x80 [ 165.361492][ T6524] do_syscall_64+0x4c/0xa0 [ 165.366549][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.373007][ T6524] [ 165.373007][ T6524] other info that might help us debug this: [ 165.373007][ T6524] [ 165.383433][ T6524] Chain exists of: [ 165.383433][ T6524] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 165.383433][ T6524] [ 165.398365][ T6524] Possible unsafe locking scenario: [ 165.398365][ T6524] [ 165.405945][ T6524] CPU0 CPU1 [ 165.411343][ T6524] ---- ---- [ 165.416966][ T6524] lock(&opts->dep_lock); [ 165.421420][ T6524] lock(gadget_subsys.su_mutex); [ 165.429021][ T6524] lock(&opts->dep_lock); [ 165.436015][ T6524] lock(&sb->s_type->i_mutex_key#22); [ 165.441557][ T6524] [ 165.441557][ T6524] *** DEADLOCK *** [ 165.441557][ T6524] [ 165.449727][ T6524] 5 locks held by syz.3.763/6524: [ 165.454781][ T6524] #0: ffff888140da4460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 165.464068][ T6524] #1: ffff888074eae4c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 165.474937][ T6524] #2: ffffffff8cc23ef0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 165.484744][ T6524] #3: ffffffff8cf21628 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 165.494492][ T6524] #4: ffff88805ec1d120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 165.504065][ T6524] [ 165.504065][ T6524] stack backtrace: [ 165.509988][ T6524] CPU: 0 PID: 6524 Comm: syz.3.763 Not tainted syzkaller #0 [ 165.517330][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.527420][ T6524] Call Trace: [ 165.530728][ T6524] [ 165.533696][ T6524] dump_stack_lvl+0x188/0x250 [ 165.538422][ T6524] ? load_image+0x410/0x410 [ 165.543085][ T6524] ? show_regs_print_info+0x20/0x20 [ 165.548417][ T6524] ? print_circular_bug+0x12b/0x1a0 [ 165.553655][ T6524] check_noncircular+0x296/0x330 [ 165.558730][ T6524] ? look_up_lock_class+0x71/0x110 [ 165.563923][ T6524] ? add_chain_block+0x9b0/0x9b0 [ 165.568989][ T6524] ? lockdep_lock+0xf1/0x1f0 [ 165.573636][ T6524] ? mark_lock+0x94/0x320 [ 165.578268][ T6524] ? mark_lock+0x94/0x320 [ 165.582639][ T6524] ? _find_first_zero_bit+0xd1/0xf0 [ 165.588062][ T6524] __lock_acquire+0x2c66/0x7b50 [ 165.592970][ T6524] ? verify_lock_unused+0x140/0x140 [ 165.598383][ T6524] ? __mutex_trylock_common+0x15c/0x260 [ 165.604176][ T6524] ? rcu_lock_release+0x20/0x20 [ 165.609382][ T6524] lock_acquire+0x19e/0x400 [ 165.613934][ T6524] ? configfs_depend_item_unlocked+0x14f/0x430 [ 165.620155][ T6524] ? __might_sleep+0xf0/0xf0 [ 165.624890][ T6524] ? __kasan_kmalloc+0xc6/0xe0 [ 165.629786][ T6524] ? read_lock_is_recursive+0x10/0x10 [ 165.635316][ T6524] ? mutex_lock_io_nested+0x60/0x60 [ 165.640674][ T6524] down_write+0x38/0x60 [ 165.645190][ T6524] ? configfs_depend_item_unlocked+0x14f/0x430 [ 165.651385][ T6524] configfs_depend_item_unlocked+0x14f/0x430 [ 165.657626][ T6524] usbg_make_tpg+0x1f3/0x580 [ 165.662651][ T6524] ? mutex_lock_io_nested+0x60/0x60 [ 165.667909][ T6524] ? usbg_drop_tport+0x20/0x20 [ 165.672746][ T6524] ? vscnprintf+0x80/0x80 [ 165.677667][ T6524] target_fabric_make_tpg+0xa0/0x6d0 [ 165.683012][ T6524] ? target_fabric_release_wwn+0xa0/0xa0 [ 165.688705][ T6524] configfs_mkdir+0x511/0x9e0 [ 165.693443][ T6524] vfs_mkdir+0x386/0x570 [ 165.697739][ T6524] do_mkdirat+0x1dd/0x5c0 [ 165.702111][ T6524] ? vfs_mkdir+0x570/0x570 [ 165.706878][ T6524] ? getname_flags+0x1f9/0x4f0 [ 165.711775][ T6524] __x64_sys_mkdir+0x6a/0x80 [ 165.716422][ T6524] do_syscall_64+0x4c/0xa0 [ 165.720971][ T6524] ? clear_bhb_loop+0x30/0x80 [ 165.725952][ T6524] ? clear_bhb_loop+0x30/0x80 [ 165.730803][ T6524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.736841][ T6524] RIP: 0033:0x7f0e87c070d9 [ 165.741300][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.761033][ T6524] RSP: 002b:00007f0e85e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 165.769605][ T6524] RAX: ffffffffffffffda RBX: 00007f0e87e8efa0 RCX: 00007f0e87c070d9 [ 165.777875][ T6524] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 165.785898][ T6524] RBP: 00007f0e87c9e024 R08: 0000000000000000 R09: 0000000000000000 [ 165.793936][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.801944][ T6524] R13: 00007f0e87e8f038 R14: 00007f0e87e8efa0 R15: 00007ffff27ba058 [ 165.809987][ T6524] [ 165.916607][ T6524] se_device not configured yet, cannot port link