last executing test programs: 8.318875806s ago: executing program 0 (id=741): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r0, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d779e22efeff1974e6749771aada982abe05221a6246e1b67823f82", 0xde, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$video4linux(&(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0x0, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x2, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x3, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0xfffffbff, 0x5, 0x1c, 0x120000, 0x1, 0x2004, 0x80a2ed, 0x4, 0x25], [0x7, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x4, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x3, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$video(0x0, 0x7, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.353291006s ago: executing program 0 (id=748): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000080)='|w') shmctl$IPC_RMID(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x1c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000500)=0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff3d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb8600", 0x8}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.452310085s ago: executing program 0 (id=752): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x701844) 5.552055543s ago: executing program 0 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 5.211740074s ago: executing program 0 (id=761): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) memfd_create(&(0x7f0000000040)='[\v\xdbX\xaeb\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1O\xbdu\x98\xc3\xf8\xdbQ#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8fS\x9c\xb2\xef\xe58\xd1\xca\x9cXuX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9f\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88YZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\x03hC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSD\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xa3\x8b\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\x00\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbc}\xb3\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04X\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\x03\x00\x00\x00\x00\x00\x00\x00>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\x0f{\x94i\xb6]\x1f\xefB\xea?\xa6\x02\xc0\x9f\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13G\x82U\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0P\x99\x00~2Cu\x81d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf1j\xaf\xd0F\x00'/1198, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbaebc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe185568fb27c54e}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}}, 0x0) 5.127888317s ago: executing program 4 (id=764): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(r0, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r1, 0x0) 4.368449521s ago: executing program 1 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0) 4.332805022s ago: executing program 0 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064d2, &(0x7f0000000040)={0x0, 0x2000000}) r5 = io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000003800)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 4.261224404s ago: executing program 2 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(0x0, r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x77fff533ba5592fd, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x8, 0x6, 0x56}}}}]}, 0x48}}, 0x604c000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.579194008s ago: executing program 1 (id=772): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x814}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4204, 0x3, 0x1}, 0x18, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000001180)=""/102, 0x66}, {0x0, 0x2}], 0x2, 0x0, 0x0) r3 = socket(0x2, 0xa, 0x300) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xbc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x24040050) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000002c0)=""/181) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 2.559312118s ago: executing program 4 (id=773): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) socket$inet(0x2, 0x4000000000000001, 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fanotify_init(0x40, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) 2.51114198s ago: executing program 1 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) syz_open_dev$media(0x0, 0xa, 0x41) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, 0x0, 0x8000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@multicast2, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4080) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x121ab60f71b245c7) 2.50949908s ago: executing program 2 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 2.410843663s ago: executing program 3 (id=776): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3f0033008000e100ffffffffffff080211"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.410572263s ago: executing program 4 (id=777): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r0, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d779e22efeff1974e6749771aada982abe05221a6246e1b67823f82", 0xde, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$video4linux(&(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0x0, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x2, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x3, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0xfffffbff, 0x5, 0x1c, 0x120000, 0x1, 0x2004, 0x80a2ed, 0x4, 0x25], [0x7, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x4, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x3, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$video(0x0, 0x7, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.053338314s ago: executing program 3 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) 1.975599917s ago: executing program 3 (id=779): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) memfd_create(&(0x7f0000000040)='[\v\xdbX\xaeb\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1O\xbdu\x98\xc3\xf8\xdbQ#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8fS\x9c\xb2\xef\xe58\xd1\xca\x9cXuX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9f\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88YZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\x03hC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSD\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xa3\x8b\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\x00\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbc}\xb3\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04X\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\x03\x00\x00\x00\x00\x00\x00\x00>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\x0f{\x94i\xb6]\x1f\xefB\xea?\xa6\x02\xc0\x9f\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13G\x82U\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0P\x99\x00~2Cu\x81d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf1j\xaf\xd0F\x00'/1198, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbaebc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe185568fb27c54e}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}}, 0x0) 1.974706117s ago: executing program 2 (id=780): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1, 0x0, 0x401}]}]}, 0xfc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbb"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.87742148s ago: executing program 2 (id=781): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000000)={[{@compress_force}, {}, {@nodatasum}, {@nossd}, {}, {@noflushoncommit}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 1.502581282s ago: executing program 1 (id=782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendto$inet(r0, &(0x7f0000000580)='g', 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0) 663.493518ms ago: executing program 3 (id=783): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) sendmsg(r0, 0x0, 0x4048000) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r1, 0x0) 480.338704ms ago: executing program 3 (id=784): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x814}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4204, 0x3, 0x1}, 0x18, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000001180)=""/102, 0x66}, {0x0, 0x2}], 0x2, 0x0, 0x0) r3 = socket(0x2, 0xa, 0x300) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xbc, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x24040050) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000002c0)=""/181) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 376.687458ms ago: executing program 4 (id=785): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 374.030438ms ago: executing program 1 (id=786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x77fff533ba5592fd, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x8, 0x6, 0x56}}}}]}, 0x48}}, 0x604c000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 338.158599ms ago: executing program 3 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 234.696592ms ago: executing program 4 (id=788): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3f0033008000e100ffffffffffff080211"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 177.701964ms ago: executing program 2 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) 57.974418ms ago: executing program 4 (id=790): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x281063, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040', @ANYRESDEC]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) io_setup(0x9, &(0x7f00000001c0)=0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000040)=""/152) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) io_submit(r2, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="fef7c41e06561c9404cddfc5c8f0692176ef720623b8a8e55d5ca841d851cb01f6984896510d0fbb86c2f70a682dd811452150293e9433b9d6ead7b77b39d79e6f7d9df3b5ac70dc7ac588bf4b59136602cbfa05e53b65d514cd", 0x5a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000fd9000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 580.96µs ago: executing program 1 (id=791): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1, 0x0, 0x401}]}]}, 0xfc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbb"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): ng interface batadv_slave_0 (retrying later): interface not active [ 30.456490][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.457830][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.462125][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.476971][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.478196][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.482401][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.494067][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.495244][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.499776][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.548857][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.597894][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.637666][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.638915][ T4335] Cannot create hsr debugfs directory [ 30.708564][ T4332] device hsr_slave_0 entered promiscuous mode [ 30.747803][ T4332] device hsr_slave_1 entered promiscuous mode [ 30.797649][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.798763][ T4332] Cannot create hsr debugfs directory [ 30.857311][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.890218][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.929757][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.970282][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.025624][ T4340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.060085][ T4340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.099000][ T4340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.141543][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.180371][ T4340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.224962][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.280824][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.330957][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.369876][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.411643][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.415105][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.455658][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.491098][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.540402][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.542271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.549332][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.555531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.557149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.559182][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.560441][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.561979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.571242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.572867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.574334][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.575467][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.576712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.581316][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.588527][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.591457][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.597764][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 31.618730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.621359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.622846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.626968][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.677843][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 31.677918][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 31.678860][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 31.679839][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 31.691084][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.743383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.744801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.748931][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.793662][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.796721][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.798348][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.800094][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.801564][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.804302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.805910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.813501][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.815077][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.816533][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.817744][ T1581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.819232][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.820805][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.822216][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.823327][ T1581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.824639][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.826146][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.835170][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.843164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.844785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.846576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.850204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.868725][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.871062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.872554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.883295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.884823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.886478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.888767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.900308][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.903518][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.905717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.907221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.910573][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.916549][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.919158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.920765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.922161][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.923337][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.924919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.930415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.932008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.933483][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.934683][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.950168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.951845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.953359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.954885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.962847][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.969145][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.970304][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.971631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.973509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.975184][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.978971][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.986295][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.988512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.990028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.991589][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.996091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.997243][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.000424][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.001980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.003395][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.004573][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.008892][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.011196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.012661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.014200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.015923][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.017376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.025279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.026905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.029381][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.030506][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.031962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.033461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.035012][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.036016][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.037282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.039249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.040719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.043830][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.047371][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.053529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.055160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.056710][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.057795][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.059698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.061248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.062920][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.065032][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.066305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.074778][ T4327] device veth0_vlan entered promiscuous mode [ 32.079489][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.081192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.083267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.084774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.086268][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.098139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.106299][ T4327] device veth1_vlan entered promiscuous mode [ 32.111400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.112801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.114289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.115804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.117446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.124933][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.126560][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.132865][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.134580][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.136136][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.139140][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.141280][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.142685][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.144154][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.145599][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.153672][ T4340] device veth0_vlan entered promiscuous mode [ 32.156421][ T4340] device veth1_vlan entered promiscuous mode [ 32.158869][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.160385][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.162238][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.163669][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.165319][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.166822][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.169325][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.170886][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.178974][ T4327] device veth0_macvtap entered promiscuous mode [ 32.182899][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.184438][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.186048][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.187513][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.198898][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.200546][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.202025][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.204974][ T4327] device veth1_macvtap entered promiscuous mode [ 32.207224][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.214489][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.218413][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.219887][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.221283][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.222609][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.235196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.236676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.240019][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.242090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.243535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.246017][ T4340] device veth0_macvtap entered promiscuous mode [ 32.252234][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.253766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.255198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.256681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.271643][ T4340] device veth1_macvtap entered promiscuous mode [ 32.275081][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.276422][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278372][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.279958][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.285992][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.290194][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.292507][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.293947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.295345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.296792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.320941][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.322708][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.327968][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.329935][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.331258][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.332517][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.334072][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.343190][ T4340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.344561][ T4340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.346040][ T4340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.347539][ T4340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.361916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.363155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.365705][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.375433][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.391856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.393482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.401472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.402995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.412304][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.413613][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.416276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.422057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.423668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.429113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.430660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.434027][ T4332] device veth0_vlan entered promiscuous mode [ 32.440579][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.441752][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.445710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.447328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.450140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.453710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.455379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.456992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.458818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.463315][ T4328] device veth0_vlan entered promiscuous mode [ 32.468668][ T4332] device veth1_vlan entered promiscuous mode [ 32.484921][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.486213][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.486458][ T4328] device veth1_vlan entered promiscuous mode [ 32.491352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.492865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.494314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.495733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.498467][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.499834][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.502671][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.504194][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.505758][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.512069][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.513605][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.514965][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.516961][ T4335] device veth0_vlan entered promiscuous mode [ 32.526668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.528583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.532869][ T4335] device veth1_vlan entered promiscuous mode [ 32.535857][ T4332] device veth0_macvtap entered promiscuous mode [ 32.537246][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.538863][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.540248][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.541872][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.548560][ T4328] device veth0_macvtap entered promiscuous mode [ 32.551759][ T4328] device veth1_macvtap entered promiscuous mode [ 32.554098][ T4332] device veth1_macvtap entered promiscuous mode [ 32.555457][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.556959][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.562095][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.563539][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.565003][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.566577][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.575001][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.576840][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.581874][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.583640][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.593460][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.595809][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.597518][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.601102][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.602745][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.604758][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.606642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.608659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.610211][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.616771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.621746][ T4335] device veth0_macvtap entered promiscuous mode [ 32.631310][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.632724][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.634053][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635573][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.659762][ T4335] device veth1_macvtap entered promiscuous mode [ 32.664779][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.666576][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.671391][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.672854][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.674699][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.676475][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.678907][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.680565][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.682540][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.684038][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.685670][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.687166][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.691505][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.693162][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.694846][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.697026][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.713042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.714583][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.715936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.717389][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.725495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.730483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.734778][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.736317][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.738859][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.740502][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.741998][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.743664][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.745903][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.746902][ T4416] loop2: detected capacity change from 0 to 4096 [ 32.748927][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.750577][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.752306][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.755355][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.756971][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.759158][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.760755][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.762386][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.764930][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.768380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.769964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.772142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.773838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.776915][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779726][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.781030][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.782377][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.800832][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.802071][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.803736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.810821][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.812214][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.813617][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.815022][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.841378][ T4416] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.845794][ T4416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 32.847533][ T4416] System zones: 0-5 [ 32.852869][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.854193][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.856837][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.871529][ T4416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.890303][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.891950][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.896379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.897553][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.900714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.902116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.904106][ T4416] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 32.907576][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.915963][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.920556][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.921952][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.974974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.978038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.001719][ T4416] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 33.024407][ T4430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.082403][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 33.172788][ T4437] loop0: detected capacity change from 0 to 512 [ 33.187505][ T4437] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1: corrupted in-inode xattr [ 33.190862][ T4437] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 33.192853][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.286321][ T4441] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 33.717793][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 33.757704][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 33.788889][ T4343] Bluetooth: hci3: command 0x041b tx timeout [ 33.788970][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 33.794280][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 34.389501][ T4447] binder: 4439:4447 ioctl 4018620d 0 returned -22 [ 34.390760][ T4447] binder: tried to use weak ref as strong ref [ 34.391761][ T4447] binder: 4439:4447 Acquire 1 refcount change on invalid ref 0 ret -22 [ 34.393162][ T4447] binder: 4439:4447 got transaction to invalid handle, 1 [ 34.394304][ T4447] binder: 4447:4439 cannot find target node [ 34.395281][ T4447] binder: 4439:4447 transaction call to 0:0 failed 3/29201/-22, size 120-24 line 3045 [ 34.397075][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.405694][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 35.798058][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 35.918105][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 35.919380][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 35.920666][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 35.921967][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 36.177246][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 36.182456][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.191020][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.196959][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.201445][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.208800][ T4488] loop4: detected capacity change from 0 to 4096 [ 36.231615][ T4488] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.241157][ T4488] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 36.242436][ T4488] System zones: 0-5 [ 36.243782][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.290203][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'. [ 36.368667][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 36.424428][ T4493] loop2: detected capacity change from 0 to 512 [ 36.475473][ T4493] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.21: corrupted in-inode xattr [ 36.483522][ T4493] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.21: couldn't read orphan inode 15 (err -117) [ 36.485629][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.524185][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 36.563113][ T4507] binder: 4506:4507 ioctl c0306201 0 returned -14 [ 36.573411][ T4507] binder: 4506:4507 got transaction to invalid handle, 1 [ 36.600337][ T4507] binder: 4507:4506 cannot find target node [ 36.601500][ T4507] binder: 4506:4507 transaction call to 0:0 failed 7/29201/-22, size 120-24 line 3045 [ 36.611991][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.651799][ T4514] loop2: detected capacity change from 0 to 512 [ 36.664299][ T4514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.173898][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 38.174870][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 38.175910][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 38.176932][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 38.178058][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 38.214028][ T4521] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 38.217532][ T4521] batman_adv: batadv0: Adding interface: geneve2 [ 38.445724][ T4521] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 38.499661][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 38.689197][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.31'. [ 38.840731][ T4539] loop0: detected capacity change from 0 to 4096 [ 38.870836][ T4539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.876155][ T4539] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 38.877489][ T4539] System zones: 0-5 [ 38.884208][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.962418][ T4543] loop4: detected capacity change from 0 to 512 [ 38.972971][ T4543] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.35: corrupted in-inode xattr [ 38.974943][ T4543] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.35: couldn't read orphan inode 15 (err -117) [ 38.976995][ T4543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.039483][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 39.066118][ T4554] binder: 4553:4554 ioctl c0306201 0 returned -14 [ 39.075049][ T4554] binder: 4553:4554 got transaction to invalid handle, 1 [ 39.084910][ T4554] binder: 4554:4553 cannot find target node [ 39.086668][ T4554] binder: 4553:4554 transaction call to 0:0 failed 11/29201/-22, size 120-24 line 3045 [ 39.122259][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.156871][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 39.597291][ T4564] loop4: detected capacity change from 0 to 256 [ 39.603976][ T4564] ======================================================= [ 39.603976][ T4564] WARNING: The mand mount option has been deprecated and [ 39.603976][ T4564] and is ignored by this kernel. Remove the mand [ 39.603976][ T4564] option from the mount to silence this warning. [ 39.603976][ T4564] ======================================================= [ 39.640890][ T4564] FAT-fs (loop4): Directory bread(block 64) failed [ 39.641947][ T4564] FAT-fs (loop4): Directory bread(block 65) failed [ 39.643054][ T4564] FAT-fs (loop4): Directory bread(block 66) failed [ 39.644173][ T4564] FAT-fs (loop4): Directory bread(block 67) failed [ 39.645333][ T4564] FAT-fs (loop4): Directory bread(block 68) failed [ 39.646271][ T4564] FAT-fs (loop4): Directory bread(block 69) failed [ 39.647360][ T4564] FAT-fs (loop4): Directory bread(block 70) failed [ 39.648863][ T4564] FAT-fs (loop4): Directory bread(block 71) failed [ 39.650126][ T4564] FAT-fs (loop4): Directory bread(block 72) failed [ 39.651197][ T4564] FAT-fs (loop4): Directory bread(block 73) failed [ 39.733590][ T4567] loop2: detected capacity change from 0 to 512 [ 39.757294][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.897590][ C1] sched: RT throttling activated [ 42.145278][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 42.180169][ T4583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.42'. [ 42.322873][ T4593] Zero length message leads to an empty skb [ 42.337181][ T4601] loop0: detected capacity change from 0 to 512 [ 42.410962][ T4601] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.47: corrupted in-inode xattr [ 42.413073][ T4601] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.47: couldn't read orphan inode 15 (err -117) [ 42.415309][ T4601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.433027][ T4604] loop4: detected capacity change from 0 to 4096 [ 42.438585][ T4604] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.444339][ T4604] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 42.445805][ T4604] System zones: 0-5 [ 42.450327][ T4604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.875980][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 43.073435][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 43.204246][ T4622] loop1: detected capacity change from 0 to 256 [ 43.224246][ T4622] FAT-fs (loop1): Directory bread(block 64) failed [ 43.225491][ T4622] FAT-fs (loop1): Directory bread(block 65) failed [ 43.226664][ T4622] FAT-fs (loop1): Directory bread(block 66) failed [ 43.230193][ T4622] FAT-fs (loop1): Directory bread(block 67) failed [ 43.231648][ T4622] FAT-fs (loop1): Directory bread(block 68) failed [ 43.232897][ T4622] FAT-fs (loop1): Directory bread(block 69) failed [ 43.234254][ T4622] FAT-fs (loop1): Directory bread(block 70) failed [ 43.235619][ T4622] FAT-fs (loop1): Directory bread(block 71) failed [ 43.237216][ T4622] FAT-fs (loop1): Directory bread(block 72) failed [ 43.239355][ T4622] FAT-fs (loop1): Directory bread(block 73) failed [ 43.598260][ T4626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.54'. [ 46.325132][ T4655] loop2: detected capacity change from 0 to 512 [ 46.450691][ T4659] loop0: detected capacity change from 0 to 4096 [ 46.474088][ T4655] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.62: corrupted in-inode xattr [ 46.476216][ T4655] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.62: couldn't read orphan inode 15 (err -117) [ 46.480308][ T4655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.500142][ T4659] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.510585][ T4659] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 46.512037][ T4659] System zones: 0-5 [ 46.513339][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.521886][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 46.524500][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.536205][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.545637][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.547201][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.643241][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 47.086526][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 47.208004][ T4674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.66'. [ 47.641535][ T4686] loop0: detected capacity change from 0 to 256 [ 47.664476][ T4686] FAT-fs (loop0): Directory bread(block 64) failed [ 47.665611][ T4686] FAT-fs (loop0): Directory bread(block 65) failed [ 47.666744][ T4686] FAT-fs (loop0): Directory bread(block 66) failed [ 47.675434][ T4686] FAT-fs (loop0): Directory bread(block 67) failed [ 47.676526][ T4686] FAT-fs (loop0): Directory bread(block 68) failed [ 47.680496][ T4686] FAT-fs (loop0): Directory bread(block 69) failed [ 47.684759][ T4686] FAT-fs (loop0): Directory bread(block 70) failed [ 47.687202][ T4686] FAT-fs (loop0): Directory bread(block 71) failed [ 47.689074][ T4686] FAT-fs (loop0): Directory bread(block 72) failed [ 47.691306][ T4686] FAT-fs (loop0): Directory bread(block 73) failed [ 48.960400][ T4698] loop4: detected capacity change from 0 to 4096 [ 48.974262][ T4701] loop2: detected capacity change from 0 to 512 [ 49.020047][ T4701] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.77: corrupted in-inode xattr [ 49.022079][ T4701] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.77: couldn't read orphan inode 15 (err -117) [ 49.024063][ T4701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.117118][ T4698] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.126376][ T4698] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 49.129609][ T4698] System zones: 0-5 [ 49.131683][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.695124][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 50.724809][ T4698] overlayfs: missing 'lowerdir' [ 50.790166][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 50.918472][ T4717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.82'. [ 50.940670][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 50.942224][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.943485][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.966706][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.968919][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.642385][ T4739] loop4: detected capacity change from 0 to 256 [ 52.699172][ T4739] FAT-fs (loop4): Directory bread(block 64) failed [ 52.700353][ T4739] FAT-fs (loop4): Directory bread(block 65) failed [ 52.701497][ T4739] FAT-fs (loop4): Directory bread(block 66) failed [ 52.702552][ T4739] FAT-fs (loop4): Directory bread(block 67) failed [ 52.703660][ T4739] FAT-fs (loop4): Directory bread(block 68) failed [ 52.704716][ T4739] FAT-fs (loop4): Directory bread(block 69) failed [ 52.716364][ T4739] FAT-fs (loop4): Directory bread(block 70) failed [ 52.717449][ T4739] FAT-fs (loop4): Directory bread(block 71) failed [ 52.718591][ T4739] FAT-fs (loop4): Directory bread(block 72) failed [ 52.719623][ T4739] FAT-fs (loop4): Directory bread(block 73) failed [ 52.836670][ T4745] loop2: detected capacity change from 0 to 4096 [ 52.849039][ T4745] EXT4-fs (loop2): Test dummy encryption mode enabled [ 53.895377][ T4745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 53.896860][ T4745] System zones: 0-5 [ 53.922423][ T4745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.251522][ T4754] loop1: detected capacity change from 0 to 512 [ 55.259165][ T4745] overlayfs: missing 'lowerdir' [ 55.291787][ T4765] netlink: 36 bytes leftover after parsing attributes in process `syz.3.96'. [ 55.301330][ T4754] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.90: corrupted in-inode xattr [ 55.305155][ T4754] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.90: couldn't read orphan inode 15 (err -117) [ 55.313969][ T4767] loop0: detected capacity change from 0 to 512 [ 55.316082][ T4767] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.335488][ T4754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.343978][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.345526][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.352584][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 55.353913][ T4767] System zones: 1-2, 4-12, 8-8 [ 55.378642][ T4767] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.95: iget: bad i_size value: 38620345925642 [ 55.383591][ T4767] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 55.387571][ T4767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.497511][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 55.522092][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 57.460970][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 57.462578][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.468090][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.473582][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.480373][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.728907][ T4803] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 57.753871][ T4805] loop2: detected capacity change from 0 to 256 [ 57.817893][ T4805] FAT-fs (loop2): Directory bread(block 64) failed [ 57.819851][ T4805] FAT-fs (loop2): Directory bread(block 65) failed [ 57.822881][ T4805] FAT-fs (loop2): Directory bread(block 66) failed [ 57.827079][ T4805] FAT-fs (loop2): Directory bread(block 67) failed [ 57.829057][ T4805] FAT-fs (loop2): Directory bread(block 68) failed [ 57.834796][ T4805] FAT-fs (loop2): Directory bread(block 69) failed [ 57.835911][ T4805] FAT-fs (loop2): Directory bread(block 70) failed [ 57.836986][ T4805] FAT-fs (loop2): Directory bread(block 71) failed [ 57.838712][ T4810] loop3: detected capacity change from 0 to 4096 [ 57.841764][ T4810] EXT4-fs (loop3): Test dummy encryption mode enabled [ 57.844295][ T4810] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 57.845802][ T4810] System zones: 0-5 [ 57.851940][ T4805] FAT-fs (loop2): Directory bread(block 72) failed [ 57.853028][ T4805] FAT-fs (loop2): Directory bread(block 73) failed [ 57.862766][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.848732][ T4810] overlayfs: missing 'lowerdir' [ 60.740847][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.875398][ T4835] loop4: detected capacity change from 0 to 512 [ 61.878005][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.880264][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 61.881958][ T4835] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.890184][ T4835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 61.891460][ T4835] System zones: 1-2, 4-12, 8-8 [ 61.894007][ T4835] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.115: iget: bad i_size value: 38620345925642 [ 61.896526][ T4835] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.115: couldn't read orphan inode 15 (err -117) [ 61.900235][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.957511][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 61.961244][ T4840] loop0: detected capacity change from 0 to 512 [ 61.963038][ T4840] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.965274][ T4840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 61.966561][ T4840] System zones: 1-2, 4-12, 8-8 [ 61.968413][ T4840] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.126: iget: bad i_size value: 38620345925642 [ 61.985642][ T4840] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.126: couldn't read orphan inode 15 (err -117) [ 61.995577][ T4840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.003489][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 62.011926][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.015245][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.024057][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.026989][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.033039][ T4844] batman_adv: batadv0: Removing interface: geneve2 [ 62.041549][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 62.169961][ T4846] loop0: detected capacity change from 0 to 512 [ 62.180285][ T4846] EXT4-fs (loop0): Test dummy encryption mode enabled [ 62.194587][ T4846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 62.195958][ T4846] System zones: 1-2, 4-12, 8-8 [ 62.201293][ T4846] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.128: iget: bad i_size value: 38620345925642 [ 62.209813][ T4846] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.128: couldn't read orphan inode 15 (err -117) [ 62.279255][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.298562][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 62.670597][ T4854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.119'. [ 62.675688][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 62.698313][ T4861] loop4: detected capacity change from 0 to 256 [ 62.796977][ T4861] FAT-fs (loop4): Directory bread(block 64) failed [ 62.807006][ T4861] FAT-fs (loop4): Directory bread(block 65) failed [ 62.811580][ T4861] FAT-fs (loop4): Directory bread(block 66) failed [ 62.813736][ T4861] FAT-fs (loop4): Directory bread(block 67) failed [ 62.819492][ T4867] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 62.820858][ T4861] FAT-fs (loop4): Directory bread(block 68) failed [ 62.823093][ T4861] FAT-fs (loop4): Directory bread(block 69) failed [ 62.826056][ T4867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.826323][ T4861] FAT-fs (loop4): Directory bread(block 70) failed [ 62.830511][ T4861] FAT-fs (loop4): Directory bread(block 71) failed [ 62.831808][ T4861] FAT-fs (loop4): Directory bread(block 72) failed [ 62.832992][ T4861] FAT-fs (loop4): Directory bread(block 73) failed [ 62.835650][ T4867] bond1: (slave geneve2): making interface the new active one [ 62.838797][ T4867] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 62.839578][ T4870] loop0: detected capacity change from 0 to 512 [ 62.841405][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 62.851551][ T4870] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.813207][ T4870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 63.814628][ T4870] System zones: 0-2, 18-18, 34-34 [ 63.820140][ T4870] EXT4-fs (loop0): 1 orphan inode deleted [ 63.821029][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.203017][ T4880] fat__get_entry: 200 callbacks suppressed [ 70.203030][ T4880] FAT-fs (loop4): Directory bread(block 64) failed [ 70.205130][ T4880] FAT-fs (loop4): Directory bread(block 65) failed [ 70.206118][ T4880] FAT-fs (loop4): Directory bread(block 66) failed [ 70.207119][ T4880] FAT-fs (loop4): Directory bread(block 67) failed [ 70.208205][ T4880] FAT-fs (loop4): Directory bread(block 68) failed [ 70.209259][ T4880] FAT-fs (loop4): Directory bread(block 69) failed [ 70.210291][ T4880] FAT-fs (loop4): Directory bread(block 70) failed [ 70.211282][ T4880] FAT-fs (loop4): Directory bread(block 71) failed [ 70.212319][ T4880] FAT-fs (loop4): Directory bread(block 72) failed [ 70.213376][ T4880] FAT-fs (loop4): Directory bread(block 73) failed [ 70.268739][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.269936][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.274691][ T4873] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.276400][ T4873] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:19: Failed to release dquot type 1 [ 70.276843][ T7] cfg80211: failed to load regulatory.db [ 70.307906][ T4873] EXT4-fs (loop0): Remounting filesystem read-only [ 70.309809][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 70.344075][ T4887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.398141][ T4889] loop0: detected capacity change from 0 to 512 [ 70.404579][ T4887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.409005][ T4889] EXT4-fs (loop0): Test dummy encryption mode enabled [ 70.424406][ T4889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 70.425915][ T4889] System zones: 1-2, 4-12, 8-8 [ 70.428311][ T4889] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.130: iget: bad i_size value: 38620345925642 [ 70.439078][ T4889] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.130: couldn't read orphan inode 15 (err -117) [ 70.500976][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 70.508797][ T4889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.589602][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 70.614084][ T4904] loop1: detected capacity change from 0 to 512 [ 70.948278][ T4904] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.135: corrupted in-inode xattr [ 70.953921][ T4904] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.135: couldn't read orphan inode 15 (err -117) [ 70.964021][ T4904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.079336][ T4914] loop2: detected capacity change from 0 to 32768 [ 71.082431][ T4914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.139 (4914) [ 71.089624][ T4914] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.091439][ T4914] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 71.092946][ T4914] BTRFS info (device loop2): setting nodatasum [ 71.093940][ T4914] BTRFS info (device loop2): force zlib compression, level 3 [ 71.095301][ T4914] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 71.096749][ T4914] BTRFS info (device loop2): use lzo compression, level 0 [ 71.098355][ T4914] BTRFS info (device loop2): turning on flush-on-commit [ 71.098759][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 71.099550][ T4914] BTRFS info (device loop2): enabling auto defrag [ 71.102258][ T4914] BTRFS info (device loop2): max_inline at 4096 [ 71.103321][ T4914] BTRFS info (device loop2): using free space tree [ 71.172972][ T4929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 71.176632][ T4929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 71.262914][ T4914] BTRFS info (device loop2): enabling ssd optimizations [ 71.279463][ T4927] tipc: Started in network mode [ 71.280565][ T4927] tipc: Node identity 8a2eebdd8b56, cluster identity 4711 [ 71.281934][ T4927] tipc: Enabled bearer , priority 0 [ 71.284494][ T4927] device syzkaller0 entered promiscuous mode [ 71.332960][ T4927] tipc: Resetting bearer [ 71.341394][ T4926] tipc: Resetting bearer [ 71.373748][ T4340] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.438208][ T4926] tipc: Disabling bearer [ 71.455351][ T4317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4317) [ 71.561140][ T4939] loop3: detected capacity change from 0 to 32768 [ 71.582016][ T4963] loop4: detected capacity change from 0 to 512 [ 71.588906][ T4963] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.463082][ T4963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 72.469315][ T4963] System zones: 1-2, 4-12, 8-8 [ 72.480838][ T4963] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.147: iget: bad i_size value: 38620345925642 [ 72.488543][ T4963] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.147: couldn't read orphan inode 15 (err -117) [ 72.505218][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.566317][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 72.595447][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 72.701080][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.702609][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.140817][ T4976] loop2: detected capacity change from 0 to 32768 [ 73.197541][ T4976] XFS (loop2): Mounting V5 Filesystem [ 73.212752][ T4976] XFS (loop2): Ending clean mount [ 73.217523][ T4976] XFS (loop2): Quotacheck needed: Please wait. [ 73.257684][ T4976] XFS (loop2): Quotacheck: Done. [ 73.318249][ T4340] XFS (loop2): Unmounting Filesystem [ 73.485152][ T5006] process 'syz.4.155' launched './file0' with NULL argv: empty string added [ 73.666340][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.669160][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.704373][ T5010] mmap: syz.0.160 (5010): VmData 45883392 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 73.707387][ T5010] binder: 5009:5010 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.709411][ T5010] binder: 5009:5010 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 73.710627][ T5010] binder: 5009:5010 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.712837][ T5010] binder: 5010 RLIMIT_NICE not set [ 74.966544][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 75.353782][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.355374][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.684526][ T5046] device bridge0 entered promiscuous mode [ 75.685716][ T5046] device macsec1 entered promiscuous mode [ 75.788896][ T5052] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 75.799675][ T5052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.836090][ T5048] loop3: detected capacity change from 0 to 32768 [ 75.868664][ T5057] loop4: detected capacity change from 0 to 4096 [ 75.903623][ T5057] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.936480][ T5057] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 75.938129][ T5057] System zones: 0-5 [ 75.938827][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.954472][ T5057] overlayfs: missing 'lowerdir' [ 76.014960][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 77.684421][ T5073] loop3: detected capacity change from 0 to 512 [ 77.771200][ T5073] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.175: corrupted in-inode xattr [ 77.774707][ T5073] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 77.835113][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.959876][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 77.996004][ T5092] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 78.022065][ T5092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.040533][ T5092] bond1: (slave geneve2): making interface the new active one [ 78.042725][ T5092] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.046512][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 79.028621][ T5113] device syzkaller0 entered promiscuous mode [ 79.308479][ T5101] loop4: detected capacity change from 0 to 32768 [ 79.317008][ T5101] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 79.373354][ T5119] loop1: detected capacity change from 0 to 32768 [ 79.377165][ T5119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (5119) [ 79.391001][ T5119] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.394938][ T5119] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 79.398273][ T4317] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 79.401128][ T5119] BTRFS info (device loop1): using free space tree [ 80.817986][ T5119] BTRFS info (device loop1): enabling ssd optimizations [ 80.841853][ T4328] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.855975][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 80.969667][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.971261][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.998794][ T5165] loop2: detected capacity change from 0 to 4096 [ 82.034719][ T5183] device syzkaller0 entered promiscuous mode [ 82.579700][ T5198] loop0: detected capacity change from 0 to 32768 [ 82.606687][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 82.817051][ T5217] loop0: detected capacity change from 0 to 32768 [ 82.830668][ T5217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.214 (5217) [ 82.837392][ T5217] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.839560][ T5217] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 82.841146][ T5217] BTRFS info (device loop0): use zlib compression, level 3 [ 82.842375][ T5217] BTRFS info (device loop0): turning on sync discard [ 82.843491][ T5217] BTRFS info (device loop0): using free space tree [ 82.925074][ T5217] BTRFS info (device loop0): enabling ssd optimizations [ 82.979516][ T4335] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.895412][ T4317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4317) [ 83.909163][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 84.142555][ T5265] device syzkaller0 entered promiscuous mode [ 84.261262][ T5259] loop0: detected capacity change from 0 to 32768 [ 84.268517][ T5263] loop4: detected capacity change from 0 to 32768 [ 84.272713][ T5263] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 84.323677][ T5259] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 84.406549][ T5267] loop2: detected capacity change from 0 to 32768 [ 84.410065][ T5267] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.223 (5267) [ 84.413444][ T5267] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 84.414203][ T4321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4321) [ 84.417547][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 84.424800][ T5267] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 84.432872][ T5267] BTRFS info (device loop2): turning on flush-on-commit [ 84.441495][ T5267] BTRFS info (device loop2): enabling auto defrag [ 84.447867][ T5267] BTRFS info (device loop2): turning off barriers [ 84.453418][ T5267] BTRFS info (device loop2): setting nodatacow, compression disabled [ 84.469985][ T5267] BTRFS info (device loop2): ignoring data csums [ 84.472260][ T4335] ocfs2: Unmounting device (7,0) on (node local) [ 84.477991][ T5267] BTRFS info (device loop2): using default commit interval 30s [ 84.479175][ T5267] BTRFS info (device loop2): disabling free space tree [ 84.480189][ T5267] BTRFS info (device loop2): setting datacow [ 84.481146][ T5267] BTRFS info (device loop2): turning off flush-on-commit [ 84.482203][ T5267] BTRFS info (device loop2): disabling log replay at mount time [ 84.483317][ T5267] BTRFS error (device loop2): unrecognized mount option 'metadata_ra' [ 84.484513][ T5267] BTRFS error (device loop2): cannot disable free space tree [ 84.502506][ T5267] BTRFS error (device loop2): open_ctree failed: -22 [ 84.660119][ T4320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4320) [ 84.670311][ T5271] loop4: detected capacity change from 0 to 32768 [ 84.945171][ T5283] loop2: detected capacity change from 0 to 32768 [ 84.950704][ T5283] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.958640][ T5283] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 85.027792][ T5283] BTRFS info (device loop2): turning on sync discard [ 85.028882][ T5283] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 85.033171][ T5283] BTRFS info (device loop2): use zstd compression, level 3 [ 85.035541][ T5283] BTRFS info (device loop2): turning on async discard [ 85.037941][ T5283] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 85.039773][ T5283] BTRFS info (device loop2): trying to use backup root at mount time [ 85.043301][ T5283] BTRFS info (device loop2): enabling auto defrag [ 85.046478][ T5283] BTRFS info (device loop2): using free space tree [ 86.039993][ T5317] loop4: detected capacity change from 0 to 512 [ 86.103987][ T4759] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 86.106685][ T5283] BTRFS error (device loop2): failed to load root extent [ 86.107958][ T5283] BTRFS warning (device loop2): try to load backup roots slot 1 [ 86.109517][ T4443] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 86.111689][ T5283] BTRFS warning (device loop2): couldn't read tree root [ 86.112999][ T5283] BTRFS warning (device loop2): try to load backup roots slot 2 [ 86.114604][ T5283] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 86.116500][ T5283] BTRFS warning (device loop2): couldn't read tree root [ 86.138270][ T5317] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.232: corrupted in-inode xattr [ 86.140457][ T5283] BTRFS warning (device loop2): try to load backup roots slot 3 [ 86.149225][ T5317] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 86.152496][ T5328] device syzkaller0 entered promiscuous mode [ 86.157421][ T5317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.174252][ T5283] BTRFS info (device loop2): enabling ssd optimizations [ 86.175594][ T5283] BTRFS info (device loop2): rebuilding free space tree [ 86.193704][ T5283] BTRFS info (device loop2): checking UUID tree [ 86.309655][ T4340] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.393218][ T4321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4321) [ 86.437405][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 86.455330][ T4337] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 86.745972][ T5358] loop0: detected capacity change from 0 to 32768 [ 86.889591][ T5371] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 86.896558][ T5371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.773729][ T5386] device syzkaller0 entered promiscuous mode [ 88.047793][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 88.193749][ T5399] loop3: detected capacity change from 0 to 4096 [ 88.225425][ T5403] loop2: detected capacity change from 0 to 512 [ 88.231858][ T5399] EXT4-fs (loop3): Test dummy encryption mode enabled [ 88.242339][ T5399] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 88.243787][ T5399] System zones: 0-5 [ 88.267791][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.269387][ T5399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.318688][ T5399] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 88.325886][ T5399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.328716][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 88.476659][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 89.690127][ T5416] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 89.711082][ T5416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.539275][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 91.549277][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 91.574827][ T5450] device syzkaller0 entered promiscuous mode [ 91.820915][ T5454] loop0: detected capacity change from 0 to 40427 [ 91.829392][ T5454] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 91.830468][ T5454] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.868422][ T5454] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.898066][ T5454] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.899378][ T5454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.910975][ T5458] loop3: detected capacity change from 0 to 32768 [ 91.913279][ T5458] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 91.944572][ T4321] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.128826][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 94.397487][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 94.401042][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 94.452565][ T5501] device syzkaller0 entered promiscuous mode [ 94.704835][ T5523] loop3: detected capacity change from 0 to 512 [ 94.730867][ T5523] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.284: corrupted in-inode xattr [ 94.738263][ T5523] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.284: couldn't read orphan inode 15 (err -117) [ 94.748116][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.049131][ T5539] loop1: detected capacity change from 0 to 4096 [ 95.050657][ T5539] ntfs3: Unknown parameter 'windows_names' [ 95.139072][ T4317] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.182363][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 95.286519][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 95.613682][ T5552] loop1: detected capacity change from 0 to 32768 [ 95.628261][ T5552] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 96.829769][ T4317] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 96.847748][ T5563] device syzkaller0 entered promiscuous mode [ 97.071771][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 97.112432][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 97.967271][ T5575] loop4: detected capacity change from 0 to 32768 [ 98.106087][ T5575] (syz.4.301,5575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.109256][ T5575] (syz.4.301,5575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.147841][ T5575] JBD2: Ignoring recovery information on journal [ 98.293594][ T5598] loop0: detected capacity change from 0 to 2048 [ 98.295912][ T5575] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.340191][ T4332] ocfs2: Unmounting device (7,4) on (node local) [ 98.348255][ T5598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.544140][ T5608] device syzkaller0 entered promiscuous mode [ 98.566796][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 100.738849][ T5642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.740392][ T5642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.053241][ T5644] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4327] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5644] [ 101.056052][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 101.079665][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 101.088914][ T5641] device syzkaller0 entered promiscuous mode [ 101.094737][ T5645] tipc: Started in network mode [ 101.095531][ T5645] tipc: Node identity 167b806c69ea, cluster identity 4711 [ 101.096766][ T5645] tipc: Enabled bearer , priority 0 [ 101.167302][ T5643] tipc: Resetting bearer [ 101.361677][ T5639] tipc: Resetting bearer [ 101.424563][ T5639] tipc: Disabling bearer [ 101.427337][ T5656] device syzkaller0 entered promiscuous mode [ 102.578301][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 102.613816][ T5685] loop4: detected capacity change from 0 to 128 [ 102.624874][ T5685] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 102.631068][ T5685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.134846][ T5700] device syzkaller0 entered promiscuous mode [ 103.233250][ T5696] loop1: detected capacity change from 0 to 32768 [ 103.249491][ T5696] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 103.295771][ T4317] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 103.301514][ T5698] loop2: detected capacity change from 0 to 32768 [ 103.306535][ T5698] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.338 (5698) [ 103.318453][ T5698] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 103.320120][ T5698] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.326193][ T5698] BTRFS info (device loop2): force zlib compression, level 3 [ 103.327348][ T5698] BTRFS info (device loop2): allowing degraded mounts [ 103.338086][ T5698] BTRFS info (device loop2): setting nodatasum [ 103.339147][ T5698] BTRFS info (device loop2): allowing degraded mounts [ 103.340209][ T5698] BTRFS info (device loop2): using free space tree [ 103.582200][ T5698] BTRFS error (device loop2): balance: invalid convert metadata profile raid5 [ 103.649725][ T5730] IPVS: lc: FWM 3 0x00000003 - no destination available [ 103.903908][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 103.929522][ T4340] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 104.401186][ T5751] loop0: detected capacity change from 0 to 4096 [ 104.404320][ T5751] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.406865][ T5751] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 104.408437][ T5751] System zones: 0-5 [ 104.409967][ T5751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.423666][ T5751] overlayfs: missing 'lowerdir' [ 104.444500][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 104.483726][ T5755] device syzkaller0 entered promiscuous mode [ 104.563377][ T5761] tipc: Started in network mode [ 104.564321][ T5761] tipc: Node identity 8a479fd7038f, cluster identity 4711 [ 104.565563][ T5761] tipc: Enabled bearer , priority 0 [ 104.567160][ T5761] device syzkaller0 entered promiscuous mode [ 104.572895][ T5761] tipc: Resetting bearer [ 104.575353][ T5760] tipc: Resetting bearer [ 104.628003][ T5760] tipc: Disabling bearer [ 104.684437][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 104.759720][ T5763] loop3: detected capacity change from 0 to 32768 [ 104.764352][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.354 (5763) [ 104.771850][ T5763] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.791478][ T5763] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 104.793127][ T5763] BTRFS info (device loop3): turning on sync discard [ 104.794239][ T5763] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.795903][ T5763] BTRFS info (device loop3): use zstd compression, level 3 [ 104.797283][ T5763] BTRFS info (device loop3): enabling auto defrag [ 104.799209][ T5763] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.801030][ T5763] BTRFS info (device loop3): trying to use backup root at mount time [ 104.802398][ T5763] BTRFS info (device loop3): turning on async discard [ 104.803670][ T5763] BTRFS info (device loop3): using free space tree [ 104.933766][ T5793] loop1: detected capacity change from 0 to 4096 [ 104.938389][ T5793] EXT4-fs (loop1): Test dummy encryption mode enabled [ 104.941562][ T5110] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 104.943983][ T5763] BTRFS error (device loop3): failed to load root extent [ 104.945288][ T5763] BTRFS warning (device loop3): try to load backup roots slot 1 [ 104.946644][ T5110] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 104.947190][ T5793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 104.973087][ T5793] System zones: 0-5 [ 104.974348][ T5793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.979058][ T5763] BTRFS warning (device loop3): couldn't read tree root [ 104.980185][ T5763] BTRFS warning (device loop3): try to load backup roots slot 2 [ 104.991104][ T5763] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 104.993330][ T5763] BTRFS warning (device loop3): couldn't read tree root [ 104.994527][ T5763] BTRFS warning (device loop3): try to load backup roots slot 3 [ 105.007365][ T5793] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 105.010783][ T5793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 105.016503][ T5763] BTRFS info (device loop3): rebuilding free space tree [ 105.031109][ T5763] BTRFS info (device loop3): checking UUID tree [ 105.052822][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 105.109931][ T4327] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.175122][ T5814] tipc: Enabled bearer , priority 0 [ 105.176883][ T5814] device syzkaller0 entered promiscuous mode [ 105.190113][ T5814] tipc: Resetting bearer [ 105.191516][ T5816] device syzkaller0 entered promiscuous mode [ 105.565543][ T5812] tipc: Resetting bearer [ 105.588169][ T5812] tipc: Disabling bearer [ 105.676249][ T5828] IPVS: lc: FWM 3 0x00000003 - no destination available [ 106.759718][ T5855] device syzkaller0 entered promiscuous mode [ 106.873119][ T5851] loop3: detected capacity change from 0 to 32768 [ 106.889870][ T5851] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.893557][ T5851] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.910886][ T5851] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 106.917271][ T4956] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.926941][ T4956] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.953152][ T4956] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 106.956900][ T4956] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.963124][ T5851] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.002442][ T5851] gfs2: fsid=syz:syz.0: found 1 quota changes [ 107.029668][ T4327] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 107.029668][ T4327] inode = 11 2339 [ 107.029668][ T4327] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 107.032731][ T4327] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 107.034361][ T4327] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4327 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 107.035988][ T4327] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 107.074965][ T4327] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 107.086367][ T4327] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 107.089992][ T4327] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 107.093869][ T4327] gfs2: fsid=syz:syz.0: File system withdrawn [ 107.095708][ T4327] CPU: 1 PID: 4327 Comm: syz-executor Not tainted syzkaller #0 [ 107.096968][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.098619][ T4327] Call trace: [ 107.099098][ T4327] dump_backtrace+0x1c0/0x1ec [ 107.099961][ T4327] show_stack+0x2c/0x3c [ 107.100658][ T4327] __dump_stack+0x30/0x40 [ 107.101313][ T4327] dump_stack_lvl+0xf4/0x15c [ 107.102011][ T4327] dump_stack+0x1c/0x5c [ 107.102692][ T4327] gfs2_withdraw+0x9ec/0x127c [ 107.103520][ T4327] gfs2_consist_inode_i+0xf0/0x10c [ 107.104443][ T4327] gfs2_inode_refresh+0x988/0xe50 [ 107.105267][ T4327] inode_go_instantiate+0x4c/0x68 [ 107.106156][ T4327] gfs2_instantiate+0x178/0x2b4 [ 107.106957][ T4327] gfs2_glock_wait+0x1b4/0x298 [ 107.107784][ T4327] gfs2_glock_nq+0x8bc/0x11c4 [ 107.108656][ T4327] do_sync+0x41c/0xaec [ 107.109424][ T4327] gfs2_quota_sync+0x2cc/0x500 [ 107.110244][ T4327] gfs2_sync_fs+0x4c/0xc4 [ 107.111014][ T4327] sync_filesystem+0xe8/0x218 [ 107.111814][ T4327] generic_shutdown_super+0x70/0x324 [ 107.112694][ T4327] kill_block_super+0x70/0xdc [ 107.113508][ T4327] gfs2_kill_sb+0xc0/0xd4 [ 107.114270][ T4327] deactivate_locked_super+0xac/0x120 [ 107.115237][ T4327] deactivate_super+0xe4/0x104 [ 107.116099][ T4327] cleanup_mnt+0x390/0x418 [ 107.116821][ T4327] __cleanup_mnt+0x20/0x30 [ 107.117607][ T4327] task_work_run+0x1ec/0x278 [ 107.118395][ T4327] do_notify_resume+0x1fa0/0x2aa4 [ 107.119217][ T4327] el0_svc+0x98/0x128 [ 107.119892][ T4327] el0t_64_sync_handler+0x84/0xf0 [ 107.120677][ T4327] el0t_64_sync+0x18c/0x190 [ 107.121471][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.182605][ T4327] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 107.185133][ T4327] CPU: 1 PID: 4327 Comm: syz-executor Not tainted syzkaller #0 [ 107.186316][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.187918][ T4327] Call trace: [ 107.188474][ T4327] dump_backtrace+0x1c0/0x1ec [ 107.189255][ T4327] show_stack+0x2c/0x3c [ 107.189896][ T4327] __dump_stack+0x30/0x40 [ 107.190585][ T4327] dump_stack_lvl+0xf4/0x15c [ 107.191327][ T4327] dump_stack+0x1c/0x5c [ 107.192046][ T4327] gfs2_assert_warn_i+0x16c/0x26c [ 107.192914][ T4327] gfs2_quota_cleanup+0x464/0x668 [ 107.193746][ T4327] gfs2_put_super+0x1f0/0x760 [ 107.194535][ T4327] generic_shutdown_super+0x130/0x324 [ 107.195511][ T4327] kill_block_super+0x70/0xdc [ 107.196386][ T4327] gfs2_kill_sb+0xc0/0xd4 [ 107.197137][ T4327] deactivate_locked_super+0xac/0x120 [ 107.198076][ T4327] deactivate_super+0xe4/0x104 [ 107.198942][ T4327] cleanup_mnt+0x390/0x418 [ 107.199696][ T4327] __cleanup_mnt+0x20/0x30 [ 107.200477][ T4327] task_work_run+0x1ec/0x278 [ 107.201277][ T4327] do_notify_resume+0x1fa0/0x2aa4 [ 107.202129][ T4327] el0_svc+0x98/0x128 [ 107.202811][ T4327] el0t_64_sync_handler+0x84/0xf0 [ 107.203660][ T4327] el0t_64_sync+0x18c/0x190 [ 107.750222][ T5866] loop2: detected capacity change from 0 to 40427 [ 107.762017][ T5866] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 107.765678][ T5866] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 107.781706][ T5866] F2FS-fs (loop2): invalid crc value [ 107.806050][ T5866] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.815123][ T5866] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 107.826608][ T5866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.840839][ T5866] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c [ 107.863785][ T4340] syz-executor: attempt to access beyond end of device [ 107.863785][ T4340] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.029551][ T5892] device syzkaller0 entered promiscuous mode [ 108.119471][ T5896] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.933750][ T5915] loop4: detected capacity change from 0 to 2048 [ 108.987348][ T5915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.037800][ T5924] capability: warning: `syz.4.401' uses 32-bit capabilities (legacy support in use) [ 109.663712][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 109.733555][ T5939] device syzkaller0 entered promiscuous mode [ 109.986948][ T5948] IPVS: lc: FWM 3 0x00000003 - no destination available [ 110.217342][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 110.711180][ T5980] loop2: detected capacity change from 0 to 2048 [ 110.729641][ T5980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.201570][ T5988] loop1: detected capacity change from 0 to 4096 [ 111.212363][ T5988] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 111.325228][ T5988] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 111.331919][ T5990] device syzkaller0 entered promiscuous mode [ 111.341014][ T5988] ntfs3: loop1: Inode r=b is not in use! [ 111.342195][ T5988] ntfs3: loop1: Failed to load $Extend. [ 111.680073][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 111.959117][ T6010] loop4: detected capacity change from 0 to 2048 [ 111.994415][ T6010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.158646][ T4331] Bluetooth: hci5: command 0xfc11 tx timeout [ 112.159933][ T4337] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 112.564885][ T6033] device syzkaller0 entered promiscuous mode [ 112.909851][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 113.279952][ T6049] loop3: detected capacity change from 0 to 2048 [ 113.307263][ T6049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.405513][ T6057] loop4: detected capacity change from 0 to 164 [ 113.509046][ T6066] device syzkaller0 entered promiscuous mode [ 113.541738][ T4317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.984179][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 114.039493][ T6082] loop0: detected capacity change from 0 to 2048 [ 114.063087][ T6082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.810900][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 114.836896][ T6109] device syzkaller0 entered promiscuous mode [ 114.838264][ T4954] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.021450][ T4954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.023361][ T4954] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.025296][ T4954] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.028181][ T4954] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.033453][ T4954] usb 1-1: config 1 interface 0 has no altsetting 0 [ 115.040199][ T4954] usb 1-1: string descriptor 0 read error: -22 [ 115.042475][ T4954] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.046263][ T4954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.120390][ T6115] loop3: detected capacity change from 0 to 2048 [ 115.136197][ T6115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.710657][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 115.735606][ T6138] device syzkaller0 entered promiscuous mode [ 119.012413][ T4954] usbhid 1-1:1.0: can't add hid device: -71 [ 119.013548][ T4954] usbhid: probe of 1-1:1.0 failed with error -71 [ 119.035441][ T4954] usb 1-1: USB disconnect, device number 2 [ 119.055499][ T6147] loop3: detected capacity change from 0 to 2048 [ 119.098179][ T6147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.009521][ T6180] tipc: Started in network mode [ 120.011483][ T6180] tipc: Node identity e627cd0b378c, cluster identity 4711 [ 120.013809][ T6180] tipc: Enabled bearer , priority 0 [ 120.017370][ T6180] device syzkaller0 entered promiscuous mode [ 120.027242][ T6180] tipc: Resetting bearer [ 120.044726][ T6173] loop2: detected capacity change from 0 to 32768 [ 120.051212][ T6173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.487 (6173) [ 120.054965][ T6173] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.056772][ T6173] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 120.058209][ T6173] BTRFS info (device loop2): turning on sync discard [ 120.059372][ T6173] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.060809][ T6173] BTRFS info (device loop2): use zstd compression, level 3 [ 120.061912][ T6173] BTRFS info (device loop2): turning on async discard [ 120.063037][ T6173] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 120.064687][ T6173] BTRFS info (device loop2): trying to use backup root at mount time [ 120.065968][ T6173] BTRFS info (device loop2): enabling auto defrag [ 120.066985][ T6173] BTRFS info (device loop2): using free space tree [ 120.097218][ T6188] loop4: detected capacity change from 0 to 8 [ 120.098525][ T6179] tipc: Resetting bearer [ 120.128327][ T6179] tipc: Disabling bearer [ 120.222074][ T4443] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 120.224724][ T6173] BTRFS error (device loop2): failed to load root extent [ 120.226143][ T6173] BTRFS warning (device loop2): try to load backup roots slot 1 [ 120.228226][ T5252] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 120.233877][ T6173] BTRFS warning (device loop2): couldn't read tree root [ 120.234978][ T6173] BTRFS warning (device loop2): try to load backup roots slot 2 [ 120.247904][ T6173] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 120.249818][ T6173] BTRFS warning (device loop2): couldn't read tree root [ 120.251695][ T6173] BTRFS warning (device loop2): try to load backup roots slot 3 [ 120.267010][ T6197] loop3: detected capacity change from 0 to 4096 [ 120.268946][ T6197] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.295742][ T6197] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 120.297118][ T6197] System zones: 0-5 [ 120.298207][ T6173] BTRFS info (device loop2): enabling ssd optimizations [ 120.299757][ T6173] BTRFS info (device loop2): rebuilding free space tree [ 120.302786][ T6173] BTRFS info (device loop2): checking UUID tree [ 120.325779][ T6214] loop0: detected capacity change from 0 to 512 [ 120.709365][ T6214] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.492: corrupted in-inode xattr [ 120.711875][ T6214] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.492: couldn't read orphan inode 15 (err -117) [ 120.714060][ T6214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.719990][ T6197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.756752][ T4340] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.850963][ T6197] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 120.857490][ T6197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 122.471796][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 122.663612][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 122.736434][ T6237] device syzkaller0 entered promiscuous mode [ 122.778945][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 123.638046][ T6262] loop4: detected capacity change from 0 to 256 [ 123.671614][ T6262] FAT-fs (loop4): Directory bread(block 64) failed [ 123.672700][ T6262] FAT-fs (loop4): Directory bread(block 65) failed [ 123.673798][ T6262] FAT-fs (loop4): Directory bread(block 66) failed [ 123.675401][ T6262] FAT-fs (loop4): Directory bread(block 67) failed [ 123.677223][ T6262] FAT-fs (loop4): Directory bread(block 68) failed [ 123.683771][ T6262] FAT-fs (loop4): Directory bread(block 69) failed [ 123.685064][ T6262] FAT-fs (loop4): Directory bread(block 70) failed [ 123.686085][ T6262] FAT-fs (loop4): Directory bread(block 71) failed [ 123.687133][ T6262] FAT-fs (loop4): Directory bread(block 72) failed [ 123.702908][ T6262] FAT-fs (loop4): Directory bread(block 73) failed [ 124.661176][ T6272] loop2: detected capacity change from 0 to 4096 [ 124.678287][ T6272] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.684969][ T6272] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 124.686396][ T6272] System zones: 0-5 [ 124.693270][ T6272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.739370][ T6272] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 124.741232][ T6272] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.827923][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 124.962772][ T6280] loop3: detected capacity change from 0 to 512 [ 124.979336][ T6280] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.511: corrupted in-inode xattr [ 124.981383][ T6280] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.511: couldn't read orphan inode 15 (err -117) [ 124.983748][ T6280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.082334][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 125.148517][ T6291] device syzkaller0 entered promiscuous mode [ 126.319504][ T6312] loop2: detected capacity change from 0 to 4096 [ 126.345684][ T6312] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.353424][ T6312] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 126.354787][ T6312] System zones: 0-5 [ 126.359464][ T6312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.476702][ T6312] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 126.484054][ T6312] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 127.459857][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 127.582642][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 127.782748][ T6340] device syzkaller0 entered promiscuous mode [ 128.250647][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 128.358604][ T6356] loop1: detected capacity change from 0 to 4096 [ 128.363827][ T6356] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.365957][ T6356] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 128.367577][ T6356] System zones: 0-5 [ 128.369473][ T6356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.388481][ T6356] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 128.390589][ T6356] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.419810][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 128.845902][ T6366] loop4: detected capacity change from 0 to 256 [ 128.863272][ T6366] FAT-fs (loop4): Directory bread(block 64) failed [ 128.866595][ T6366] FAT-fs (loop4): Directory bread(block 65) failed [ 128.868613][ T6366] FAT-fs (loop4): Directory bread(block 66) failed [ 128.871923][ T6366] FAT-fs (loop4): Directory bread(block 67) failed [ 128.874141][ T6366] FAT-fs (loop4): Directory bread(block 68) failed [ 128.877417][ T6366] FAT-fs (loop4): Directory bread(block 69) failed [ 128.880880][ T6366] FAT-fs (loop4): Directory bread(block 70) failed [ 128.883155][ T6366] FAT-fs (loop4): Directory bread(block 71) failed [ 128.885344][ T6366] FAT-fs (loop4): Directory bread(block 72) failed [ 128.888333][ T6366] FAT-fs (loop4): Directory bread(block 73) failed [ 129.915071][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 130.132895][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 130.269746][ T6393] device syzkaller0 entered promiscuous mode [ 130.279872][ T6393] tipc: Started in network mode [ 130.280612][ T6393] tipc: Node identity 86ccd3e548fb, cluster identity 4711 [ 130.281810][ T6393] tipc: Enabled bearer , priority 0 [ 130.292443][ T6393] tipc: Resetting bearer [ 130.294539][ T6389] tipc: Resetting bearer [ 130.329045][ T6389] tipc: Disabling bearer [ 132.253025][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.254070][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.320616][ T6412] loop4: detected capacity change from 0 to 512 [ 132.429970][ T6412] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.545: corrupted in-inode xattr [ 132.434535][ T6412] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.545: couldn't read orphan inode 15 (err -117) [ 132.703998][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.776614][ T6410] loop2: detected capacity change from 0 to 32768 [ 132.784789][ T6410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.551 (6410) [ 132.793729][ T6410] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.795535][ T6410] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 132.796795][ T6410] BTRFS info (device loop2): turning on sync discard [ 132.802549][ T6410] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.804146][ T6410] BTRFS info (device loop2): use zstd compression, level 3 [ 132.805232][ T6410] BTRFS info (device loop2): turning on async discard [ 132.806353][ T6410] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 132.813239][ T6410] BTRFS info (device loop2): trying to use backup root at mount time [ 132.814580][ T6410] BTRFS info (device loop2): enabling auto defrag [ 132.815577][ T6410] BTRFS info (device loop2): using free space tree [ 132.920309][ T4572] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 132.923616][ T6410] BTRFS error (device loop2): failed to load root extent [ 132.924938][ T6410] BTRFS warning (device loop2): try to load backup roots slot 1 [ 132.926492][ T4586] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 132.928991][ T6410] BTRFS warning (device loop2): couldn't read tree root [ 132.930197][ T6410] BTRFS warning (device loop2): try to load backup roots slot 2 [ 132.931721][ T6410] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 132.939833][ T6410] BTRFS warning (device loop2): couldn't read tree root [ 132.943193][ T6410] BTRFS warning (device loop2): try to load backup roots slot 3 [ 133.020599][ T6410] BTRFS info (device loop2): enabling ssd optimizations [ 133.023971][ T6410] BTRFS info (device loop2): rebuilding free space tree [ 133.033298][ T6410] BTRFS info (device loop2): checking UUID tree [ 134.539676][ T6444] loop0: detected capacity change from 0 to 256 [ 134.602088][ T6444] FAT-fs (loop0): Directory bread(block 64) failed [ 134.603119][ T6444] FAT-fs (loop0): Directory bread(block 65) failed [ 134.604264][ T6444] FAT-fs (loop0): Directory bread(block 66) failed [ 134.605282][ T6444] FAT-fs (loop0): Directory bread(block 67) failed [ 134.606342][ T6444] FAT-fs (loop0): Directory bread(block 68) failed [ 134.607315][ T6444] FAT-fs (loop0): Directory bread(block 69) failed [ 134.630925][ T6444] FAT-fs (loop0): Directory bread(block 70) failed [ 134.632046][ T6444] FAT-fs (loop0): Directory bread(block 71) failed [ 134.633128][ T6444] FAT-fs (loop0): Directory bread(block 72) failed [ 134.634274][ T6444] FAT-fs (loop0): Directory bread(block 73) failed [ 134.638386][ T4340] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.726926][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 134.895415][ T6461] device syzkaller0 entered promiscuous mode [ 134.905245][ T6461] tipc: Enabled bearer , priority 0 [ 134.912385][ T6461] tipc: Resetting bearer [ 134.914654][ T6460] tipc: Resetting bearer [ 134.935587][ T4317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4317) [ 134.968253][ T6460] tipc: Disabling bearer [ 135.038390][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 138.454060][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 138.502340][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 138.515527][ T6510] device syzkaller0 entered promiscuous mode [ 138.526930][ T6510] tipc: Enabled bearer , priority 0 [ 138.536440][ T6510] tipc: Resetting bearer [ 138.539188][ T6509] tipc: Resetting bearer [ 138.568238][ T6509] tipc: Disabling bearer [ 138.571965][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 138.666617][ T6507] loop2: detected capacity change from 0 to 32768 [ 140.836494][ T6544] loop0: detected capacity change from 0 to 256 [ 140.854426][ T6544] FAT-fs (loop0): Directory bread(block 64) failed [ 140.855516][ T6544] FAT-fs (loop0): Directory bread(block 65) failed [ 140.856692][ T6544] FAT-fs (loop0): Directory bread(block 66) failed [ 140.867821][ T6544] FAT-fs (loop0): Directory bread(block 67) failed [ 140.868943][ T6544] FAT-fs (loop0): Directory bread(block 68) failed [ 140.873384][ T6544] FAT-fs (loop0): Directory bread(block 69) failed [ 140.874502][ T6544] FAT-fs (loop0): Directory bread(block 70) failed [ 140.875613][ T6544] FAT-fs (loop0): Directory bread(block 71) failed [ 140.876711][ T6544] FAT-fs (loop0): Directory bread(block 72) failed [ 140.890846][ T6544] FAT-fs (loop0): Directory bread(block 73) failed [ 140.978926][ T6507] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.980699][ T6507] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 140.982134][ T6507] BTRFS info (device loop2): turning on sync discard [ 140.983331][ T6507] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.995163][ T6507] BTRFS info (device loop2): use zstd compression, level 3 [ 140.998979][ T6507] BTRFS info (device loop2): turning on async discard [ 141.000115][ T6507] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.001903][ T6507] BTRFS info (device loop2): trying to use backup root at mount time [ 141.003237][ T6507] BTRFS info (device loop2): enabling auto defrag [ 141.004631][ T6507] BTRFS info (device loop2): using free space tree [ 141.144506][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 141.229484][ T4482] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 141.232070][ T6507] BTRFS error (device loop2): failed to load root extent [ 141.233449][ T6507] BTRFS warning (device loop2): try to load backup roots slot 1 [ 141.235136][ T4572] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 141.238297][ T6507] BTRFS warning (device loop2): couldn't read tree root [ 141.239597][ T6507] BTRFS warning (device loop2): try to load backup roots slot 2 [ 141.241146][ T6507] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 141.248373][ T6507] BTRFS warning (device loop2): couldn't read tree root [ 141.251913][ T6507] BTRFS warning (device loop2): try to load backup roots slot 3 [ 141.269112][ T6507] BTRFS info (device loop2): enabling ssd optimizations [ 141.270593][ T6507] BTRFS info (device loop2): rebuilding free space tree [ 141.274491][ T6507] BTRFS info (device loop2): checking UUID tree [ 141.335586][ T6574] device syzkaller0 entered promiscuous mode [ 141.340250][ T6574] tipc: Enabled bearer , priority 0 [ 141.358486][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 141.370425][ T6574] tipc: Resetting bearer [ 141.380976][ T4340] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.387118][ T6577] loop3: detected capacity change from 0 to 512 [ 141.388336][ T6573] tipc: Resetting bearer [ 141.454453][ T6577] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.582: corrupted in-inode xattr [ 141.505194][ T6577] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.582: couldn't read orphan inode 15 (err -117) [ 141.514879][ T6573] tipc: Disabling bearer [ 141.522169][ T6577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 143.589195][ T4317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4317) [ 144.512596][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 145.615722][ T6622] tipc: Enabled bearer , priority 0 [ 145.617208][ T6622] device syzkaller0 entered promiscuous mode [ 145.629381][ T6622] tipc: Resetting bearer [ 145.634263][ T6621] tipc: Resetting bearer [ 145.740084][ T6621] tipc: Disabling bearer [ 145.820640][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 146.710033][ T6634] loop4: detected capacity change from 0 to 256 [ 146.908510][ T6634] FAT-fs (loop4): Directory bread(block 64) failed [ 146.909593][ T6634] FAT-fs (loop4): Directory bread(block 65) failed [ 146.912435][ T6634] FAT-fs (loop4): Directory bread(block 66) failed [ 146.915562][ T6634] FAT-fs (loop4): Directory bread(block 67) failed [ 146.918267][ T6634] FAT-fs (loop4): Directory bread(block 68) failed [ 146.919489][ T6634] FAT-fs (loop4): Directory bread(block 69) failed [ 146.920724][ T6634] FAT-fs (loop4): Directory bread(block 70) failed [ 146.921916][ T6634] FAT-fs (loop4): Directory bread(block 71) failed [ 146.923170][ T6634] FAT-fs (loop4): Directory bread(block 72) failed [ 146.924384][ T6634] FAT-fs (loop4): Directory bread(block 73) failed [ 147.827544][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 147.897049][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 148.721222][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 150.115575][ T6669] loop3: detected capacity change from 0 to 32768 [ 150.129450][ T6669] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 150.168728][ T4317] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 150.487102][ T6705] loop0: detected capacity change from 0 to 256 [ 150.514002][ T6695] tipc: Enabled bearer , priority 0 [ 150.520138][ T6696] device syzkaller0 entered promiscuous mode [ 150.531267][ T6705] FAT-fs (loop0): Directory bread(block 64) failed [ 150.532294][ T6705] FAT-fs (loop0): Directory bread(block 65) failed [ 150.533297][ T6705] FAT-fs (loop0): Directory bread(block 66) failed [ 150.534286][ T6705] FAT-fs (loop0): Directory bread(block 67) failed [ 150.561939][ T6693] tipc: Resetting bearer [ 150.564510][ T6705] FAT-fs (loop0): Directory bread(block 68) failed [ 150.565699][ T6705] FAT-fs (loop0): Directory bread(block 69) failed [ 150.566820][ T6705] FAT-fs (loop0): Directory bread(block 70) failed [ 150.568535][ T6705] FAT-fs (loop0): Directory bread(block 71) failed [ 150.569694][ T6705] FAT-fs (loop0): Directory bread(block 72) failed [ 150.570726][ T6705] FAT-fs (loop0): Directory bread(block 73) failed [ 150.587483][ T6692] tipc: Resetting bearer [ 150.708176][ T6692] tipc: Disabling bearer [ 150.710361][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 150.868406][ T6720] loop2: detected capacity change from 0 to 512 [ 151.195708][ T6720] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.619: corrupted in-inode xattr [ 151.205355][ T6720] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.619: couldn't read orphan inode 15 (err -117) [ 151.214745][ T6720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.060643][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 154.193521][ T6742] loop1: detected capacity change from 0 to 32768 [ 154.222564][ T6742] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 154.279157][ T4317] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 154.409367][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 154.414235][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 154.491238][ T6763] tipc: Enabled bearer , priority 0 [ 154.494169][ T6763] device syzkaller0 entered promiscuous mode [ 154.506007][ T6763] tipc: Resetting bearer [ 154.511715][ T6762] tipc: Resetting bearer [ 154.568077][ T6762] tipc: Disabling bearer [ 155.047881][ T4343] Bluetooth: hci1: command 0x0406 tx timeout [ 155.049356][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 155.050388][ T4331] Bluetooth: hci3: command 0x0406 tx timeout [ 155.050400][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 155.509830][ T6781] loop0: detected capacity change from 0 to 256 [ 155.521636][ T6781] FAT-fs (loop0): Directory bread(block 64) failed [ 155.522657][ T6781] FAT-fs (loop0): Directory bread(block 65) failed [ 155.523866][ T6781] FAT-fs (loop0): Directory bread(block 66) failed [ 155.524974][ T6781] FAT-fs (loop0): Directory bread(block 67) failed [ 155.526120][ T6781] FAT-fs (loop0): Directory bread(block 68) failed [ 155.527155][ T6781] FAT-fs (loop0): Directory bread(block 69) failed [ 155.547686][ T6781] FAT-fs (loop0): Directory bread(block 70) failed [ 155.548712][ T6781] FAT-fs (loop0): Directory bread(block 71) failed [ 155.550178][ T6781] FAT-fs (loop0): Directory bread(block 72) failed [ 155.551222][ T6781] FAT-fs (loop0): Directory bread(block 73) failed [ 157.339404][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 158.211372][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 158.733369][ T6805] loop0: detected capacity change from 0 to 32768 [ 158.741416][ T6805] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 159.081399][ T4317] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 159.104676][ T6824] tipc: Enabled bearer , priority 0 [ 159.114731][ T6824] device syzkaller0 entered promiscuous mode [ 159.131899][ T6824] tipc: Resetting bearer [ 159.169936][ T6823] tipc: Resetting bearer [ 159.228478][ T6823] tipc: Disabling bearer [ 159.423484][ T6837] loop3: detected capacity change from 0 to 256 [ 159.443246][ T6837] FAT-fs (loop3): Directory bread(block 64) failed [ 159.446903][ T6837] FAT-fs (loop3): Directory bread(block 65) failed [ 159.477743][ T6837] FAT-fs (loop3): Directory bread(block 66) failed [ 159.478912][ T6837] FAT-fs (loop3): Directory bread(block 67) failed [ 159.480072][ T6837] FAT-fs (loop3): Directory bread(block 68) failed [ 159.481115][ T6837] FAT-fs (loop3): Directory bread(block 69) failed [ 159.482147][ T6837] FAT-fs (loop3): Directory bread(block 70) failed [ 159.483220][ T6837] FAT-fs (loop3): Directory bread(block 71) failed [ 159.484363][ T6837] FAT-fs (loop3): Directory bread(block 72) failed [ 159.485379][ T6837] FAT-fs (loop3): Directory bread(block 73) failed [ 160.873910][ T6851] loop1: detected capacity change from 0 to 512 [ 161.661893][ T6851] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.654: corrupted in-inode xattr [ 161.667335][ T6851] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.654: couldn't read orphan inode 15 (err -117) [ 161.682118][ T6851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.891489][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 162.148942][ T6869] loop0: detected capacity change from 0 to 32768 [ 162.167557][ T6869] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 162.546930][ T4317] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 164.341193][ T6897] tipc: Enabled bearer , priority 0 [ 164.346175][ T6897] device syzkaller0 entered promiscuous mode [ 164.362217][ T6897] tipc: Resetting bearer [ 164.371014][ T6896] tipc: Resetting bearer [ 164.441366][ T6896] tipc: Disabling bearer [ 164.776796][ T6905] loop4: detected capacity change from 0 to 256 [ 164.814008][ T6905] FAT-fs (loop4): Directory bread(block 64) failed [ 164.817377][ T6905] FAT-fs (loop4): Directory bread(block 65) failed [ 164.820850][ T6905] FAT-fs (loop4): Directory bread(block 66) failed [ 164.823182][ T6905] FAT-fs (loop4): Directory bread(block 67) failed [ 164.824536][ T6905] FAT-fs (loop4): Directory bread(block 68) failed [ 164.829924][ T6905] FAT-fs (loop4): Directory bread(block 69) failed [ 164.833363][ T6905] FAT-fs (loop4): Directory bread(block 70) failed [ 164.835711][ T6905] FAT-fs (loop4): Directory bread(block 71) failed [ 164.839037][ T6905] FAT-fs (loop4): Directory bread(block 72) failed [ 164.842464][ T6905] FAT-fs (loop4): Directory bread(block 73) failed [ 165.345507][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 165.349908][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 166.422610][ T6918] loop4: detected capacity change from 0 to 32768 [ 166.433846][ T6918] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 166.486462][ T4317] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 169.239240][ T6951] binder: 6947:6951 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 169.249118][ T6950] binder: 6947:6950 got transaction to invalid handle, 1 [ 169.250233][ T6950] binder: 6950:6947 cannot find target node [ 169.251194][ T6950] binder: 6947:6950 transaction call to 0:0 failed 15/29201/-22, size 0-24 line 3045 [ 169.263103][ T4950] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.308526][ T6953] device syzkaller0 entered promiscuous mode [ 169.318706][ T6957] loop3: detected capacity change from 0 to 256 [ 169.329600][ T6953] tipc: Enabled bearer , priority 0 [ 169.343960][ T6957] FAT-fs (loop3): Directory bread(block 64) failed [ 169.346074][ T6957] FAT-fs (loop3): Directory bread(block 65) failed [ 169.347269][ T6957] FAT-fs (loop3): Directory bread(block 66) failed [ 169.348467][ T6957] FAT-fs (loop3): Directory bread(block 67) failed [ 169.349596][ T6957] FAT-fs (loop3): Directory bread(block 68) failed [ 169.350692][ T6957] FAT-fs (loop3): Directory bread(block 69) failed [ 169.351874][ T6957] FAT-fs (loop3): Directory bread(block 70) failed [ 169.352996][ T6957] FAT-fs (loop3): Directory bread(block 71) failed [ 169.354237][ T6957] FAT-fs (loop3): Directory bread(block 72) failed [ 169.355363][ T6957] FAT-fs (loop3): Directory bread(block 73) failed [ 169.548625][ T6952] tipc: Resetting bearer [ 171.118814][ T6952] tipc: Disabling bearer [ 171.138318][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 171.159261][ T4950] tipc: Node number set to 24701917 [ 171.343240][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 171.736230][ T6996] loop2: detected capacity change from 0 to 2048 [ 171.741186][ T6996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.769797][ T7001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.780418][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 173.153656][ T7029] device syzkaller0 entered promiscuous mode [ 173.208678][ T7029] tipc: Enabled bearer , priority 0 [ 173.229119][ T7021] tipc: Resetting bearer [ 173.358890][ T7021] tipc: Disabling bearer [ 173.559125][ T7039] device syzkaller0 entered promiscuous mode [ 175.595734][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 175.726999][ T7068] device syzkaller0 entered promiscuous mode [ 175.827986][ T7075] tipc: Enabled bearer , priority 0 [ 175.868362][ T7066] tipc: Resetting bearer [ 176.008621][ T7066] tipc: Disabling bearer [ 176.070597][ T7082] device syzkaller0 entered promiscuous mode [ 176.732165][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 177.754875][ T7116] device syzkaller0 entered promiscuous mode [ 178.151484][ T7135] device syzkaller0 entered promiscuous mode [ 178.390754][ T7139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.529567][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 179.674884][ T7169] loop0: detected capacity change from 0 to 2048 [ 179.756156][ T7169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.766696][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.773274][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.783248][ T7175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.615228][ T7181] device syzkaller0 entered promiscuous mode [ 180.819407][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 181.409838][ T7196] loop1: detected capacity change from 0 to 32768 [ 181.432194][ T7196] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.762 (7196) [ 181.453848][ T7196] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 181.456287][ T7196] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 181.464266][ T7196] BTRFS info (device loop1): force zlib compression, level 3 [ 181.467949][ T7196] BTRFS info (device loop1): allowing degraded mounts [ 181.470740][ T7196] BTRFS info (device loop1): setting nodatasum [ 181.472808][ T7196] BTRFS info (device loop1): allowing degraded mounts [ 181.476152][ T7196] BTRFS info (device loop1): using free space tree [ 181.527409][ T4328] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 181.777900][ T7233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.862945][ T7240] device syzkaller0 entered promiscuous mode [ 184.207288][ T7279] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 184.216122][ T7279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.491344][ T7282] loop2: detected capacity change from 0 to 32768 [ 185.507409][ T7282] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.781 (7282) [ 185.709562][ T7293] loop4: detected capacity change from 0 to 4096 [ 185.735713][ T7282] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 185.742208][ T7282] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.743716][ T7282] BTRFS info (device loop2): force zlib compression, level 3 [ 185.744880][ T7282] BTRFS info (device loop2): allowing degraded mounts [ 185.746131][ T7282] BTRFS info (device loop2): setting nodatasum [ 185.747150][ T7282] BTRFS info (device loop2): allowing degraded mounts [ 185.778133][ T7282] BTRFS info (device loop2): using free space tree [ 185.781255][ T7295] device syzkaller0 entered promiscuous mode [ 185.799891][ T7297] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.930052][ T4340] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 186.009708][ T4317] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (4317) [ 186.030471][ T7313] device syzkaller0 entered promiscuous mode [ 186.160519][ T7332] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 186.166512][ T7332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.178354][ T7334] ------------[ cut here ]------------ [ 186.179218][ T7334] WARNING: CPU: 0 PID: 7334 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 186.180623][ T7334] Modules linked in: [ 186.181271][ T7334] CPU: 0 PID: 7334 Comm: syz.4.790 Not tainted syzkaller #0 [ 186.182461][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.184196][ T7334] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 186.185580][ T7334] pc : hugetlb_split+0x234/0x29c [ 186.186436][ T7334] lr : hugetlb_split+0x234/0x29c [ 186.187266][ T7334] sp : ffff800021997830 [ 186.187936][ T7334] x29: ffff800021997830 x28: dfff800000000000 x27: 0000000020600000 [ 186.189354][ T7334] x26: ffff0000da3a7000 x25: ffff800015240000 x24: 1ffff00002a48070 [ 186.190765][ T7334] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 186.192148][ T7334] x20: 0000000020000000 x19: ffff0000da3a7000 x18: ffff800011babf60 [ 186.193589][ T7334] x17: ffff8000088c3610 x16: ffff8000082d8944 x15: 0000000000000000 [ 186.194949][ T7334] x14: 0000000000000001 x13: 1fffe0001b56901b x12: 0000000000080000 [ 186.196324][ T7334] x11: 00000000000036ff x10: ffff80002ca3d000 x9 : ffff8000088987b8 [ 186.197803][ T7334] x8 : 0000000000003700 x7 : 0000000000000000 x6 : 000000000000003f [ 186.199262][ T7334] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008898638 [ 186.200724][ T7334] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 186.202145][ T7334] Call trace: [ 186.202681][ T7334] hugetlb_split+0x234/0x29c [ 186.203497][ T7334] __vma_adjust+0x3a0/0x1724 [ 186.204321][ T7334] __split_vma+0x324/0x444 [ 186.205113][ T7334] split_vma+0xa0/0xf8 [ 186.205835][ T7334] mbind_range+0x490/0x6ec [ 186.206617][ T7334] __arm64_sys_mbind+0x678/0x858 [ 186.207408][ T7334] invoke_syscall+0x98/0x290 [ 186.208227][ T7334] el0_svc_common+0x138/0x258 [ 186.209127][ T7334] do_el0_svc+0x58/0x130 [ 186.209848][ T7334] el0_svc+0x58/0x128 [ 186.210517][ T7334] el0t_64_sync_handler+0x84/0xf0 [ 186.211331][ T7334] el0t_64_sync+0x18c/0x190 [ 186.212106][ T7334] irq event stamp: 956 [ 186.212849][ T7334] hardirqs last enabled at (955): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 186.214524][ T7334] hardirqs last disabled at (956): [] el1_dbg+0x24/0x80 [ 186.215903][ T7334] softirqs last enabled at (868): [] local_bh_enable+0x10/0x34 [ 186.217493][ T7334] softirqs last disabled at (866): [] local_bh_disable+0x10/0x34 [ 186.219151][ T7334] ---[ end trace 0000000000000000 ]--- [ 186.221960][ T7334] ------------[ cut here ]------------ [ 186.222810][ T7334] WARNING: CPU: 0 PID: 7334 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 186.224397][ T7334] Modules linked in: [ 186.225076][ T7334] CPU: 0 PID: 7334 Comm: syz.4.790 Tainted: G W syzkaller #0 [ 186.226672][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.228324][ T7334] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 186.229722][ T7334] pc : hugetlb_split+0x234/0x29c [ 186.230576][ T7334] lr : hugetlb_split+0x234/0x29c [ 186.231444][ T7334] sp : ffff800021997830 [ 186.232139][ T7334] x29: ffff800021997830 x28: dfff800000000000 x27: 0000000020600000 [ 186.233486][ T7334] x26: ffff0000da3a7000 x25: ffff800015240000 x24: 1ffff00002a48070 [ 186.234881][ T7334] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 186.236292][ T7334] x20: 0000000020600000 x19: ffff0000da3a7000 x18: ffff800011babf60 [ 186.237644][ T7334] x17: ffff8000088c3610 x16: ffff8000082d8944 x15: 0000000000000000 [ 186.239054][ T7334] x14: 0000000000000001 x13: 1fffe0001b56901b x12: 0000000000080000 [ 186.240380][ T7334] x11: 0000000000019e39 x10: ffff80002ca3d000 x9 : ffff8000088987b8 [ 186.241735][ T7334] x8 : 0000000000019e3a x7 : 0000000000000000 x6 : 000000000000003f [ 186.243158][ T7334] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008898638 [ 186.244457][ T7334] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 186.245792][ T7334] Call trace: [ 186.246336][ T7334] hugetlb_split+0x234/0x29c [ 186.247091][ T7334] __vma_adjust+0x3ac/0x1724 [ 186.247825][ T7334] __split_vma+0x324/0x444 [ 186.248549][ T7334] split_vma+0xa0/0xf8 [ 186.249215][ T7334] mbind_range+0x490/0x6ec [ 186.249977][ T7334] __arm64_sys_mbind+0x678/0x858 [ 186.250784][ T7334] invoke_syscall+0x98/0x290 [ 186.251523][ T7334] el0_svc_common+0x138/0x258 [ 186.252231][ T7334] do_el0_svc+0x58/0x130 [ 186.252889][ T7334] el0_svc+0x58/0x128 [ 186.253602][ T7334] el0t_64_sync_handler+0x84/0xf0 [ 186.254493][ T7334] el0t_64_sync+0x18c/0x190 [ 186.255213][ T7334] irq event stamp: 996 [ 186.255878][ T7334] hardirqs last enabled at (995): [] exit_to_kernel_mode+0xcc/0xfc [ 186.257381][ T7334] hardirqs last disabled at (996): [] el1_dbg+0x24/0x80 [ 186.258912][ T7334] softirqs last enabled at (990): [] handle_softirqs+0xaec/0xc60 [ 186.260602][ T7334] softirqs last disabled at (959): [] __do_softirq+0x14/0x20 [ 186.262136][ T7334] ---[ end trace 0000000000000000 ]--- [ 186.312427][ T7332] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 186.317956][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 192.488176][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.489293][ T2063] ieee802154 phy1 wpan1: encryption failed: -22