last executing test programs: 11.351832061s ago: executing program 2 (id=1192): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.389642705s ago: executing program 2 (id=1193): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 10.389420205s ago: executing program 4 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 10.384957455s ago: executing program 1 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x4}) 10.289377688s ago: executing program 3 (id=1197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 9.455016159s ago: executing program 2 (id=1199): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 9.384209381s ago: executing program 3 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643d", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x25, 0x35b, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 9.362883182s ago: executing program 4 (id=1201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 7.86737636s ago: executing program 4 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(0xffffffffffffffff, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.812629011s ago: executing program 0 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, 0x0, 0x0, 0x200400d1}, 0x404c000) recvmsg$unix(r1, 0x0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@remote, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x73, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7.811582141s ago: executing program 1 (id=1206): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() capset(0x0, &(0x7f0000000200)={0x0, 0x5, 0x5, 0xff, 0xaf26, 0xa0}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) ioctl$BLKRRPART(r4, 0x125f, 0x0) 7.811096361s ago: executing program 2 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040040) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000480)={[{@nombcache}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") dup(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 6.513984574s ago: executing program 0 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) 6.513739154s ago: executing program 1 (id=1209): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.474200115s ago: executing program 4 (id=1210): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(0x0, 0x7ffb, 0x0, 0x0) 5.663997466s ago: executing program 3 (id=1211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 5.370244963s ago: executing program 0 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) lseek(r1, 0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000008, &(0x7f00000005c0)=ANY=[], 0x1, 0x1294, &(0x7f0000000240)="$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") 5.369908603s ago: executing program 4 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x1, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x30}}, 0xc000) 5.368586683s ago: executing program 1 (id=1222): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 4.570524204s ago: executing program 3 (id=1214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 4.552132434s ago: executing program 2 (id=1215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="696f636861727365743d617363696900f1652c696f1e716b917365743d757466382c6e6f7672732c74000020acdc6ccf12fc2289215e4cf0690f9e7a280306dca93a9e0c471dcca261ecbfef7d2c689c923248fa9b4088a7ae1c236c0610e0d94663276aaad729233c1b8662d91bda299ad42d27bce2aaf403b00e01f9b18db781ff3c0e179108254e55b32dbedc4116bf5bf3179d05c6725190d783d5d996242d8e14ddb0d65017e6819f0264081c08d474216c5976e81757a9521f170a4fda7988bef80456155b5c7874a0806025ff017cc12aa951a74b56459047d400b694f592011b0a434741ebe55eb13ee21c2b4d6012211be0be8544064643841ba617c3cdf70e2436ac56ee186c66dff01181bf5bbecb2b386676fa6691ca7ad5276878e264f82cbcb33e48949bb7a132bbbe11cb4a7f2f0eb6fe1744f39baab9cd2eefc26500d0fc199810cd3dfdde4a37ef0bdc0d0f72baa7093d5e8e02f9f68e6d0d6ec9f15247880affc233ffcd9fb5168e62a3eeae33a1058afc2fff1216bcb998bc736307324ab146be1c2e5df28280b4e33e69c89f28e0ed16a470d41354698bf8bcfb0facce28c75ef863bf59210be9d4b1d2c2b623ec67e408fc872f5bef51c9d8d41f45b0cd1ff0787c29a4e0eb2ca772757e5f40a8c1988b514214217b5aa93f3f92d0db4a8b05364e5c5fe1692519d7e25ea9f3e40724b5de8e16499461e2d3e77c09530e4277d5a392f5e2ac0493dc8fc120618c1166b24d865240c27551a349cc001ae3a56e522b1b3e4a2045075dff6f9514b24a000000000000000000", @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRES64=0x0], 0x9, 0xc56, &(0x7f0000000f40)="$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") syz_mount_image$exfat(0x0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1141000, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") sendmsg$nl_xfrm(r0, 0x0, 0x400c8c0) sched_setattr(r1, 0x0, 0x0) 4.244599232s ago: executing program 4 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.244055492s ago: executing program 0 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0xffffffffffffffff}, {}, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4.135133675s ago: executing program 1 (id=1218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1.227606689s ago: executing program 0 (id=1219): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.071396992s ago: executing program 1 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, 0x0, 0x0, 0x200400d1}, 0x404c000) recvmsg$unix(r1, 0x0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@remote, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x73, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.071096142s ago: executing program 3 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0xc2c, &(0x7f0000002580)="$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") 210.819864ms ago: executing program 2 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643d", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x25, 0x35b, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 186.291015ms ago: executing program 0 (id=1224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) 0s ago: executing program 3 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sync() chdir(&(0x7f00000001c0)='./file1\x00') kernel console output (not intermixed with test programs): (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.656738][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.683815][ T4337] team0: Port device team_slave_0 added [ 31.696397][ T4337] team0: Port device team_slave_1 added [ 31.718504][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.719780][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.723803][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.730077][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.731233][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.735824][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.786443][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.825425][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.865310][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.866708][ T4337] Cannot create hsr debugfs directory [ 31.887716][ T4331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.931592][ T4331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.966269][ T4331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.016550][ T4331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.057735][ T4338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.102407][ T4338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.136674][ T4338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.180188][ T4338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.254007][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.291680][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.326597][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.368181][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.408536][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.446945][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.482328][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.521855][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.576067][ T4337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.606613][ T4337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.648196][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.652284][ T4337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.689994][ T4337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.715498][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 32.715505][ T4346] Bluetooth: hci0: command 0x0409 tx timeout [ 32.716638][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 32.717652][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 32.718749][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 32.733223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.735347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.756181][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.758883][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.762709][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.771020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.772955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.774610][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.775892][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.778491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.788305][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.790307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.791868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.793393][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.794556][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.797069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.798964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.814772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.817286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.818985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.820705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.822333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.824013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.826638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.834842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.836740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.838465][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.839717][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.841248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.844690][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.852810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.854585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.856757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.858403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.860113][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.861421][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.871875][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.874060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.876934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.878646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.880233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.881762][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.882885][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.884361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.894669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.896989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.898601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.900632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.902412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.904080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.907420][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.912724][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.918907][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.920586][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.926483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.928109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.929706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.931423][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.932653][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.934135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.937808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.939449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.941026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.943053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.944621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.947345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.948812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.950224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.954825][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.959316][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.963792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.965455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.966994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.968502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.970069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.976213][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.977385][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.978879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.988812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.990490][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.991653][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.994433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.996897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.998675][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.999783][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.001152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.002747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.009582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.011355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.012844][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.013986][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.016950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.022129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.024534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.026799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.028598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.030198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.040963][ T4338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.042800][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.051190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.052826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.054906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.057118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.058519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.060707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.062446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.064316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.066720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.068399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.070036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.073370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.075065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.077756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.079509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.081570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.086482][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.091589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.093321][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.095023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.101626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.103290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.104966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.108941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.118974][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.121367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.123207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.124828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.127001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.129128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.130704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.132380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.133902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.137202][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.147967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.149711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.152128][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.162171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.163846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.177361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.178994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.180775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.182322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.187119][ T4330] device veth0_vlan entered promiscuous mode [ 33.189184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.190942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.192804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.194308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.201189][ T4331] device veth0_vlan entered promiscuous mode [ 33.204373][ T4331] device veth1_vlan entered promiscuous mode [ 33.213754][ T4330] device veth1_vlan entered promiscuous mode [ 33.222439][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.224165][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.228315][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.229642][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.234811][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.248524][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.250219][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.251788][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.253528][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.257090][ T4330] device veth0_macvtap entered promiscuous mode [ 33.276305][ T4330] device veth1_macvtap entered promiscuous mode [ 33.279504][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.281264][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.282750][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.284402][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.294439][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.297647][ T4331] device veth0_macvtap entered promiscuous mode [ 33.301374][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.302991][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.304343][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.311051][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.312858][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.319438][ T4331] device veth1_macvtap entered promiscuous mode [ 33.321361][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.323039][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.324453][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.327996][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.340291][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.344281][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.346338][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.347949][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.349924][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.352111][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.353585][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.357803][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.359623][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.361738][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.367452][ T4338] device veth0_vlan entered promiscuous mode [ 33.371364][ T4338] device veth1_vlan entered promiscuous mode [ 33.373924][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.377704][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.379345][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.380840][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.382511][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.384146][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.406930][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.408505][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.409982][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.411438][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.414070][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.416570][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.418863][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.421906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.423609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.426105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.427835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.429540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.431128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.432773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.434487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.436760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.439099][ T4329] device veth0_vlan entered promiscuous mode [ 33.442784][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.444294][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.447088][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448462][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.458995][ T4338] device veth0_macvtap entered promiscuous mode [ 33.462187][ T4329] device veth1_vlan entered promiscuous mode [ 33.466874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.468434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.470089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.471744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.475766][ T4338] device veth1_macvtap entered promiscuous mode [ 33.487562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.489144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.490789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.501661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.503189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.504727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.507539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.509026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.510942][ T4337] device veth0_vlan entered promiscuous mode [ 33.536559][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.538506][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.540231][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.542072][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.544356][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.549200][ T4329] device veth0_macvtap entered promiscuous mode [ 33.551212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.552991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.554639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.557470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.559103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.560974][ T4337] device veth1_vlan entered promiscuous mode [ 33.573175][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.575054][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.577669][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.579507][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.581938][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.589064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.590568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.592069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.593783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.597206][ T4329] device veth1_macvtap entered promiscuous mode [ 33.604611][ T1705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.606398][ T1705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.606539][ T4338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.609058][ T4338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.610523][ T4338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611928][ T4338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.621751][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.623436][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.624901][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.628540][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.630213][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.631801][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.634123][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.637629][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.639274][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.640901][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.642448][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.651081][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.651393][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.652811][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.653611][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.660874][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.663532][ T4337] device veth0_macvtap entered promiscuous mode [ 33.667913][ T4337] device veth1_macvtap entered promiscuous mode [ 33.672164][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.674023][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677482][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.679311][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.680908][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.682605][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.684871][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.692796][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.694437][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.697942][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.699665][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.704375][ T1705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.705746][ T1705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.709332][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.717576][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.719255][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.720874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.722938][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.724752][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.727614][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.729563][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.731247][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.732967][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.734583][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.737698][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.739996][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.741299][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.743006][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.745082][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.747211][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748695][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.750115][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.765771][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.767577][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.769200][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.770923][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.772532][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.774117][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.779136][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.780853][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.783129][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.791004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.792954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.822898][ T4412] sctp: [Deprecated]: syz.2.3 (pid 4412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.822898][ T4412] Use struct sctp_sack_info instead [ 33.826257][ T1705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.827583][ T1705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.829415][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.841561][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.843118][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.844640][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849407][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.235109][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.238933][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.241257][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.280344][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.281896][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.283743][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.299332][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.300689][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.302139][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.345603][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 34.360554][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.362072][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.363518][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.381314][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.382919][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.384505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.826236][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 34.826346][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 34.827422][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 34.828661][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 34.829537][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 35.104181][ T4432] bridge0: port 3(syz_tun) entered blocking state [ 35.116387][ T4432] bridge0: port 3(syz_tun) entered disabled state [ 35.118452][ T4432] device syz_tun entered promiscuous mode [ 35.121015][ T4432] bridge0: port 3(syz_tun) entered blocking state [ 35.122226][ T4432] bridge0: port 3(syz_tun) entered forwarding state [ 35.247576][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 35.262283][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 35.579754][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 35.597368][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.598779][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.601455][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.618320][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.632579][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 35.641089][ T4442] nvme_fabrics: missing parameter 'transport=%s' [ 35.642376][ T4442] nvme_fabrics: missing parameter 'nqn=%s' [ 35.647175][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 35.650423][ T4443] netlink: 'syz.2.8': attribute type 12 has an invalid length. [ 35.652068][ T4443] netlink: 'syz.2.8': attribute type 29 has an invalid length. [ 35.653706][ T4443] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.655700][ T4443] netlink: 59 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.661967][ T4443] Zero length message leads to an empty skb [ 35.730061][ T4453] smc: net device dummy0 applied user defined pnetid SYZ0 [ 36.427369][ T4474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'. [ 37.087539][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 37.089688][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 37.091755][ T4346] Bluetooth: hci4: command 0x040f tx timeout [ 37.910347][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 39.115302][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 39.116484][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 39.117626][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 39.846122][ T4346] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 39.851027][ T4346] Bluetooth: hci0: Injecting HCI hardware error event [ 39.853214][ T4332] Bluetooth: hci0: hardware error 0x00 [ 39.918450][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 39.927569][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 39.929739][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 39.932054][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 39.934109][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 42.316360][ T4332] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 43.066980][ T4608] binder: 4607:4608 tried to acquire reference to desc 0, got 1 instead [ 43.168176][ T4608] binder: 4607:4608 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.170330][ T4608] binder: 4608 RLIMIT_NICE not set [ 43.171343][ T4608] binder: 4608 RLIMIT_NICE not set [ 43.186170][ T4608] binder: 4608 RLIMIT_NICE not set [ 43.187237][ T4608] binder: 4607:4608 got transaction with invalid offset (20, min 0 max 88) or object. [ 43.191662][ T4608] binder: 4607:4608 transaction reply to 4607:4608 failed 6/29201/-22, size 88-24 line 3363 [ 43.193328][ T4608] binder: send failed reply for transaction 5 to 4607:4608 [ 43.490134][ T4512] binder: undelivered TRANSACTION_COMPLETE [ 43.491758][ T4512] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.493216][ T4512] binder: undelivered TRANSACTION_ERROR: 29190 [ 43.541532][ T4623] binder: 4622:4623 tried to acquire reference to desc 0, got 1 instead [ 43.641686][ T4627] No such timeout policy "syz1" [ 43.871059][ T4630] binder: 4622:4630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.882934][ T4630] binder: 4630 RLIMIT_NICE not set [ 43.883855][ T4630] binder: 4630 RLIMIT_NICE not set [ 43.887697][ T4630] binder_alloc: 4622: binder_alloc_buf, no vma [ 43.888976][ T4630] binder: cannot allocate buffer: vma cleared, target dead or dying [ 43.889002][ T4630] binder: 4622:4630 transaction reply to 4622:4623 failed 12/29189/-3, size 0-0 line 3247 [ 43.892427][ T4630] binder: send failed reply for transaction 11 to 4622:4623 [ 43.893705][ T4623] binder: 4622:4623 ioctl c0306201 20000300 returned -14 [ 43.896007][ T3902] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.906161][ T4512] binder: undelivered TRANSACTION_ERROR: 29190 [ 43.984022][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 44.236835][ T4642] syz.3.68 sent an empty control message without MSG_MORE. [ 45.559177][ T4671] loop2: detected capacity change from 0 to 512 [ 45.561042][ T4671] ======================================================= [ 45.561042][ T4671] WARNING: The mand mount option has been deprecated and [ 45.561042][ T4671] and is ignored by this kernel. Remove the mand [ 45.561042][ T4671] option from the mount to silence this warning. [ 45.561042][ T4671] ======================================================= [ 45.570916][ T4671] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 45.572523][ T4671] EXT4-fs (loop2): failed to open journal device unknown-block(8,1) -6 [ 45.669445][ T4664] loop4: detected capacity change from 0 to 2048 [ 45.707460][ T4664] loop4: p1 < > p4 [ 45.709985][ T4664] loop4: p4 size 8388608 extends beyond EOD, truncated [ 45.854563][ T4682] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 45.888821][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.893106][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 46.014888][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 46.021682][ T4685] device hsr0 entered promiscuous mode [ 46.043777][ T4685] device macvlan2 entered promiscuous mode [ 46.350671][ T4702] netlink: 'syz.1.88': attribute type 4 has an invalid length. [ 46.404349][ T4702] netlink: 'syz.1.88': attribute type 4 has an invalid length. [ 47.554962][ T4719] loop0: detected capacity change from 0 to 512 [ 47.560833][ T4719] EXT4-fs: Ignoring removed nobh option [ 47.765172][ C0] sched: RT throttling activated [ 47.790035][ T4719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.013613][ T4731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.97'. [ 48.040793][ T4733] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 48.048520][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.050586][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.051768][ T4733] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 48.152454][ T4735] block device autoloading is deprecated and will be removed. [ 48.364148][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 48.668253][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 48.814872][ T4753] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by "¨˜s¨µs…µ¿‘¸(p„œE»û{بDî¡­8ÖHEV÷[\x0c˜œŽEààâ0ƒ´‚p2›½\x09'÷Ø›6ä 9\x076Ã\x0cä)Í\x0a³!'V¡v>¦yð1lV3¦Š5‚ÈФšÀ®›ˆ¸i…ÝÕAVD¯oÏâU¬9û•Ýì­Ç)Kb°•V¡ŸDcÑ\x07žäojcÒÝ9xáNRH‹Ëì9p·\x22Lž+Xp>¡iŒN¡ô¸0zïÃR¬>»:MÒLã¶oÄøâìHËI£óòGÊÓó“\x07B¡9Ùr¡(dKf^7Æ_N䀟´è\x5c-ÄD}™i;ZÂzd8ö:\x072h¢nª‰çk*Žø—®d-Âl¯1Nà5Ky“\x22b%“¡l‡Û¬¥5.ÖÙd¸sUk·c©òâÙÍð$¢ª, priority 10 [ 50.455487][ T4788] netlink: 104 bytes leftover after parsing attributes in process `syz.4.117'. [ 50.466307][ T4788] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 50.468335][ T4788] tipc: Enabled bearer , priority 10 [ 50.640620][ T4790] netlink: 256 bytes leftover after parsing attributes in process `syz.1.115'. [ 50.922135][ T4811] loop2: detected capacity change from 0 to 8192 [ 50.924509][ T4811] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 50.948696][ T4814] device syzkaller0 entered promiscuous mode [ 50.956707][ T4319] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.166673][ T4816] loop2: detected capacity change from 0 to 128 [ 51.189188][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.299242][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 51.435001][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.877041][ T4380] tipc: Node number set to 2130706433 [ 51.879876][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 51.888490][ T4833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.893017][ T4837] device macvlan2 entered promiscuous mode [ 51.919772][ T4833] bond1: (slave vti0): refused to change device type [ 51.946097][ T4835] loop4: detected capacity change from 0 to 256 [ 52.568806][ T4850] loop2: detected capacity change from 0 to 1024 [ 52.572614][ T4850] EXT4-fs: Ignoring removed bh option [ 52.573699][ T4850] EXT4-fs: Ignoring removed oldalloc option [ 52.574806][ T4850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.589177][ T4850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.733904][ T4850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 52.735667][ T4850] System zones: 0-1, 3-36 [ 52.742877][ T4850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.504399][ T4857] jffs2: notice: (4857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.523372][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 53.527002][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.528524][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.668192][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 53.726374][ T4865] loop2: detected capacity change from 0 to 256 [ 53.757838][ T4865] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.996997][ T4865] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 53.999861][ T4865] FAT-fs (loop2): Filesystem has been set read-only [ 54.105118][ T4865] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 54.516725][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 54.537990][ T4888] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 54.543051][ T4886] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 54.547590][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 54.551219][ T4888] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 54.580540][ T4891] loop0: detected capacity change from 0 to 256 [ 54.586589][ T4891] exfat: Deprecated parameter 'utf8' [ 54.587453][ T4891] exfat: Deprecated parameter 'namecase' [ 54.611155][ T4888] bond2 (unregistering): Released all slaves [ 54.642523][ T4891] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 54.642953][ T4893] loop4: detected capacity change from 0 to 512 [ 54.652381][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.150: iget: bad i_size value: 38620345925642 [ 54.658984][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.150: couldn't read orphan inode 15 (err -117) [ 54.665524][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.284204][ T4909] loop3: detected capacity change from 0 to 32768 [ 55.421231][ T4893] EXT4-fs (loop4): shut down requested (1) [ 55.797306][ T4911] netlink: 'syz.0.154': attribute type 4 has an invalid length. [ 55.843565][ T4906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 55.844785][ T4906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.846612][ T4906] vhci_hcd vhci_hcd.0: Device attached [ 56.146071][ T4380] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 56.155119][ T4912] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 56.318247][ T9] vhci_hcd: stop threads [ 56.319698][ T9] vhci_hcd: release socket [ 56.320861][ T9] vhci_hcd: disconnect device [ 56.481438][ T4913] netlink: 'syz.0.154': attribute type 4 has an invalid length. [ 56.533624][ T4924] binder_user_error: 1 callbacks suppressed [ 56.533633][ T4924] binder: 4923:4924 tried to acquire reference to desc 0, got 1 instead [ 56.539360][ T4911] netlink: 'syz.0.154': attribute type 4 has an invalid length. [ 56.545066][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 56.547487][ T4924] binder: release 4923:4924 transaction 19 out, still active [ 56.548980][ T4924] binder: undelivered TRANSACTION_COMPLETE [ 56.550577][ T4924] binder: 4923:4924 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.552897][ T4924] binder: 4924 RLIMIT_NICE not set [ 56.590904][ T4924] binder: 4924 RLIMIT_NICE not set [ 56.593880][ T4924] binder_alloc: 4923: binder_alloc_buf, no vma [ 56.595129][ T4924] binder: cannot allocate buffer: vma cleared, target dead or dying [ 56.597940][ T4924] binder: 4923:4924 transaction call to 4923:0 failed 26/29189/-3, size 0-0 line 3247 [ 56.608962][ T4377] binder: release 4923:4924 transaction 19 in, still active [ 56.650119][ T4377] binder: send failed reply for transaction 19, target dead [ 56.651412][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 57.016120][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.157'. [ 57.078132][ T4933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 57.538506][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 57.552417][ T4952] device bond1 entered promiscuous mode [ 57.558887][ T4952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.620558][ T4952] device bridge1 entered promiscuous mode [ 57.624458][ T4952] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 57.629601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 57.731192][ T4956] process 'syz.2.169' launched './file0' with NULL argv: empty string added [ 57.752170][ T4958] loop3: detected capacity change from 0 to 256 [ 57.778694][ T4960] Invalid ELF header magic: != ELF [ 57.780094][ T4958] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.787766][ T4958] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 57.798461][ T4958] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 58.882258][ T4975] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 58.906155][ T4975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.008609][ T4975] bond1: (slave gretap1): making interface the new active one [ 59.017029][ T4975] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 59.020978][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 59.394842][ T4975] bond1: (slave veth3): Enslaving as an active interface with a down link [ 59.403802][ T4985] device veth0_virt_wifi entered promiscuous mode [ 59.414633][ T4985] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 60.218596][ T5002] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.223556][ T5002] CIFS: Attempting to mount \\127.0.0.1\share [ 60.227818][ T5002] CIFS: VFS: Error connecting to socket. Aborting operation. [ 60.229369][ T5002] CIFS: VFS: cifs_mount failed w/return code = -101 [ 60.519104][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 60.539008][ T5007] bridge0: port 3(syz_tun) entered disabled state [ 60.610438][ T5007] device syz_tun left promiscuous mode [ 60.612799][ T5007] bridge0: port 3(syz_tun) entered disabled state [ 61.276627][ T4380] vhci_hcd: vhci_device speed not set [ 62.088699][ T5020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. [ 62.128687][ T5026] syz.3.188 uses obsolete (PF_INET,SOCK_PACKET) [ 62.136723][ T5026] loop3: detected capacity change from 0 to 512 [ 62.141887][ T5026] EXT4-fs: Ignoring removed nobh option [ 62.159781][ T5026] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 62.164690][ T5026] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.188: attempt to clear invalid blocks 1 len 1 [ 62.169184][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 62.170735][ T5026] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 62.173786][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 62.175117][ T5026] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.188: invalid indirect mapped block 1819239214 (level 0) [ 62.180549][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 62.181762][ T5026] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.188: invalid indirect mapped block 1819239214 (level 1) [ 62.184366][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 62.187448][ T5026] EXT4-fs (loop3): 1 truncate cleaned up [ 62.188505][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.213864][ T5026] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 62.258896][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 63.214544][ T5056] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 63.536467][ T5056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.545214][ T5047] loop0: detected capacity change from 0 to 32768 [ 63.554576][ T5061] bond2: (slave dummy0): making interface the new active one [ 63.564875][ T5061] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 63.567410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 63.626949][ T5047] XFS (loop0): Mounting V5 Filesystem [ 63.632278][ T5067] device syzkaller0 entered promiscuous mode [ 63.652307][ T5047] XFS (loop0): Ending clean mount [ 63.731769][ T4329] XFS (loop0): Unmounting Filesystem [ 63.943073][ T5085] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 65.299581][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000bea72a6e: rx timeout, send abort [ 65.301735][ T4332] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 65.303237][ T4332] Bluetooth: hci3: Injecting HCI hardware error event [ 65.304856][ T4346] Bluetooth: hci3: hardware error 0x00 [ 65.309744][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.310960][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.421751][ T5100] fuse: Bad value for 'fd' [ 65.498090][ T5105] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.499667][ T5105] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.501429][ T5105] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.503105][ T5105] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.505752][ T5105] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 65.516378][ T5105] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 65.566432][ T5105] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.568305][ T5105] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.569834][ T5105] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.571810][ T5105] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.641090][ T5105] bond3 (unregistering): Released all slaves [ 65.670133][ T5118] gadgetfs: bound to dummy_udc driver [ 65.801536][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000bea72a6e: abort rx timeout. Force session deactivation [ 66.030545][ T5123] netlink: 'syz.1.217': attribute type 13 has an invalid length. [ 66.036341][ T4378] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 66.039988][ C0] gadgetfs: connected [ 66.041312][ T4378] gadgetfs: disconnected [ 66.049718][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.056477][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.058312][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.108472][ T5123] netlink: 84 bytes leftover after parsing attributes in process `syz.1.217'. [ 66.235916][ C0] gadgetfs: connected [ 66.238564][ T5117] gadgetfs: suspended from state 3 [ 66.239983][ T5117] gadgetfs: disconnected [ 66.242979][ T4378] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 66.244506][ T4378] usb 1-1: can't read configurations, error -71 [ 66.357355][ T5143] binder: 5142:5143 unknown command 0 [ 66.361723][ T5143] binder: 5142:5143 ioctl c0306201 200004c0 returned -22 [ 66.366048][ T5143] binder: 5142:5143 got reply transaction with no transaction stack [ 66.367599][ T5143] binder: 5142:5143 transaction reply to 0:0 failed 29/29201/-71, size 0-0 line 2963 [ 66.376605][ T5143] binder: 5142:5143 ioctl c0306201 20000180 returned -14 [ 66.874910][ T5159] Injecting memory failure for pfn 0x10b720 at process virtual address 0x20001000 [ 66.906453][ T5159] Memory failure: 0x10b720: recovery action for clean unevictable LRU page: Recovered [ 66.908156][ T5159] Injecting memory failure for pfn 0x133ab2 at process virtual address 0x20002000 [ 66.913174][ T5159] Memory failure: 0x133ab2: recovery action for clean unevictable LRU page: Recovered [ 66.914796][ T5159] Injecting memory failure for pfn 0x1119b5 at process virtual address 0x20003000 [ 66.924704][ T5159] Memory failure: 0x1119b5: recovery action for clean unevictable LRU page: Recovered [ 68.039078][ T4346] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 68.073955][ T5175] loop4: detected capacity change from 0 to 512 [ 68.168455][ T5175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.175446][ T5175] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.235: casefold flag without casefold feature [ 68.460517][ T5175] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.235: Bad quota inode: 4, type: 1 [ 68.469430][ T5175] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.472032][ T5175] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 68.475318][ T5175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.530422][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 68.545791][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 68.578600][ T5188] device team1 entered promiscuous mode [ 68.583080][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 68.598724][ T5188] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 68.623745][ T5188] device team2 entered promiscuous mode [ 68.851969][ T5200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.244'. [ 69.272849][ T5204] device syzkaller0 entered promiscuous mode [ 69.293510][ T5204] tipc: Started in network mode [ 69.300966][ T5204] tipc: Node identity 2ae0abdeda4a, cluster identity 4711 [ 69.308336][ T5204] tipc: Enabled bearer , priority 0 [ 69.317241][ T5203] tipc: Resetting bearer [ 69.416328][ T5203] tipc: Disabling bearer [ 69.433408][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 69.459992][ T5209] device bond2 entered promiscuous mode [ 69.597059][ T1517] cfg80211: failed to load regulatory.db [ 69.753587][ T5223] cifs: Unknown parameter 'timeo' [ 69.941452][ T5242] binder: 5236:5242 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 69.957757][ T5242] binder: 5236:5242 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.964099][ T5242] binder: 5242 RLIMIT_NICE not set [ 70.008484][ T5238] binder: 5236:5238 BC_FREE_BUFFER u0000000020ffe000 no match [ 70.811291][ T5316] MPTCP: kernel_bind error, err=-99 [ 70.861531][ T5319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'. [ 70.996171][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 71.018167][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 71.019668][ T5325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 71.037266][ T5325] bond1: (slave veth7): Enslaving as an active interface with an up link [ 71.625358][ T5340] input: syz0 as /devices/virtual/input/input2 [ 71.636597][ T5340] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 71.656071][ T5340] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 72.529526][ T5366] binder: 5365:5366 tried to acquire reference to desc 0, got 1 instead [ 72.534208][ T5366] binder: 5365:5366 got transaction with invalid data ptr [ 72.536377][ T5366] binder: 5365:5366 transaction call to 5365:0 failed 42/29201/-14, size 22-0 line 3582 [ 72.546738][ T4387] binder: release 5365:5366 transaction 35 out, still active [ 72.548197][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 72.549414][ T4387] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.551649][ T4387] binder: send failed reply for transaction 35, target dead [ 72.598521][ T5370] loop3: detected capacity change from 0 to 128 [ 72.613909][ T5370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.480952][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 73.708850][ T5405] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 73.771337][ T5405] device bond2 entered promiscuous mode [ 73.772543][ T5405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.780556][ T5406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 73.863498][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 73.922322][ T5426] device bond2 entered promiscuous mode [ 74.190883][ T5430] overlayfs: failed to resolve './upper': -2 [ 74.202215][ T5425] overlayfs: failed to clone upperpath [ 74.220065][ T5405] bond2: (slave bridge1): making interface the new active one [ 74.221584][ T5405] device bridge1 entered promiscuous mode [ 74.223110][ T5405] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 74.224712][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 74.304100][ T5435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.660422][ T5448] loop0: detected capacity change from 0 to 256 [ 74.670049][ T5435] device bond_slave_0 entered promiscuous mode [ 74.671314][ T5435] device bond_slave_1 entered promiscuous mode [ 74.672539][ T5435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.674758][ T5435] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 74.728028][ T189] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 74.754119][ T5450] binder: 5449:5450 tried to acquire reference to desc 0, got 1 instead [ 74.764369][ T5450] binder: 5449:5450 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.774425][ T5450] binder: 5450 RLIMIT_NICE not set [ 74.775664][ T5450] binder: 5450 RLIMIT_NICE not set [ 74.779500][ T5450] binder: 5450 RLIMIT_NICE not set [ 74.780748][ T5450] binder: 5449:5450 Release 1 refcount change on invalid ref 3 ret -22 [ 74.808041][ T1517] binder: undelivered TRANSACTION_COMPLETE [ 74.809327][ T1517] binder: undelivered transaction 48, process died. [ 74.810777][ T1517] binder: undelivered TRANSACTION_COMPLETE [ 74.949061][ T5461] capability: warning: `syz.1.302' uses deprecated v2 capabilities in a way that may be insecure [ 75.579858][ T5467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 76.009039][ T5475] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 78.039090][ T5517] netlink: 'syz.1.322': attribute type 10 has an invalid length. [ 78.060566][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.067442][ T5517] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.206558][ T5527] fuse: Bad value for 'fd' [ 78.218092][ T5526] sctp: [Deprecated]: syz.1.328 (pid 5526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.218092][ T5526] Use struct sctp_sack_info instead [ 78.291402][ T5532] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.395431][ T5535] tipc: Started in network mode [ 78.396344][ T5535] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 78.406589][ T5535] tipc: Enabling of bearer rejected, failed to enable media [ 79.270087][ T5521] loop4: detected capacity change from 0 to 131072 [ 79.273050][ T5550] netlink: 'syz.3.336': attribute type 13 has an invalid length. [ 79.274857][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.299171][ T5521] F2FS-fs (loop4): Test dummy encryption mode enabled [ 79.300719][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 79.303641][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 79.305616][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 79.307192][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 79.327490][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 79.339314][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 79.340095][ T5521] F2FS-fs (loop4): invalid crc value [ 79.349149][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.354741][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.359372][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.367948][ T5521] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.380880][ T5521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.448582][ T5521] ipt_CLUSTERIP: Please specify destination IP [ 79.460599][ T5561] netlink: 84 bytes leftover after parsing attributes in process `syz.3.336'. [ 79.729426][ T5573] MPTCP: kernel_bind error, err=-99 [ 79.843342][ T5577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 81.671833][ T5608] netlink: 'syz.2.353': attribute type 13 has an invalid length. [ 81.696415][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.716609][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.718244][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.775795][ T4387] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.909824][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 81.915117][ T5621] device bond3 entered promiscuous mode [ 81.918463][ T5621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.955323][ T4387] usb 1-1: Using ep0 maxpacket: 16 [ 81.959368][ T4387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.963127][ T4387] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 81.964700][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.969978][ T4387] usb 1-1: Product: syz [ 81.970737][ T4387] usb 1-1: Manufacturer: syz [ 81.971617][ T4387] usb 1-1: SerialNumber: syz [ 81.982463][ T5621] device bridge1 entered promiscuous mode [ 81.984351][ T5621] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 81.988478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 82.683145][ T4387] usb 1-1: cannot setup if 1: error -71 [ 82.684841][ T4387] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 82.692688][ T4387] usb 1-1: cannot setup if 1: error -71 [ 82.693834][ T4387] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 82.701168][ T4387] usb 1-1: cannot setup if 1: error -71 [ 82.716867][ T4387] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 82.720825][ T4387] usb 1-1: USB disconnect, device number 4 [ 82.724920][ T4319] udevd[4319]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 82.927272][ T4321] udevd[4321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.617264][ T5648] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 85.792705][ T5658] loop0: detected capacity change from 0 to 256 [ 85.804712][ T5658] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.926707][ T5658] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 85.928496][ T5658] FAT-fs (loop0): Filesystem has been set read-only [ 85.942147][ T5658] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 86.656975][ T5668] netlink: 'syz.0.368': attribute type 13 has an invalid length. [ 86.664426][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.682808][ T5663] loop3: detected capacity change from 0 to 164 [ 86.696487][ T5663] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 87.530799][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 88.752955][ T5718] lo: Caught tx_queue_len zero misconfig [ 89.571780][ T5735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 90.958277][ T5758] overlayfs: failed to clone upperpath [ 90.969568][ T5758] overlayfs: failed to clone upperpath [ 91.046304][ T5762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 91.049485][ T5762] device geneve2 entered promiscuous mode [ 92.940241][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 93.373219][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 93.411617][ T5820] sctp: [Deprecated]: syz.2.405 (pid 5820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.411617][ T5820] Use struct sctp_sack_info instead [ 93.615763][ T5828] loop3: detected capacity change from 0 to 512 [ 93.760857][ T5828] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 93.763260][ T5828] EXT4-fs (loop3): failed to open journal device unknown-block(8,1) -6 [ 94.027002][ T4319] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.507076][ T5842] sctp: [Deprecated]: syz.3.410 (pid 5842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.507076][ T5842] Use struct sctp_sack_info instead [ 94.512864][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 94.514724][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.617390][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.188439][ T5858] device syzkaller0 entered promiscuous mode [ 95.576830][ T5868] loop4: detected capacity change from 0 to 128 [ 95.662813][ T5868] loop4: detected capacity change from 0 to 256 [ 95.664374][ T5868] exfat: Unknown parameter 'ZZ¡k¹eßÆÏÿÿ?'ÿ'ÉüþŸ-À?;Àõÿ³QÿÒh®öÆõÏÞ¸þÙ×?;û' [ 95.670473][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 96.063089][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 96.567909][ T5883] loop4: detected capacity change from 0 to 128 [ 97.505313][ T5883] FAT-fs (loop4): bogus number of FAT structure [ 97.506491][ T5883] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 97.507814][ T5883] FAT-fs (loop4): Can't find a valid FAT filesystem [ 97.548874][ T4319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.581522][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.608797][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 97.624757][ T5897] sctp: [Deprecated]: syz.1.424 (pid 5897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.624757][ T5897] Use struct sctp_sack_info instead [ 97.643494][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 97.647253][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 97.648689][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 97.985410][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.986975][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.991016][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 97.996831][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 98.088498][ T5912] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 98.094662][ T5912] device bond4 entered promiscuous mode [ 98.097722][ T5912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 98.484534][ T5912] bond4: (slave bridge2): making interface the new active one [ 98.486260][ T5912] device bridge2 entered promiscuous mode [ 98.488612][ T5912] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 98.490173][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 98.707007][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.445'. [ 99.301204][ T5941] No such timeout policy "syz1" [ 101.040321][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.065668][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 101.135356][ T5972] loop3: detected capacity change from 0 to 128 [ 101.397296][ T5972] FAT-fs (loop3): bogus number of FAT structure [ 101.398291][ T5972] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.399718][ T5972] FAT-fs (loop3): Can't find a valid FAT filesystem [ 101.439739][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 101.442348][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 101.445707][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 101.451605][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 101.453204][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 101.456185][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 101.465446][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 101.473174][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 102.308734][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 102.310617][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.850171][ T6002] No such timeout policy "syz1" [ 103.114931][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.324055][ T6014] device bond_slave_0 entered promiscuous mode [ 103.325229][ T6014] device bond_slave_1 entered promiscuous mode [ 103.330373][ T6014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.376302][ T6014] bond3: (slave macvlan2): making interface the new active one [ 103.426030][ T6014] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 103.764682][ T6011] loop3: detected capacity change from 0 to 40427 [ 103.800468][ T6011] F2FS-fs (loop3): invalid crc value [ 103.811355][ T6011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.826647][ T6011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.233840][ T4338] syz-executor: attempt to access beyond end of device [ 104.233840][ T4338] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.254715][ T6032] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.256551][ T6032] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.258076][ T6032] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.259710][ T6032] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.262132][ T6032] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 104.299780][ T6032] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 104.998434][ T6032] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.027797][ T6032] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.029483][ T6032] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.031298][ T6032] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.112417][ T6032] bond5 (unregistering): Released all slaves [ 105.162166][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 105.165096][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.669816][ T6057] No such timeout policy "syz1" [ 105.892404][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.145314][ T6074] loop4: detected capacity change from 0 to 512 [ 106.151511][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.160333][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.208683][ T6074] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.212031][ T6074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.274568][ T6074] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.280969][ T6074] EXT4-fs (loop4): 1 truncate cleaned up [ 106.282207][ T6074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.021754][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 107.327988][ T6098] lo: Caught tx_queue_len zero misconfig [ 107.422338][ T6103] netlink: 'syz.2.480': attribute type 4 has an invalid length. [ 107.851158][ T6107] netlink: 'syz.0.493': attribute type 2 has an invalid length. [ 107.852713][ T6107] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 107.854022][ T6107] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.493'. [ 107.924923][ T6114] loop4: detected capacity change from 0 to 512 [ 108.208094][ T6114] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.486: inode has both inline data and extents flags [ 108.210997][ T6114] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.486: couldn't read orphan inode 15 (err -117) [ 108.214100][ T6114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.245233][ T4346] Bluetooth: hci1: command 0x2016 tx timeout [ 108.947227][ T6133] No such timeout policy "syz1" [ 109.432883][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 109.634552][ T6143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.537572][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 110.867342][ T6159] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 110.921453][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.923262][ T6159] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.213893][ T6167] CIFS: Attempting to mount \\::1\share [ 111.248684][ T6165] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 111.420248][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.430412][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.434785][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.929488][ T6179] capability: warning: `syz.0.513' uses 32-bit capabilities (legacy support in use) [ 112.168294][ T6167] CIFS: VFS: Error connecting to socket. Aborting operation. [ 112.170165][ T6167] CIFS: VFS: cifs_mount failed w/return code = -4 [ 112.273112][ T6187] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 112.988298][ T6192] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.990114][ T6192] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.991861][ T6192] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.993503][ T6192] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.996135][ T6192] bond4: (slave geneve2): making interface the new active one [ 112.997985][ T6192] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 113.031595][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 113.036025][ T6187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.163080][ T6196] loop4: detected capacity change from 0 to 512 [ 113.204981][ T6196] EXT4-fs: Ignoring removed nobh option [ 113.276879][ T6196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.917235][ T6197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.509'. [ 113.920752][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 114.522166][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 116.490837][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 117.538632][ T4378] libceph: connect (2)127.0.0.1:6667 error -101 [ 117.540211][ T4378] libceph: ceph_tcp_connect failed: -101 [ 117.541217][ T4378] libceph: mon0 (2)127.0.0.1:6667 connect error [ 117.543686][ T4378] libceph: connect (2)127.0.0.1:6667 error -101 [ 117.544868][ T4378] libceph: ceph_tcp_connect failed: -101 [ 117.545973][ T4378] libceph: mon0 (2)127.0.0.1:6667 connect error [ 117.686824][ T6295] loop4: detected capacity change from 0 to 256 [ 117.717702][ T6298] MTD: Couldn't look up './dev/mtdblock0': -2 [ 118.169526][ T14] libceph: connect (2)127.0.0.1:6667 error -101 [ 118.171491][ T14] libceph: ceph_tcp_connect failed: -101 [ 118.172481][ T14] libceph: mon0 (2)127.0.0.1:6667 connect error [ 118.181380][ T4319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.188484][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.190372][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.158231][ T6277] ceph: No mds server is up or the cluster is laggy [ 119.506256][ T4411] libceph: connect (2)127.0.0.1:6667 error -101 [ 119.517952][ T4411] libceph: ceph_tcp_connect failed: -101 [ 119.528340][ T4411] libceph: mon0 (2)127.0.0.1:6667 connect error [ 120.624804][ T6328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.626629][ T6328] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.915145][ T6357] loop3: detected capacity change from 0 to 512 [ 121.919447][ T6357] EXT4-fs: Ignoring removed oldalloc option [ 121.985620][ T6357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.002104][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.022953][ T6359] netlink: 168 bytes leftover after parsing attributes in process `syz.0.557'. [ 122.374713][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 122.684159][ T6379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.503670][ T6401] loop4: detected capacity change from 0 to 2048 [ 123.585827][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.904750][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.907345][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.938285][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 124.975130][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.988701][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.662372][ T6382] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.664094][ T6382] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.665887][ T6382] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.667404][ T6382] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.713898][ T6403] team_slave_0: Caught tx_queue_len zero misconfig [ 125.885310][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'. [ 125.917578][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.918813][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.279282][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.579'. [ 127.808172][ T6467] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 128.129234][ T6467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.155601][ T6470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.157138][ T6470] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 128.159602][ T6470] bond5: (slave vti0): Error -95 calling set_mac_address [ 128.199027][ T6467] device gretap1 entered promiscuous mode [ 128.201622][ T6467] bond5: (slave gretap1): making interface the new active one [ 128.203385][ T6467] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 128.215483][ T6467] device macvlan3 entered promiscuous mode [ 128.217502][ T6467] device bond5 entered promiscuous mode [ 128.218799][ T6467] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 128.256223][ T6467] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 128.257958][ T6480] loop3: detected capacity change from 0 to 164 [ 128.279335][ T6480] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 128.296102][ T6467] device bond5 left promiscuous mode [ 130.847119][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 131.153304][ T6513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.600'. [ 131.206122][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 133.658026][ T6592] fuse: Bad value for 'fd' [ 135.078910][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.080509][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.499429][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.507673][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.782835][ T6617] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.784591][ T6617] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.786754][ T6617] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.797846][ T6617] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.830096][ T6650] loop4: detected capacity change from 0 to 512 [ 136.839002][ T6650] EXT4-fs (loop4): can't read group descriptor 0 [ 136.903969][ T6653] Bluetooth: MGMT ver 1.22 [ 137.294896][ T6658] mmap: syz.1.640 (6658): VmData 175845376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 137.305593][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 137.385318][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 137.387381][ T6644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.635'. [ 137.395113][ T6650] netlink: 'syz.4.638': attribute type 13 has an invalid length. [ 137.451744][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 137.453447][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 137.454727][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 137.459690][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 137.461221][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 137.462702][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 137.464789][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.467945][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.469431][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.494562][ T6664] device bridge_slave_0 left promiscuous mode [ 137.496473][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.549275][ T6664] device bridge_slave_1 left promiscuous mode [ 137.550630][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.831002][ T6664] bond0: (slave bond_slave_0): Releasing backup interface [ 137.852063][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 137.875962][ T6664] device bond_slave_0 left promiscuous mode [ 137.880511][ T6664] bond0: (slave bond_slave_1): Releasing backup interface [ 137.916178][ T6664] device bond_slave_1 left promiscuous mode [ 137.931580][ T6664] team0: Port device team_slave_0 removed [ 137.939913][ T6664] team0: Port device team_slave_1 removed [ 137.941318][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.942569][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.950108][ T6664] bond1: (slave veth7): Releasing backup interface [ 137.989703][ T6664] bond2: (slave bridge1): Releasing backup interface [ 137.991038][ T6664] device bridge1 left promiscuous mode [ 138.040894][ T6664] bond3: (slave macvlan2): Releasing active interface [ 138.118611][ T6664] bond4: (slave geneve2): Releasing active interface [ 138.157972][ T6664] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.159787][ T6664] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.161525][ T6664] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.163258][ T6664] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.214235][ T6675] lo: Caught tx_queue_len zero misconfig [ 138.751205][ T6690] loop4: detected capacity change from 0 to 1764 [ 138.797391][ T4319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.230009][ T6701] Set syz0 is full, maxelem 0 reached [ 139.876091][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.878228][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.895814][ T6720] loop3: detected capacity change from 0 to 512 [ 139.899010][ T6703] device bond_slave_0 left promiscuous mode [ 139.900178][ T6703] device bond_slave_1 left promiscuous mode [ 139.916387][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.657: inode has both inline data and extents flags [ 139.925779][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.657: couldn't read orphan inode 15 (err -117) [ 139.940994][ T6720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.255645][ T6728] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4331] was attempted by " [ 140.573827][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 140.618106][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.810945][ T6703] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.812691][ T6703] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.814219][ T6703] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.816095][ T6703] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.132784][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 142.608248][ T6766] lo: Caught tx_queue_len zero misconfig [ 142.795710][ T4332] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 142.798640][ T4332] Bluetooth: hci2: Injecting HCI hardware error event [ 142.801208][ T4346] Bluetooth: hci2: hardware error 0x00 [ 142.813582][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 143.274409][ T6800] MPTCP: kernel_bind error, err=-99 [ 145.035311][ T4346] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 145.493544][ T6856] loop3: detected capacity change from 0 to 2048 [ 145.502660][ T6825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.504143][ T6825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.505844][ T6825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.507222][ T6825] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.562181][ T6856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.578514][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 145.927618][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 145.965061][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 145.968958][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 145.981382][ T6865] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.983171][ T6865] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.984617][ T6865] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.986272][ T6865] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.000745][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 146.027018][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 146.028741][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 146.126417][ T6872] loop4: detected capacity change from 0 to 32768 [ 146.706125][ T6872] XFS (loop4): Mounting V5 Filesystem [ 146.718156][ T6872] XFS (loop4): Ending clean mount [ 146.722368][ T6872] XFS (loop4): Quotacheck needed: Please wait. [ 146.740803][ T6872] XFS (loop4): Quotacheck: Done. [ 147.234891][ T4337] XFS (loop4): Unmounting Filesystem [ 147.339670][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 148.474731][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.479384][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 148.480889][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 148.482112][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 148.483557][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 148.485022][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 148.486953][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 148.489815][ T6932] bond0: (slave team0): Releasing backup interface [ 148.532659][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.534054][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.560173][ T6932] device bridge_slave_0 left promiscuous mode [ 148.561296][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.612812][ T6932] device bridge_slave_1 left promiscuous mode [ 148.614679][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.686594][ T6932] bond0: (slave bond_slave_0): Releasing backup interface [ 148.742599][ T6932] bond0: (slave bond_slave_1): Releasing backup interface [ 148.807293][ T6932] team0: Port device team_slave_0 removed [ 148.816950][ T6932] team0: Port device team_slave_1 removed [ 148.818463][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.819999][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.823091][ T6932] bond1: (slave veth0_virt_wifi): Releasing active interface [ 148.824588][ T6932] device gretap1 entered promiscuous mode [ 148.870352][ T6932] bond1: (slave gretap1): Releasing active interface [ 148.871477][ T6932] bond1: (slave gretap1): the permanent HWaddr of slave - d2:8e:1c:ff:75:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 148.874267][ T6932] device gretap1 left promiscuous mode [ 148.963897][ T6932] bond1: (slave veth3): Releasing active interface [ 149.071802][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 149.229721][ T6956] device syzkaller0 left promiscuous mode [ 149.243308][ T6961] fuse: Bad value for 'fd' [ 149.764939][ T6970] xt_CONNSECMARK: invalid mode: 0 [ 151.734730][ T27] audit: type=1326 audit(151.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.4.708" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b7781a8 code=0x0 [ 152.100885][ T6956] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.102565][ T6956] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.104151][ T6956] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.105666][ T6956] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.192020][ T6956] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.193516][ T6956] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.195000][ T6956] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.196834][ T6956] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.446096][ T6998] bond0: (slave team0): Releasing backup interface [ 153.808401][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 153.808416][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 153.810250][ T6998] device bridge_slave_0 left promiscuous mode [ 153.811831][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.601364][ T6998] device bridge_slave_1 left promiscuous mode [ 154.602623][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.727533][ T6998] bond0: (slave bond_slave_0): Releasing backup interface [ 154.916866][ T6998] bond0: (slave bond_slave_1): Releasing backup interface [ 155.620882][ T6998] team0: Port device team_slave_0 removed [ 155.630237][ T6998] team0: Port device team_slave_1 removed [ 155.633807][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.639732][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.643445][ T6998] bond0: (slave netdevsim0): Releasing backup interface [ 155.776526][ T6998] bond3: (slave bridge1): Releasing backup interface [ 156.787074][ T6998] device bridge1 left promiscuous mode [ 156.794820][ T7015] lo speed is unknown, defaulting to 1000 [ 156.797463][ T7015] lo speed is unknown, defaulting to 1000 [ 156.799721][ T7015] lo speed is unknown, defaulting to 1000 [ 156.802402][ T7015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.808404][ T7015] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.816291][ T7027] lo speed is unknown, defaulting to 1000 [ 156.876567][ T7015] lo speed is unknown, defaulting to 1000 [ 156.877979][ T7015] lo speed is unknown, defaulting to 1000 [ 156.879158][ T7015] lo speed is unknown, defaulting to 1000 [ 156.880431][ T7015] lo speed is unknown, defaulting to 1000 [ 156.882725][ T7015] lo speed is unknown, defaulting to 1000 [ 157.032162][ T7040] fuse: Bad value for 'fd' [ 157.324144][ T7045] binder: 7044:7045 tried to acquire reference to desc 0, got 1 instead [ 157.329855][ T7045] binder: 7044:7045 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 157.332314][ T7045] binder: 7045 RLIMIT_NICE not set [ 157.333091][ T7045] binder: 7045 RLIMIT_NICE not set [ 157.334561][ T7045] binder: release 7044:7045 transaction 60 out, still active [ 157.335999][ T7045] binder: release 7044:7045 transaction 53 in, still active [ 157.338510][ T7045] binder: undelivered TRANSACTION_COMPLETE [ 157.346921][ T14] binder: release 7044:7045 transaction 53 out, still active [ 157.348243][ T14] binder: undelivered TRANSACTION_COMPLETE [ 157.349311][ T14] binder: send failed reply for transaction 60, target dead [ 157.350684][ T14] binder: send failed reply for transaction 53, target dead [ 157.416781][ T7053] loop4: detected capacity change from 0 to 2048 [ 157.451861][ T7053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.481061][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 158.848141][ T7092] device syzkaller0 entered promiscuous mode [ 158.853793][ T7092] tipc: Enabled bearer , priority 0 [ 158.883139][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 158.988142][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 159.064427][ T7109] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 159.074967][ T7111] device bond3 entered promiscuous mode [ 159.846353][ T4381] tipc: Node number set to 3210880763 [ 161.688370][ T7163] loop4: detected capacity change from 0 to 512 [ 161.698614][ T7163] FAT-fs (loop4): Unrecognized mount option "Îw‚O{ûD‡Z¿shortname=lower" or missing value [ 162.093342][ T7163] loop4: detected capacity change from 0 to 512 [ 162.102559][ T7163] EXT4-fs: Ignoring removed bh option [ 162.196922][ T7163] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 164.369955][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 164.373012][ T7213] device ip6gre1 entered promiscuous mode [ 164.442412][ T7218] netlink: 'syz.0.771': attribute type 6 has an invalid length. [ 164.456508][ T7218] netlink: 72 bytes leftover after parsing attributes in process `syz.0.771'. [ 165.887103][ T7247] overlayfs: failed to clone upperpath [ 166.262451][ T7252] loop4: detected capacity change from 0 to 256 [ 166.681923][ T7257] netlink: 'syz.3.789': attribute type 39 has an invalid length. [ 168.572626][ T7289] overlayfs: failed to clone upperpath [ 168.700098][ T7291] xt_CONNSECMARK: invalid mode: 0 [ 169.118371][ T7294] ip_tables: iptables: counters copy to user failed while replacing table [ 169.723129][ T27] audit: type=1326 audit(169.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.0.815" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff955781a8 code=0x0 [ 169.908613][ T7318] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 169.910892][ T7318] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 169.933305][ T7318] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 170.833559][ T7337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.835274][ T7337] IPv6: NLM_F_CREATE should be set when creating new route [ 170.836515][ T7337] IPv6: NLM_F_CREATE should be set when creating new route [ 170.841459][ T7337] device bridge4 entered promiscuous mode [ 171.460567][ T7356] xt_CONNSECMARK: invalid mode: 0 [ 172.863208][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'. [ 172.897626][ T7384] netlink: 76 bytes leftover after parsing attributes in process `syz.2.828'. [ 173.366685][ T7395] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 173.425293][ T7399] loop3: detected capacity change from 0 to 256 [ 173.432949][ T7399] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value [ 173.629492][ T7400] gadgetfs: bound to dummy_udc driver [ 174.215908][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.219340][ C0] gadgetfs: connected [ 174.220260][ T14] gadgetfs: disconnected [ 174.494111][ T7420] xt_CONNSECMARK: invalid mode: 0 [ 175.227506][ T7433] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 175.239544][ T7433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.968196][ T7433] bond6: (slave gretap2): making interface the new active one [ 175.970638][ T7433] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 175.973213][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 176.377821][ T7452] MPTCP: kernel_bind error, err=-98 [ 176.411968][ T7456] loop3: detected capacity change from 0 to 512 [ 176.448013][ T7456] EXT2-fs (loop3): (no)acl options not supported [ 176.452092][ T7456] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 178.155368][ T7474] loop3: detected capacity change from 0 to 32768 [ 178.168459][ T7474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.855 (7474) [ 178.781225][ T7474] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.783928][ T7474] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 178.786814][ T7474] BTRFS info (device loop3): setting nodatasum [ 178.788034][ T7474] BTRFS info (device loop3): force zlib compression, level 3 [ 178.789507][ T7474] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 178.791289][ T7474] BTRFS info (device loop3): use lzo compression, level 0 [ 178.792563][ T7474] BTRFS info (device loop3): turning on flush-on-commit [ 178.793813][ T7474] BTRFS info (device loop3): enabling auto defrag [ 178.794929][ T7474] BTRFS info (device loop3): using free space tree [ 178.868542][ T7474] BTRFS info (device loop3): enabling ssd optimizations [ 179.097990][ T4338] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.469815][ T7560] xt_CONNSECMARK: invalid mode: 0 [ 181.793267][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.160286][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.835073][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 183.728982][ T7601] loop3: detected capacity change from 0 to 8 [ 184.193208][ T7609] loop4: detected capacity change from 0 to 256 [ 184.210784][ T7609] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value [ 184.356541][ T7610] gadgetfs: bound to dummy_udc driver [ 184.605553][ T27] audit: type=1326 audit(184.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.1.884" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff945781a8 code=0x0 [ 184.675955][ T4381] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.677823][ C1] gadgetfs: connected [ 184.678770][ T4381] gadgetfs: disconnected [ 184.784266][ T7623] xt_CONNSECMARK: invalid mode: 0 [ 185.021762][ T7602] gadgetfs: suspended from state 2 [ 185.383875][ T4381] usb 1-1: device not accepting address 6, error -71 [ 186.654604][ T7648] binder: 7644:7648 tried to acquire reference to desc 0, got 1 instead [ 187.356050][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.357504][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.509280][ T4381] binder: release 7644:7648 transaction 65 out, still active [ 187.565487][ T4381] binder: send failed reply for transaction 72 to 7644:7652 [ 187.567061][ T4381] binder: undelivered TRANSACTION_COMPLETE [ 187.568034][ T4381] binder: undelivered TRANSACTION_ERROR: 29189 [ 187.569279][ T4381] binder: send failed reply for transaction 65, target dead [ 187.679481][ T7671] device syzkaller0 entered promiscuous mode [ 187.681929][ T7671] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 187.778232][ T7676] xt_CONNSECMARK: invalid mode: 0 [ 188.891083][ T7691] xt_CONNSECMARK: invalid mode: 0 [ 189.777398][ T7711] tipc: Started in network mode [ 189.778465][ T7711] tipc: Node identity 080211, cluster identity 4711 [ 189.779728][ T7711] tipc: Enabled bearer , priority 0 [ 190.145483][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 190.217554][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 190.811079][ T4381] tipc: Node number set to 134353152 [ 193.168364][ T7767] loop4: detected capacity change from 0 to 512 [ 193.179797][ T7767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.514249][ T7767] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.941: iget: bad i_size value: 38620345925642 [ 193.521340][ T7767] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.941: couldn't read orphan inode 15 (err -117) [ 193.550674][ T7767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.287825][ T6397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:30: bg 0: block 5: invalid block bitmap [ 194.294225][ T6397] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 194.300256][ T6397] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.300256][ T6397] [ 194.304222][ T6397] EXT4-fs (loop4): Total free blocks count 0 [ 194.306134][ T6397] EXT4-fs (loop4): Free/Dirty block details [ 194.307402][ T6397] EXT4-fs (loop4): free_blocks=0 [ 194.308234][ T6397] EXT4-fs (loop4): dirty_blocks=65 [ 194.309200][ T6397] EXT4-fs (loop4): Block reservation details [ 194.310129][ T6397] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 194.314168][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 194.381983][ T7781] loop4: detected capacity change from 0 to 512 [ 194.387588][ T7781] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.934: Unrecognised inode hash code 255 [ 194.389666][ T7781] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.934: Corrupt directory, running e2fsck is recommended [ 194.393344][ T7781] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 194.394741][ T7781] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.934: corrupted in-inode xattr [ 194.438255][ T7781] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.934: couldn't read orphan inode 15 (err -117) [ 194.441594][ T7781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.616833][ T7770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 195.126680][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.192113][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.197735][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 195.242360][ T7796] loop4: detected capacity change from 0 to 512 [ 195.282871][ T7796] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.301761][ T7796] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.938: Allocating blocks 41-42 which overlap fs metadata [ 195.315502][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.316960][ T7796] Quota error (device loop4): write_blk: dquota write failed [ 195.318310][ T7796] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 195.319705][ T7796] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.938: Allocating blocks 41-42 which overlap fs metadata [ 195.322095][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.323208][ T7796] Quota error (device loop4): write_blk: dquota write failed [ 195.324551][ T7796] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 195.335376][ T7796] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.938: Failed to acquire dquot type 1 [ 195.344036][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.356741][ T7796] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 195.375311][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.376845][ T7796] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.938: corrupted inode contents [ 195.388172][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.389315][ T7796] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.938: mark_inode_dirty error [ 195.395431][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.396847][ T7796] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.938: corrupted inode contents [ 195.415245][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.416482][ T7796] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.938: mark_inode_dirty error [ 195.418429][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.419831][ T7796] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.938: corrupted inode contents [ 195.440534][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.441800][ T7796] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 195.444513][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.518133][ T7796] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.938: corrupted inode contents [ 195.524321][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.530370][ T7796] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.938: mark_inode_dirty error [ 195.533570][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.534736][ T7796] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 195.536612][ T7796] EXT4-fs (loop4): Remounting filesystem read-only [ 195.537988][ T7796] EXT4-fs (loop4): 1 truncate cleaned up [ 195.539030][ T7796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.124846][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 198.684891][ T7861] loop0: detected capacity change from 0 to 128 [ 201.210896][ T7890] loop3: detected capacity change from 0 to 4096 [ 201.218422][ T7890] EXT4-fs: Ignoring removed i_version option [ 201.219528][ T7890] EXT4-fs: Ignoring removed oldalloc option [ 201.240791][ T7890] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.243460][ T7890] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 201.753373][ T7910] tipc: Enabled bearer , priority 0 [ 202.338869][ T7910] syzkaller0: mtu less than device minimum [ 202.746038][ T7922] loop4: detected capacity change from 0 to 64 [ 202.813543][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'. [ 202.822959][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'. [ 202.862523][ T7930] device dummy0 entered promiscuous mode [ 202.904287][ T7937] loop4: detected capacity change from 0 to 8 [ 202.909403][ T7937] SQUASHFS error: zlib decompression failed, data probably corrupt [ 202.911095][ T7937] SQUASHFS error: Failed to read block 0x9b: -5 [ 202.912471][ T7937] SQUASHFS error: Unable to read metadata cache entry [99] [ 202.913743][ T7937] SQUASHFS error: Unable to read inode 0x127 [ 202.960124][ T7930] device dummy0 left promiscuous mode [ 202.977017][ T4319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.063814][ T7939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.976'. [ 203.566475][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 204.371219][ T7953] syz.3.979 (7953): drop_caches: 2 [ 205.488200][ T7976] overlayfs: failed to clone lowerpath [ 207.579341][ T8018] jffs2: notice: (8018) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.531674][ T8036] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1002'. [ 209.082275][ T8041] loop3: detected capacity change from 0 to 256 [ 209.086178][ T8041] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value [ 209.202378][ T8042] gadgetfs: bound to dummy_udc driver [ 209.422430][ T8050] netlink: 'syz.2.1006': attribute type 10 has an invalid length. [ 209.745363][ T1517] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.747858][ C1] gadgetfs: connected [ 209.748847][ T1517] gadgetfs: disconnected [ 209.906600][ T8038] gadgetfs: suspended from state 2 [ 210.903333][ T1517] usb 1-1: device not accepting address 8, error -71 [ 212.532217][ T8081] syz.4.1012 (8081): drop_caches: 2 [ 212.562358][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 212.741549][ T8094] loop3: detected capacity change from 0 to 128 [ 214.007781][ T8110] tipc: Enabling of bearer rejected, already enabled [ 214.829032][ T8121] syzkaller0: mtu less than device minimum [ 214.835337][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 215.023156][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.025141][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.802463][ T8135] loop3: detected capacity change from 0 to 32768 [ 216.031865][ T8144] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 217.252387][ T8157] loop3: detected capacity change from 0 to 8 [ 217.260424][ T8157] SQUASHFS error: zlib decompression failed, data probably corrupt [ 217.261947][ T8157] SQUASHFS error: Failed to read block 0x9b: -5 [ 217.263105][ T8157] SQUASHFS error: Unable to read metadata cache entry [99] [ 217.264559][ T8157] SQUASHFS error: Unable to read inode 0x127 [ 219.470535][ T8205] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 222.532447][ T8255] loop4: detected capacity change from 0 to 512 [ 222.656692][ T8255] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1059: inode has both inline data and extents flags [ 222.659282][ T8255] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1059: couldn't read orphan inode 15 (err -117) [ 222.661739][ T8255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.421863][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 224.450539][ T8267] loop4: detected capacity change from 0 to 32768 [ 224.650348][ T8276] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 225.680640][ T8294] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.139091][ T8312] MTD: Couldn't look up './dev/mtdblock0': -2 [ 229.102795][ T8351] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 232.229313][ T8391] xt_CT: No such helper "netbios-ns" [ 233.659117][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 235.643771][ T8447] overlayfs: failed to clone lowerpath [ 236.597788][ T8455] tipc: Started in network mode [ 236.598849][ T8455] tipc: Node identity 080211, cluster identity 4711 [ 236.600063][ T8455] tipc: Enabled bearer , priority 0 [ 237.692334][ T4340] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 238.187036][ T14] tipc: Node number set to 134353152 [ 238.427157][ T8501] overlayfs: failed to clone upperpath [ 241.756345][ T8555] loop4: detected capacity change from 0 to 128 [ 245.447756][ T8624] loop4: detected capacity change from 0 to 32768 [ 245.451330][ T8624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1149 (8624) [ 245.458621][ T8624] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.460525][ T8624] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 245.462197][ T8624] BTRFS info (device loop4): using free space tree [ 245.471626][ T8624] BTRFS info (device loop4): enabling ssd optimizations [ 245.969044][ T8651] loop3: detected capacity change from 0 to 256 [ 245.974942][ T8651] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value [ 246.040878][ T8651] gadgetfs: bound to dummy_udc driver [ 247.005068][ T8653] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1152'. [ 247.044239][ T4337] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.564520][ T8678] loop3: detected capacity change from 0 to 512 [ 248.979497][ T8683] overlayfs: failed to clone upperpath [ 248.983992][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.985372][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.159266][ T8678] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.183345][ T8678] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1159: Allocating blocks 41-42 which overlap fs metadata [ 249.189165][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.190564][ T8678] Quota error (device loop3): write_blk: dquota write failed [ 249.191940][ T8678] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 249.193699][ T8678] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1159: Allocating blocks 41-42 which overlap fs metadata [ 249.197470][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.198729][ T8678] Quota error (device loop3): write_blk: dquota write failed [ 249.200446][ T8678] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 249.203402][ T8678] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1159: Failed to acquire dquot type 1 [ 249.205926][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.207273][ T8678] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 249.210133][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.211254][ T8678] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1159: corrupted inode contents [ 249.213539][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.214832][ T8678] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.1159: mark_inode_dirty error [ 249.217839][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.219064][ T8678] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1159: corrupted inode contents [ 249.221511][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.222654][ T8678] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.1159: mark_inode_dirty error [ 249.224778][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.226424][ T8678] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1159: corrupted inode contents [ 249.228649][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.229829][ T8678] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 249.231726][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.232918][ T8678] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1159: corrupted inode contents [ 249.235090][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.237463][ T8678] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.1159: mark_inode_dirty error [ 249.240835][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.243058][ T8678] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 249.246792][ T8678] EXT4-fs (loop3): Remounting filesystem read-only [ 249.248343][ T8678] EXT4-fs (loop3): 1 truncate cleaned up [ 249.249537][ T8678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.731177][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 251.667052][ T8735] loop3: detected capacity change from 0 to 32768 [ 251.670030][ T8735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1185 (8735) [ 251.674498][ T8735] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.676368][ T8735] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 251.677912][ T8735] BTRFS info (device loop3): turning on sync discard [ 251.679098][ T8735] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 251.680691][ T8735] BTRFS info (device loop3): use zstd compression, level 3 [ 251.681922][ T8735] BTRFS info (device loop3): turning on async discard [ 251.683173][ T8735] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 251.684920][ T8735] BTRFS info (device loop3): trying to use backup root at mount time [ 251.686347][ T8735] BTRFS info (device loop3): enabling auto defrag [ 251.687405][ T8735] BTRFS info (device loop3): using free space tree [ 252.039647][ T6392] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 252.042008][ T8735] BTRFS error (device loop3): failed to load root extent [ 252.043371][ T8735] BTRFS warning (device loop3): try to load backup roots slot 1 [ 252.044813][ T189] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 252.047537][ T8735] BTRFS warning (device loop3): couldn't read tree root [ 252.048774][ T8735] BTRFS warning (device loop3): try to load backup roots slot 2 [ 252.050360][ T8735] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 252.052720][ T8735] BTRFS warning (device loop3): couldn't read tree root [ 252.053871][ T8735] BTRFS warning (device loop3): try to load backup roots slot 3 [ 252.059219][ T8735] BTRFS info (device loop3): enabling ssd optimizations [ 252.060625][ T8735] BTRFS info (device loop3): rebuilding free space tree [ 252.095269][ T8735] BTRFS info (device loop3): checking UUID tree [ 252.130858][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 252.828946][ T4338] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.132202][ T8835] overlayfs: failed to clone upperpath [ 257.450267][ T8849] loop3: detected capacity change from 0 to 256 [ 257.463288][ T8849] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value [ 259.090849][ T8867] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1205'. [ 265.213159][ T8950] loop3: detected capacity change from 0 to 2048 [ 265.403324][ T8950] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 265.644705][ T8954] bridge0: port 3(erspan0) entered blocking state [ 265.646024][ T8954] bridge0: port 3(erspan0) entered disabled state [ 265.647614][ T8954] device erspan0 entered promiscuous mode [ 265.650911][ T8954] device erspan0 left promiscuous mode [ 265.651893][ T8954] bridge0: port 3(erspan0) entered disabled state [ 266.136573][ T8962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1220'. [ 266.235320][ C0] [ 266.235798][ C0] ================================ [ 266.236795][ C0] WARNING: inconsistent lock state [ 266.237735][ C0] syzkaller #0 Not tainted [ 266.238533][ C0] -------------------------------- [ 266.239530][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 266.240780][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 266.241900][ C0] ffff0000cca66130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x94/0x138 [ 266.243594][ C0] {SOFTIRQ-ON-W} state was registered at: [ 266.244572][ C0] lock_acquire+0x20c/0x638 [ 266.245377][ C0] lock_sock_nested+0x70/0x130 [ 266.246238][ C0] x25_release+0xa0/0x3c4 [ 266.247036][ C0] sock_close+0xac/0x1ec [ 266.247760][ C0] __fput+0x1b4/0x7b0 [ 266.248436][ C0] ____fput+0x20/0x30 [ 266.249125][ C0] task_work_run+0x1f4/0x280 [ 266.249895][ C0] do_notify_resume+0x20f8/0x2c84 [ 266.250757][ C0] el0_svc+0x98/0x128 [ 266.251451][ C0] el0t_64_sync_handler+0x84/0xf0 [ 266.252310][ C0] el0t_64_sync+0x18c/0x190 [ 266.253110][ C0] irq event stamp: 1614808 [ 266.253832][ C0] hardirqs last enabled at (1614808): [] __local_bh_enable_ip+0x1f8/0x37c [ 266.255644][ C0] hardirqs last disabled at (1614807): [] __local_bh_enable_ip+0x178/0x37c [ 266.257427][ C0] softirqs last enabled at (1614756): [] handle_softirqs+0xb1c/0xc90 [ 266.259095][ C0] softirqs last disabled at (1614761): [] run_ksoftirqd+0x7c/0x2ac [ 266.260665][ C0] [ 266.260665][ C0] other info that might help us debug this: [ 266.262078][ C0] Possible unsafe locking scenario: [ 266.262078][ C0] [ 266.263356][ C0] CPU0 [ 266.263895][ C0] ---- [ 266.264399][ C0] lock(sk_lock-AF_X25); [ 266.265118][ C0] [ 266.265705][ C0] lock(sk_lock-AF_X25); [ 266.266469][ C0] [ 266.266469][ C0] *** DEADLOCK *** [ 266.266469][ C0] [ 266.267774][ C0] 1 lock held by ksoftirqd/0/15: [ 266.268603][ C0] #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 266.270235][ C0] [ 266.270235][ C0] stack backtrace: [ 266.271292][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 266.272582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 266.274317][ C0] Call trace: [ 266.274946][ C0] dump_backtrace+0x1c4/0x1f0 [ 266.275718][ C0] show_stack+0x2c/0x3c [ 266.276407][ C0] __dump_stack+0x30/0x40 [ 266.277115][ C0] dump_stack_lvl+0xf4/0x15c [ 266.277883][ C0] dump_stack+0x1c/0x5c [ 266.278727][ C0] print_usage_bug+0x4c0/0x6dc [ 266.279672][ C0] mark_lock_irq+0x858/0xab8 [ 266.280551][ C0] mark_lock+0x224/0x320 [ 266.281369][ C0] __lock_acquire+0xa88/0x6634 [ 266.282261][ C0] lock_acquire+0x20c/0x638 [ 266.283127][ C0] lock_sock_nested+0x70/0x130 [ 266.283924][ C0] x25_kill_by_neigh+0x94/0x138 [ 266.284770][ C0] x25_link_terminated+0x5c/0x78 [ 266.285591][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 266.286488][ C0] netif_receive_skb_core+0x160/0x244 [ 266.287423][ C0] lapbeth_napi_poll+0x48/0xa0 [ 266.288265][ C0] __napi_poll+0xb8/0x3f4 [ 266.288999][ C0] net_rx_action+0x52c/0xb5c [ 266.289805][ C0] handle_softirqs+0x318/0xc90 [ 266.290665][ C0] run_ksoftirqd+0x7c/0x2ac [ 266.291407][ C0] smpboot_thread_fn+0x4e8/0x960 [ 266.292255][ C0] kthread+0x254/0x2e0 [ 266.292937][ C0] ret_from_fork+0x10/0x20 [ 266.293734][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 266.295191][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 266.296625][ C0] preempt_count: 100, expected: 0 [ 266.297519][ C0] RCU nest depth: 1, expected: 0 [ 266.298374][ C0] INFO: lockdep is turned off. [ 266.299107][ C0] Preemption disabled at: [ 266.299120][ C0] [] handle_softirqs+0xe8/0xc90 [ 266.300939][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 266.302137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 266.303846][ C0] Call trace: [ 266.304389][ C0] dump_backtrace+0x1c4/0x1f0 [ 266.305154][ C0] show_stack+0x2c/0x3c [ 266.305859][ C0] __dump_stack+0x30/0x40 [ 266.306683][ C0] dump_stack_lvl+0xf4/0x15c [ 266.307504][ C0] dump_stack+0x1c/0x5c [ 266.308200][ C0] __might_resched+0x354/0x4e0 [ 266.309050][ C0] __might_sleep+0x94/0x110 [ 266.309835][ C0] lock_sock_nested+0x80/0x130 [ 266.310662][ C0] x25_kill_by_neigh+0x94/0x138 [ 266.311443][ C0] x25_link_terminated+0x5c/0x78 [ 266.312300][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 266.313186][ C0] netif_receive_skb_core+0x160/0x244 [ 266.314163][ C0] lapbeth_napi_poll+0x48/0xa0 [ 266.315036][ C0] __napi_poll+0xb8/0x3f4 [ 266.315849][ C0] net_rx_action+0x52c/0xb5c [ 266.316627][ C0] handle_softirqs+0x318/0xc90 [ 266.317463][ C0] run_ksoftirqd+0x7c/0x2ac [ 266.318258][ C0] smpboot_thread_fn+0x4e8/0x960 [ 266.319145][ C0] kthread+0x254/0x2e0 [ 266.319836][ C0] ret_from_fork+0x10/0x20