last executing test programs: 59.002286778s ago: executing program 0 (id=218): syz_emit_ethernet(0xcf, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8800) syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1b01040000000905830300b3"], 0x0) 55.352831574s ago: executing program 0 (id=226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@call={0x85, 0x0, 0x0, 0xa0}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x60, 0x0, 0x7, {[@end, @noop, @timestamp={0x44, 0xc, 0x3f, 0x0, 0x1, [0xfe000000, 0x7f9e9712]}, @lsrr={0x83, 0xf, 0x44, [@broadcast, @local, @remote]}, @lsrr={0x83, 0x17, 0x49, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xa9, 0x1, 0xd, [{@remote, 0xfff}, {@local, 0x9}, {@empty, 0x3ff}]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x80, [@dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0xc, [@broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @private=0xa010102, @empty, @empty, @multicast2]}]}}}], 0xf8}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x0, 0x5}}]}}]}, 0x44}}, 0x0) setreuid(0x0, r3) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000280)=""/147, 0x93}, {&(0x7f00000001c0)=""/65, 0x41}], 0x2, 0x0, 0x0) 54.482923697s ago: executing program 0 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x3c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x6) 51.615791168s ago: executing program 0 (id=230): setreuid(0xee01, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, &(0x7f0000000580), 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1108024, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,access=', @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB]) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8c0110dc01000000000000000100"}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) setreuid(r1, r0) mount$9p_fd(0x20000000, &(0x7f0000000380)='.\x00', 0x0, 0x2000, 0x0) setresuid(0x0, 0x0, r0) setreuid(0xffffffffffffffff, r0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 51.251960598s ago: executing program 0 (id=234): prlimit64(0x0, 0xb, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0xa, 0x1, 0x106) ftruncate(r0, 0x0) 16.759083654s ago: executing program 4 (id=289): mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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") open(0x0, 0x14d27e, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x2007ffb) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 16.107991768s ago: executing program 2 (id=291): socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x803, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000240)) 15.640362217s ago: executing program 2 (id=293): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='locks_get_lock_context\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r4, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x30}}, 0x9e4b) semget$private(0x0, 0x2, 0x480) 14.166343791s ago: executing program 4 (id=296): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000000200)={[{@resgid}, {@minixdf}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x51d, &(0x7f0000000500)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x0) 14.162476341s ago: executing program 2 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)=ANY=[], 0x100}, {&(0x7f0000000580)=ANY=[], 0x1f88}, {&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xb8}], 0x3}, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/177, 0xb1}], 0x1) tkill(r2, 0x7) 11.516960804s ago: executing program 4 (id=299): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r2, &(0x7f00000004c0)=""/251, 0xfb, 0x4) socket(0x10, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 11.465207377s ago: executing program 2 (id=300): sched_setscheduler(0x0, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800142f"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 9.977339173s ago: executing program 4 (id=306): inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) 8.135691987s ago: executing program 1 (id=308): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 7.186793497s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) truncate(&(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x33424752}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 6.19322374s ago: executing program 1 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) epoll_create1(0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000002a80)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xd, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) 5.578981992s ago: executing program 3 (id=312): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 5.222804822s ago: executing program 1 (id=313): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9027) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r3 = dup(r1) connect$inet6(r0, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) 4.981103012s ago: executing program 4 (id=314): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010110}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$eJzs3U2MG1cBAOA33vUmm6TEKQldktAm/LTlp7vNZgk/ETRVcyFqKm6VKi5RmpaINCBSCVpVIsmJG62qcIUiTuVQAUJqLyjqiUslGolLT4UDB6IgVeIAhcRove95xy92x/uTtb3+Punt85s39nszOzMez8x7LwBjq9b6u7AwU4Rw5a1Xj//j/r9PL055pD1Ho/V3spSqhxCKmJ7MPu/9iaX45gcvne4WF2G+9TelwxM32u/dHkK4GA6Eq6ER9l659so784+fvHTi8sF3Xz96/c4sPQAAjJdvXz26sOevf96368M37j0WtrSnp/PzRkzviOf9x+KJfzr/r4XOdFEKZVPZfJMx1LL5JrrMVy6nns032aP8qexz6+38fR3zbakof6I0rdtywyhL23EjFLXZjnStNju79Js8tH7XTxWz58+ee+bCgCoKrLt/3RdCOCCsNDSbzZ+0VuAQ1EUQVhuaOwd9BAJYkt8vvM3F/MrC2rQ/bbK/8m88Wuv+flgHG739K3+0yv/1JUcc1s9m3ZrScqX9aEdM5/cR8ueXVrr/p8/L70fU+6xnr/sIo3J/oVc9Jza4HqvVq/75drFZfSPGaT18M8sv7z/5/3RU/sdAd//eqOv/r00P/FrnYjgwBHXY1KE+BHUQ+g7NQR+AgKG1/NzckmaU8vPn+vL8LRX5Wyvypyvyt1Xkb6/Ih3H2++d/Fl4uln/n57/pV3o9LF1nuyvGH1thffLrkSstP3/ud6XWWn7+PDEMszdPPXnmq08/dW3p+f+ivf3fitv7gZhuxH3rapwhXS/Mr6u3n/1vdJZT6zHf3Vl97rpt/uZSibs75yt2L39OKB1nbqvHTOf7dvaab3/nfI1svukYtmb1zc9PtmXvS+cf6bia1tdktrz1bDmmsnqk48quGOf1gNVI22Ov5//T9jkT6sUzZ8+deTim03b6p4n6lsXph8of+puNqTuwNv22/5kJne1/drSn12vl48LO5elF+bjQyKbPLyXbt8nT9MMxnb7nvjsx3Zo+e/r7555e74WHMXfhhRe/d+rcuTM/9CK9mLZavPCi6sixWZ8chPEx9/xzP5i78MKLD5197tSzZ549c/7wkSOH5+ePfO3wwlzrvH6ufHYPbCbLX/qDrgkAAAAAAAAAAADQrx+dOH7tL29/5b2l9v/L7f9S+//05G9q///TrP1/3k4+tQpI7QB3dclvjbv3Zmc9prL56jF8PKvv7qycPdn7PhHj9jh+sf1/am+f9+ua6nNPNj3vvzfNl3UncFt/KVNZHyTt8QJjg/1Px/TlGP8qwAAV090nx7iqf+u0raf+KfRLMZrS/y1tDakfk9T+u1e/Tun4v2sD6sj624jmhINeRqC7fw79+J+lM/GB1+UjQ7M5+DqsPQz/ehbWMTSbRvEAhsOgx/9M1z1TfP6P39q6GNJsNx7tPF7m/ZfCWgz7+JPK31zjf7bHv+vr+Neld/WOfp77H13hP7+4/l6p2LC33+NvvvypH+jd1WWWfRjLT8v/QOiv/OZrWfn5DaE+/Tcrf1uf5d+2/PtXV/7/YvlptT34mX7LX6pxUeusR37dON3/y68bJzez5U99e654+Vc5UOOtWD6Ms97jzPY7gu1wGpXxf3vJn8P4ckynA2F6ziH/Rl5p/dPzFel7YE/2+UXF99uojFPcy7iP//v1GFftD2n837Q9Nrqka6V0vcu6HfVtBTab94f+/t+IhYtDUAdhSMNwjIFdDs1mc6AdeetFfLAGvf4Hffd50OUPev1Xycf/zc/h8/F/a9kPiHz83/z9+fi/eX4+vl6en4//m6/PfPzfPP+e7HPzK9gzFfmfrMjfW5G/bzl/ulv+/or3f6oi/2BF/r0V+fdV5N9dkT9Rkf/ZivzPVeTfX5H/YEX+5yvyN7tWe5TSTjVuyw/jLG+fZ/+H8ZHu//Ta/3dX5AOj6+dvHHrsqd99p7HU/n+q/Xst3cc7FtP1+Nv5xzGd3/cOpfRi3tsx/bcsf9ivd8A4yfvPyL/fH6jIB0ZXes7L/g1jqOjeY09+v61Xv1W9zvMZLV+I8Rdj/KUYPxTj2RjPxfhQjOc3qH7cGY/99g9HXy6Wf+/vzPL7fZ48bw+U9xN1uM/65NcHVvo8e96P30qttfxVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmFrr78LCTBHClbdePf7kybNzi1Meac/RaP2dLKXq7feF8HCMJ2L8y/ji5gcvnS7Ht2JchPlQhKI9PTxxo13S9hDCxXAgXA2NsPfKtVfemX/85KUTlw+++/rR63duDQAAAMDm9/8AAAD//6ZSGwg=") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.125901434s ago: executing program 3 (id=315): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x10000000000000, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x7fffffe]}}]}, 0x60) r2 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000100000000b4"], 0x28}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xfffffffe}]}}}]}, 0x40}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private2}}) 3.954884268s ago: executing program 2 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 3.953836279s ago: executing program 1 (id=325): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0) write$binfmt_misc(r0, &(0x7f0000000500), 0x103) write$char_usb(r0, &(0x7f0000000040)="0012fa", 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)="e8b0189c7bbbb194addad6488e56ba", 0x0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)={0x20002018}) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f00000000c0)={r5, r4, 0x7}) 3.635213105s ago: executing program 1 (id=317): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) close(r3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 3.634811245s ago: executing program 3 (id=318): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 1.994547333s ago: executing program 3 (id=319): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 1.942230187s ago: executing program 2 (id=320): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000201005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008038, 0xffffffffffffffff, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) 824.987921ms ago: executing program 3 (id=321): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x4, 0x9}}, @void, @val={0x76, 0x6, {0x0, 0x6, 0x28, 0x924}}}}}}]}, 0x48}}, 0x0) shutdown(0xffffffffffffffff, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000004000"], 0x48) getpeername(r3, 0x0, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000cc0)}, 0x20) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 452.99µs ago: executing program 3 (id=322): socket$netlink(0x10, 0x3, 0xb) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x0) 0s ago: executing program 4 (id=323): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x81c81, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f996ff109a04000000008000"}) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) kernel console output (not intermixed with test programs): 60.936473][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.950880][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.969739][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.019213][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.029458][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.040083][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.050863][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.064056][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.074563][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.085231][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.098936][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.106360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.115442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.124565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.132970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.141800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.151986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.161140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.174255][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.184509][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.193374][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.203566][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.226645][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.254868][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.264116][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.274536][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.455517][ T3653] ODEBUG: Out of memory. ODEBUG disabled [ 62.289542][ T3582] Bluetooth: hci0: command 0x0419 tx timeout [ 62.323517][ T3582] Bluetooth: hci4: command 0x0419 tx timeout [ 62.375836][ T3582] Bluetooth: hci1: command 0x0419 tx timeout [ 62.407230][ T3658] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.409779][ T3582] Bluetooth: hci3: command 0x0419 tx timeout [ 62.432504][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 62.532518][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.558066][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.581944][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.621553][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.639340][ T3662] kvm: emulating exchange as write [ 62.667339][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.717136][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.743004][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.751432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.771220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.781041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.807781][ T2651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.824985][ T2651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.853582][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.069270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.548881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.558083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 63.567425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 63.576650][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.585841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.861300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.011669][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.048656][ T3678] MPTCP: addr_signal error, add_addr=1, echo=0 [ 64.098705][ T1077] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.928933][ T1077] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=80.b1 [ 64.958211][ T1077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.006791][ T1077] usb 5-1: Product: syz [ 65.049378][ T1077] usb 5-1: Manufacturer: syz [ 65.094344][ T3676] loop1: detected capacity change from 0 to 32768 [ 65.169260][ T3676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8 (3676) [ 65.242997][ T1077] usb 5-1: SerialNumber: syz [ 65.306035][ T3676] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 65.314077][ T1077] usb 5-1: config 0 descriptor?? [ 65.374381][ T3676] BTRFS info (device loop1): using free space tree [ 65.413172][ T3676] BTRFS info (device loop1): has skinny extents [ 65.543437][ T1077] usb 5-1: Found UVC 0.00 device syz (1bcf:0b40) [ 65.559715][ T1077] usb 5-1: Forcing UVC version to 1.0a [ 65.578584][ T1077] usb 5-1: No valid video chain found. [ 65.728619][ T3676] BTRFS info (device loop1): enabling ssd optimizations [ 65.818626][ T3664] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.907609][ T3014] usb 5-1: USB disconnect, device number 2 [ 66.087236][ T3698] loop3: detected capacity change from 0 to 32768 [ 66.139155][ T3698] ======================================================= [ 66.139155][ T3698] WARNING: The mand mount option has been deprecated and [ 66.139155][ T3698] and is ignored by this kernel. Remove the mand [ 66.139155][ T3698] option from the mount to silence this warning. [ 66.139155][ T3698] ======================================================= [ 66.210731][ T3698] XFS (loop3): Mounting V5 Filesystem [ 66.271158][ T3664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.282252][ T3664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.292601][ T3664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.305930][ T3664] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 66.315419][ T3664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.327726][ T3664] usb 3-1: config 0 descriptor?? [ 66.369135][ T3698] XFS (loop3): Ending clean mount [ 66.469343][ T3698] XFS (loop3): Quotacheck needed: Please wait. [ 66.588023][ T3698] XFS (loop3): Quotacheck: Done. [ 66.847667][ T3664] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 66.868714][ T3664] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 66.875999][ T3664] prodikeys 0003:041E:2801.0001: unknown main item tag 0x4 [ 66.888704][ T3664] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 66.902250][ T3664] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 66.963329][ T3578] XFS (loop3): Unmounting Filesystem [ 67.070270][ T3664] usb 3-1: USB disconnect, device number 2 [ 67.495526][ T3745] loop4: detected capacity change from 0 to 40427 [ 67.578905][ T3745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 67.599401][ T3745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.665939][ T3745] F2FS-fs (loop4): invalid crc value [ 67.711502][ T3745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.813313][ T3745] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 67.993069][ T3754] loop3: detected capacity change from 0 to 32768 [ 68.079011][ T3745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 68.098863][ T3745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.186016][ T3766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'. [ 68.380021][ T3754] JBD2: Ignoring recovery information on journal [ 69.014781][ T3754] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 69.057523][ T3745] Trying to write to read-only block-device loop4 [ 69.087015][ T3745] Trying to write to read-only block-device loop4 [ 69.145892][ T26] audit: type=1800 audit(1729133123.638:2): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 69.271729][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.271793][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.310553][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.318248][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.386725][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.420405][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.448358][ T3570] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 69.636870][ T155] Trying to write to read-only block-device loop4 [ 71.007207][ T3754] (syz.3.19,3754,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "nodiscard" or missing value [ 71.142199][ T3578] ocfs2: Unmounting device (7,3) on (node local) [ 71.145031][ T3804] loop2: detected capacity change from 0 to 512 [ 71.340828][ T3804] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 71.397538][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.404595][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413483][ T3804] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 71.565422][ T26] audit: type=1800 audit(1729133126.058:3): pid=3810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 71.616496][ T3795] loop1: detected capacity change from 0 to 32768 [ 71.680038][ T26] audit: type=1800 audit(1729133126.088:4): pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 71.815012][ T3816] xt_nfacct: accounting object `syz1' does not exists [ 72.560089][ T3808] chnl_net:caif_netlink_parms(): no params data found [ 72.834451][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.871243][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.890900][ T3808] device bridge_slave_0 entered promiscuous mode [ 72.917282][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.959290][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.997362][ T3808] device bridge_slave_1 entered promiscuous mode [ 73.108771][ T3808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.147900][ T3808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.264851][ T3808] team0: Port device team_slave_0 added [ 73.277668][ T3808] team0: Port device team_slave_1 added [ 73.361168][ T3836] loop2: detected capacity change from 0 to 32768 [ 73.389381][ T3582] Bluetooth: hci5: command 0x0409 tx timeout [ 73.418771][ T3808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.443774][ T3808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.481858][ T3836] XFS: ikeep mount option is deprecated. [ 73.482834][ T3808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.502407][ T3808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.516488][ T3808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.853533][ T3836] XFS (loop2): Mounting V5 Filesystem [ 74.978360][ T3808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.990878][ T3836] XFS (loop2): Ending clean mount [ 75.027272][ T3836] XFS (loop2): Quotacheck needed: Please wait. [ 75.106291][ T3852] loop3: detected capacity change from 0 to 4096 [ 75.215613][ T3836] XFS (loop2): Quotacheck: Done. [ 75.259246][ T3808] device hsr_slave_0 entered promiscuous mode [ 75.280658][ T3808] device hsr_slave_1 entered promiscuous mode [ 75.288887][ T3865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.347695][ T3808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.377753][ T3808] Cannot create hsr debugfs directory [ 75.468594][ T3723] Bluetooth: hci5: command 0x041b tx timeout [ 75.536435][ T3869] loop1: detected capacity change from 0 to 1024 [ 75.597915][ T3869] EXT4-fs (loop1): Ignoring removed orlov option [ 75.623720][ T3869] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 75.655277][ T3573] XFS (loop2): Unmounting Filesystem [ 75.717333][ T3869] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 75.908329][ T3874] process 'syz.1.45' launched './file1' with NULL argv: empty string added [ 75.934471][ T3808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.075732][ T3808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.221343][ T3808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.333215][ T7] cfg80211: failed to load regulatory.db [ 76.412307][ T3808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.494720][ T3888] device syzkaller0 entered promiscuous mode [ 77.583549][ T3617] Bluetooth: hci5: command 0x040f tx timeout [ 78.733420][ T3808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.858030][ T3808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.702096][ T3617] Bluetooth: hci5: command 0x0419 tx timeout [ 79.715773][ T3808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.763212][ T3912] loop4: detected capacity change from 0 to 2048 [ 79.877206][ T3808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.173552][ T3808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.213301][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.236752][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.284866][ T3808] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.323094][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.330904][ T3921] loop1: detected capacity change from 0 to 8192 [ 80.343035][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.375521][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.382736][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.447382][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.499397][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.538113][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.567194][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.574373][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.598894][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.622585][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.666980][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.695259][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.713639][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.746375][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.779541][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.807664][ T3808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.838810][ T3808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.874828][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.905810][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.936506][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.987796][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.057447][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.135208][ T3920] loop3: detected capacity change from 0 to 40427 [ 81.216193][ T3920] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 81.250085][ T3920] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.300428][ T3920] F2FS-fs (loop3): invalid crc value [ 81.319155][ T3920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.437827][ T3808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.446514][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.462717][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.487801][ T3920] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.497335][ T3920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 81.499436][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.514684][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.576917][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.614897][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.626176][ T3808] device veth0_vlan entered promiscuous mode [ 81.641223][ T3943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.782648][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.812278][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.857040][ T3808] device veth1_vlan entered promiscuous mode [ 81.873745][ T3944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.60'. [ 81.903349][ T3943] syz.2.60 (3943) used greatest stack depth: 18424 bytes left [ 81.944297][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.953925][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.995172][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.016748][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.035219][ T3949] loop2: detected capacity change from 0 to 128 [ 82.112564][ T3808] device veth0_macvtap entered promiscuous mode [ 82.127422][ T3578] attempt to access beyond end of device [ 82.127422][ T3578] loop3: rw=2049, want=45104, limit=40427 [ 82.152718][ T3808] device veth1_macvtap entered promiscuous mode [ 82.214541][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.253515][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.285127][ T3940] loop4: detected capacity change from 0 to 32768 [ 82.297995][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.308690][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.322855][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.333475][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.343452][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.354175][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.366108][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.384258][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.444374][ T3808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.474564][ T2628] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.491281][ T2628] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.503345][ T2628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.512849][ T2628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.715371][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.028521][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.079335][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.141613][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.182425][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.208625][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.224808][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.235810][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.245742][ T3808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.256435][ T3808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.267799][ T3808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.287291][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.371222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.414965][ T3960] loop3: detected capacity change from 0 to 128 [ 83.424271][ T3808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.438274][ T3808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.464015][ T3808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.483468][ T3808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.063994][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.175353][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.261318][ T3578] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 84.282599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.289296][ T3578] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 84.363061][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.371831][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 84.383834][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.465736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.368752][ T3976] loop1: detected capacity change from 0 to 256 [ 85.449482][ T3976] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000' [ 85.516862][ T3981] loop4: detected capacity change from 0 to 512 [ 85.666926][ T3973] loop1: detected capacity change from 0 to 512 [ 85.797935][ T3984] loop0: detected capacity change from 0 to 512 [ 85.920623][ T3984] EXT4-fs (loop0): Ignoring removed nobh option [ 86.133326][ T3984] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 86.142264][ T3984] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 86.155087][ T3984] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.32: casefold flag without casefold feature [ 86.172871][ T3984] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.32: couldn't read orphan inode 13 (err -117) [ 86.197746][ T3984] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 86.402053][ T3989] loop4: detected capacity change from 0 to 128 [ 86.898253][ T3998] loop4: detected capacity change from 0 to 512 [ 87.127474][ T4004] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 87.205379][ T4005] xt_nfacct: accounting object `syz1' does not exists [ 88.155780][ T4017] loop4: detected capacity change from 0 to 2048 [ 89.011242][ T3582] Bluetooth: hci4: command 0x0409 tx timeout [ 89.167622][ T3995] chnl_net:caif_netlink_parms(): no params data found [ 89.679703][ T4039] loop4: detected capacity change from 0 to 512 [ 89.788439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.870700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 90.655882][ T3995] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.672251][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.707707][ T3995] device bridge_slave_0 entered promiscuous mode [ 90.738336][ T3995] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755338][ T4009] loop0: detected capacity change from 0 to 32768 [ 90.760853][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.789242][ T3995] device bridge_slave_1 entered promiscuous mode [ 90.813535][ T26] audit: type=1326 audit(1729133145.308:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 90.848650][ T4049] loop4: detected capacity change from 0 to 512 [ 90.874623][ T26] audit: type=1326 audit(1729133145.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 90.910702][ T3995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.969194][ T3995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.970157][ T26] audit: type=1326 audit(1729133145.328:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 91.037965][ T3995] team0: Port device team_slave_0 added [ 91.068681][ T3731] Bluetooth: hci4: command 0x041b tx timeout [ 91.086873][ T26] audit: type=1326 audit(1729133145.328:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 91.088063][ T3995] team0: Port device team_slave_1 added [ 91.225027][ T26] audit: type=1326 audit(1729133145.328:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 91.298106][ T26] audit: type=1326 audit(1729133145.328:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ca8c0bff9 code=0x7ffc0000 [ 91.331796][ T3995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.348739][ T3995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.421920][ T26] audit: type=1326 audit(1729133145.328:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ca8c0c033 code=0x7ffc0000 [ 91.456940][ T3995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.492569][ T3995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.527934][ T26] audit: type=1326 audit(1729133145.338:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ca8c0aadf code=0x7ffc0000 [ 91.528607][ T3995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.632559][ T26] audit: type=1326 audit(1729133145.338:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7ca8c0c087 code=0x7ffc0000 [ 91.694156][ T3995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.720936][ T26] audit: type=1326 audit(1729133145.338:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ca8c0a990 code=0x7ffc0000 [ 91.722438][ T4047] loop1: detected capacity change from 0 to 32768 [ 91.755603][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.800310][ C0] vxcan0: j1939_xtp_rx_dpo: no connection found [ 91.807007][ C0] vxcan0: j1939_xtp_rx_dpo: no connection found [ 91.813462][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 91.820062][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 91.826657][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 91.833208][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 91.839846][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 91.846549][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.854582][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.862665][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.870681][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.878735][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.886776][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.894752][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.903025][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.910998][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.919112][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.927075][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.935134][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.943089][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.951133][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.959079][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.967161][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.975120][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.983141][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.991113][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.999128][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.007048][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.015100][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.023074][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.031210][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.039156][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.047229][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.055215][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.063239][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.071216][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.079221][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.087211][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.095247][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.103199][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.111223][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.119181][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.127273][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.135330][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.143348][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.151319][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.159331][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.167276][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.175552][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.183500][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.191579][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.199563][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.207653][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.215628][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.223734][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.231690][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.240020][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.247939][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.255999][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.263954][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.271988][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.279934][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.287938][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.295924][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.327878][ T4047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (4047) [ 92.370261][ T4047] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 92.379442][ T4047] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.392009][ T4047] BTRFS info (device loop1): trying to use backup root at mount time [ 92.400278][ T4047] BTRFS info (device loop1): using free space tree [ 92.407008][ T4047] BTRFS info (device loop1): has skinny extents [ 92.602365][ T4047] BTRFS info (device loop1): enabling ssd optimizations [ 92.632118][ T3995] device hsr_slave_0 entered promiscuous mode [ 92.688954][ T3995] device hsr_slave_1 entered promiscuous mode [ 92.741839][ T3995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.772398][ T3995] Cannot create hsr debugfs directory [ 92.778929][ T4047] loop1: detected capacity change from 32768 to 64 [ 92.819984][ T4095] attempt to access beyond end of device [ 92.819984][ T4095] loop1: rw=6145, want=10256, limit=64 [ 92.863361][ T4095] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 92.952392][ T4095] attempt to access beyond end of device [ 92.952392][ T4095] loop1: rw=6145, want=10248, limit=64 [ 92.973413][ T4047] BTRFS: error (device loop1) in btrfs_del_dir_entries_in_log:3569: errno=-5 IO failure [ 92.979794][ T4095] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 93.048648][ T4047] BTRFS info (device loop1): forced readonly [ 93.054704][ T4047] BTRFS: error (device loop1) in __btrfs_unlink_inode:4183: errno=-5 IO failure [ 93.130238][ T4047] BTRFS: error (device loop1) in btrfs_rename:9932: errno=-5 IO failure [ 93.151674][ T4101] binder_alloc: 4100: pid 4100 spamming oneway? 1 buffers allocated for a total size of 4096 [ 93.152193][ T3582] Bluetooth: hci4: command 0x040f tx timeout [ 93.184377][ T4086] BTRFS: error (device loop1) in free_log_tree:3414: errno=-5 IO failure [ 93.199380][ T4086] BTRFS: error (device loop1) in free_log_tree:3414: errno=-5 IO failure [ 93.212536][ T4102] binder: 4100:4102 ioctl c0306201 20000380 returned -14 [ 93.227860][ T3995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.238891][ T4101] binder: 4100:4101 ioctl c0306201 20000500 returned -14 [ 93.310861][ T3995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.326019][ T4097] loop0: detected capacity change from 0 to 32768 [ 94.397790][ T4097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.97 (4097) [ 94.466044][ T4097] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 94.483825][ T4097] BTRFS info (device loop0): setting nodatacow, compression disabled [ 94.497277][ T4097] BTRFS info (device loop0): setting datacow [ 94.513662][ T4097] BTRFS info (device loop0): doing ref verification [ 94.522831][ T3995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.524235][ T4097] BTRFS info (device loop0): force clearing of disk cache [ 94.551274][ T4097] BTRFS info (device loop0): turning off barriers [ 94.566251][ T4097] BTRFS info (device loop0): enabling ssd optimizations [ 94.574547][ T4097] BTRFS info (device loop0): using spread ssd allocation scheme [ 94.602440][ T4097] BTRFS info (device loop0): not using ssd optimizations [ 94.618519][ T4097] BTRFS info (device loop0): not using spread ssd allocation scheme [ 94.626742][ T4097] BTRFS info (device loop0): using free space tree [ 94.633782][ T3582] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.649348][ T4097] BTRFS info (device loop0): has skinny extents [ 94.829280][ T3995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.427473][ T3617] Bluetooth: hci4: command 0x0419 tx timeout [ 95.501712][ T2651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.522115][ T4130] loop2: detected capacity change from 0 to 512 [ 95.605856][ T2651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.619660][ T4097] BTRFS info (device loop0): clearing free space tree [ 95.621187][ T3582] usb 5-1: Using ep0 maxpacket: 32 [ 95.627413][ T4097] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.647911][ T4097] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.678666][ T4130] EXT4-fs (loop2): 1 orphan inode deleted [ 95.696068][ T4130] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 95.721625][ T4130] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 95.730681][ T4097] BTRFS info (device loop0): creating free space tree [ 95.749705][ T2651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.768732][ T3582] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.782025][ T4097] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.792379][ T3582] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.811659][ T4097] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.822329][ T3582] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.689872][ T3582] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.725812][ T2651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.791266][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.802193][ T3582] usb 5-1: Product: syz [ 96.807600][ T3582] usb 5-1: Manufacturer: syz [ 96.812657][ T3582] usb 5-1: SerialNumber: syz [ 96.880405][ T3582] cdc_ncm 5-1:1.0: skipping garbage [ 96.895940][ T3582] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 96.941300][ T3582] cdc_ncm 5-1:1.0: bind() failure [ 96.990007][ T4147] chnl_net:caif_netlink_parms(): no params data found [ 97.485787][ T4168] vivid-000: disconnect [ 97.572768][ T3617] usb 5-1: USB disconnect, device number 3 [ 97.799744][ T4165] vivid-000: reconnect [ 97.868581][ T3617] Bluetooth: hci3: command 0x0409 tx timeout [ 97.884134][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.906348][ T4147] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.984117][ T4147] device bridge_slave_0 entered promiscuous mode [ 98.024305][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.061579][ T4147] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.095800][ T4147] device bridge_slave_1 entered promiscuous mode [ 98.157693][ T4147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.968712][ T4147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.217793][ T4147] team0: Port device team_slave_0 added [ 99.422588][ T4147] team0: Port device team_slave_1 added [ 99.469762][ T3995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.528687][ T4147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.535776][ T4147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.609805][ T4147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.623797][ T3995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.638694][ T4217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.118'. [ 99.782408][ T4147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.802351][ T4224] syz.0.119 uses obsolete (PF_INET,SOCK_PACKET) [ 99.807067][ T4147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.850338][ T4147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.869777][ T3995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.945792][ T3995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.948714][ T3731] Bluetooth: hci3: command 0x041b tx timeout [ 100.097610][ T4147] device hsr_slave_0 entered promiscuous mode [ 100.105817][ T4147] device hsr_slave_1 entered promiscuous mode [ 100.271289][ T4147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.357566][ T4147] Cannot create hsr debugfs directory [ 101.229171][ T3995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.298630][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 101.391219][ T4242] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 101.391219][ T4242] r0Rpyëhå:ã‰ÝèÖY³‡ [ 101.391219][ T4242] òO©÷‰\›z«Y" or missing value [ 101.410172][ T4242] ufs: wrong mount options [ 102.077878][ T3724] Bluetooth: hci3: command 0x040f tx timeout [ 102.084673][ T4236] device hsr_slave_1 left promiscuous mode [ 102.348777][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.361688][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.383921][ T3995] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.902299][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.065362][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.119320][ T4156] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.126603][ T4156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.185158][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.194532][ T4258] loop0: detected capacity change from 0 to 1024 [ 103.232144][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.322416][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.348035][ T4258] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 103.395520][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.402720][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.178807][ T3731] Bluetooth: hci3: command 0x0419 tx timeout [ 104.227098][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.254385][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.286446][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.316027][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.317086][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.374995][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.465451][ T3995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.573413][ T4301] loop0: detected capacity change from 0 to 512 [ 105.588464][ T3995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.718535][ T3645] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.724827][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.740694][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.753274][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.937725][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.953418][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.967956][ T4301] ext4 filesystem being mounted at /17/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 106.040150][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.160222][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.523011][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 106.595057][ T2651] device hsr_slave_0 left promiscuous mode [ 106.612257][ T2651] device hsr_slave_1 left promiscuous mode [ 106.638347][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.666128][ T4308] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.136: Directory hole found for htree leaf block 0 [ 106.679957][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.717903][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.747749][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.763707][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 106.790564][ T2651] device bridge_slave_1 left promiscuous mode [ 106.810025][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.842010][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 106.878901][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.883242][ T2651] device bridge_slave_0 left promiscuous mode [ 106.902798][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 106.951196][ T4299] loop4: detected capacity change from 0 to 32768 [ 106.965816][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.966917][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 107.005558][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 107.041242][ T4301] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 18: comm syz.0.136: lblock 23 mapped to illegal pblock 18 (length 1) [ 107.077151][ T4301] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.136: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 107.119673][ T2651] device veth1_macvtap left promiscuous mode [ 107.136320][ T2651] device veth0_macvtap left promiscuous mode [ 107.178667][ T2651] device veth1_vlan left promiscuous mode [ 107.211618][ T2651] device veth0_vlan left promiscuous mode [ 107.799312][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 107.808473][ T4314] loop4: detected capacity change from 0 to 32768 [ 107.943673][ T2651] team0 (unregistering): Port device team_slave_1 removed [ 108.035319][ T4316] loop0: detected capacity change from 0 to 1024 [ 108.054546][ T2651] team0 (unregistering): Port device team_slave_0 removed [ 108.096702][ T2651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.114608][ T2651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.288005][ T4323] loop4: detected capacity change from 0 to 2048 [ 108.447446][ T4316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 108.538171][ T4316] System zones: 0-1, 3-12 [ 108.764478][ T4316] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,debug,,errors=continue. Quota mode: none. [ 108.926065][ T2651] bond0 (unregistering): Released all slaves [ 108.957114][ T3808] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 108.983825][ T3808] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.006495][ T4327] loop4: detected capacity change from 0 to 2048 [ 109.029732][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.052200][ T3808] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.082430][ T3808] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.102556][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.117939][ T3808] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.185914][ T3808] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.238902][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.268825][ T3808] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.316956][ T3808] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.337844][ T4318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.140'. [ 109.376543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.399090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.448802][ T3995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.466821][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.536732][ T3808] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.577735][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.586440][ T4332] loop4: detected capacity change from 0 to 4096 [ 109.601471][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.605902][ T3808] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 109.644101][ T4332] /dev/loop4: Can't open blockdev [ 109.694673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.703750][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.719299][ T4339] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.726493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.774542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.783458][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.822058][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.837213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.851168][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.870014][ T3995] device veth0_vlan entered promiscuous mode [ 109.871469][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 109.952481][ T3995] device veth1_vlan entered promiscuous mode [ 110.000062][ T3808] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 110.000663][ T4147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.085384][ T4348] loop2: detected capacity change from 0 to 128 [ 110.088315][ T4147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.122685][ T4147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.150230][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 110.150246][ T26] audit: type=1326 audit(1729133164.648:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.4.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ca8c0bff9 code=0x0 [ 110.161452][ T4147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.218082][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.237076][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.315054][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.337016][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.352995][ T3995] device veth0_macvtap entered promiscuous mode [ 110.415387][ T3995] device veth1_macvtap entered promiscuous mode [ 110.539570][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.569455][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.588673][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.609166][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.628607][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.649198][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.671694][ T4361] loop2: detected capacity change from 0 to 4096 [ 110.678249][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.688999][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.699025][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.709618][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.742332][ T3995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.776026][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.788696][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.809170][ T4361] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 110.845676][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.869331][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.880538][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.905544][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.935857][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.986353][ T4348] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 111.006482][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.045696][ T3995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.057630][ T9] ntfs3: loop2: ino=1b, Internal error [ 111.069519][ T9] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22. [ 111.078051][ T3995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.080282][ T4348] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 111.090108][ T3995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.133805][ T3995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.157212][ T3995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.166186][ T26] audit: type=1800 audit(1729133165.648:34): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.147" name="/" dev="fuse" ino=1 res=0 errno=0 [ 111.195953][ T3995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.204785][ T3995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.258262][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.279607][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.291516][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.306747][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.451234][ T4147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.529141][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.538367][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.553565][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.562431][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.585044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.612382][ T4147] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.654840][ T3573] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 111.675025][ T3573] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 111.684248][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.698706][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.700201][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.736998][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.809162][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.816284][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.883346][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.914727][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.979293][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.019827][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.057676][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.064913][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.144645][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.197381][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.246896][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.279007][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.335498][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.539260][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.691704][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.171222][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.185806][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.215120][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.299141][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.351431][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.322488][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 114.640245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.666276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.727661][ T4147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.781229][ T4424] syz.4.155 sent an empty control message without MSG_MORE. [ 114.808084][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.837643][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.864818][ T4381] chnl_net:caif_netlink_parms(): no params data found [ 114.893532][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.904893][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.933938][ T4147] device veth0_vlan entered promiscuous mode [ 114.962021][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.980311][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.018568][ T4147] device veth1_vlan entered promiscuous mode [ 115.112776][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.136923][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.177141][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.216497][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.269177][ T4147] device veth0_macvtap entered promiscuous mode [ 115.292363][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.327663][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.349377][ T4381] device bridge_slave_0 entered promiscuous mode [ 115.373188][ T4147] device veth1_macvtap entered promiscuous mode [ 115.392187][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.408544][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.409763][ T4381] device bridge_slave_1 entered promiscuous mode [ 115.647944][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.679041][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.699837][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.718513][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.767000][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.797799][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.824103][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.857034][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.881700][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.934309][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.975444][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.025454][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.051907][ T4147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.076456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.090034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.108982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.127974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.197392][ T4381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.240091][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.268581][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.298531][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.428676][ T3616] Bluetooth: hci5: command 0x041b tx timeout [ 116.694115][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.050672][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.111538][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.131763][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.142547][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.187877][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.237058][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.278493][ T4147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.321236][ T4147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.363798][ T4147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.403503][ T4381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.447390][ T2651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.511346][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.529597][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.563081][ T4147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.578585][ T4147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.597558][ T4147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.627962][ T4147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.756355][ T4381] team0: Port device team_slave_0 added [ 117.799630][ T2651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.844739][ T4381] team0: Port device team_slave_1 added [ 118.334081][ T2651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.704555][ T2651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.831475][ T4161] Bluetooth: hci5: command 0x040f tx timeout [ 118.859524][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.870550][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.909600][ T4381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.951044][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.974834][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.018256][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.027807][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.065904][ T4381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.192500][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.072078][ T4381] device hsr_slave_0 entered promiscuous mode [ 120.175648][ T4381] device hsr_slave_1 entered promiscuous mode [ 120.257091][ T4381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.298944][ T4381] Cannot create hsr debugfs directory [ 120.640509][ T4156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.703004][ T4156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.915605][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 120.941964][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.975440][ T3731] Bluetooth: hci6: command 0x0409 tx timeout [ 126.255953][ T4543] ÿÿÿÿÿÿ: renamed from vlan0 [ 126.859938][ T4381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.911731][ T4381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.924233][ T4518] chnl_net:caif_netlink_parms(): no params data found [ 126.951187][ T4381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.979314][ T4381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.082129][ T3582] Bluetooth: hci6: command 0x041b tx timeout [ 128.131104][ T2651] device hsr_slave_0 left promiscuous mode [ 128.222024][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.265843][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.318293][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.366861][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.422391][ T2651] device bridge_slave_1 left promiscuous mode [ 128.449949][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.738852][ T4577] ALSA: mixer_oss: invalid OSS volume '' [ 129.920032][ T2651] device bridge_slave_0 left promiscuous mode [ 129.936783][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.953308][ T2651] device veth1_macvtap left promiscuous mode [ 129.987417][ T2651] device veth0_macvtap left promiscuous mode [ 130.016929][ T2651] device veth1_vlan left promiscuous mode [ 130.041507][ T2651] device veth0_vlan left promiscuous mode [ 130.108622][ T3725] Bluetooth: hci6: command 0x040f tx timeout [ 130.143720][ T4585] loop4: detected capacity change from 0 to 256 [ 130.309655][ T4585] /dev/loop4: Can't open blockdev [ 130.638557][ T2651] team0 (unregistering): Port device team_slave_1 removed [ 130.675289][ T2651] team0 (unregistering): Port device team_slave_0 removed [ 130.696639][ T2651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.732353][ T2651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.876514][ T2651] bond0 (unregistering): Released all slaves [ 131.001615][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.055632][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.089061][ T4518] device bridge_slave_0 entered promiscuous mode [ 131.113685][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.140851][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.272179][ T4518] device bridge_slave_1 entered promiscuous mode [ 131.782487][ T4518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.018184][ T4518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.090499][ T4601] loop4: detected capacity change from 0 to 2048 [ 132.234852][ T3723] Bluetooth: hci6: command 0x0419 tx timeout [ 132.900168][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.975821][ T4518] team0: Port device team_slave_0 added [ 133.035578][ T4518] team0: Port device team_slave_1 added [ 133.115595][ T4381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.198831][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.209122][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.277109][ T4381] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.281344][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.281363][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.281388][ T4518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.284605][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.284623][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.284649][ T4518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.381813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.382523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.382953][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.383020][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.385094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.385876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.386399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.386820][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.386853][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.522760][ T4518] device hsr_slave_0 entered promiscuous mode [ 133.547901][ T4518] device hsr_slave_1 entered promiscuous mode [ 133.548824][ T4518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.548850][ T4518] Cannot create hsr debugfs directory [ 133.700399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.701441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.702328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.703487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.704818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.768997][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.769883][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.770572][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.771088][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.779181][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.786324][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.789859][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.156593][ T4518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.179122][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.179266][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.236353][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.299521][ T4518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.315520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.316142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.480997][ T4518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.498191][ T4640] loop1: detected capacity change from 0 to 2048 [ 134.521873][ T4381] device veth0_vlan entered promiscuous mode [ 134.558908][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.830396][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.938265][ T4381] device veth1_vlan entered promiscuous mode [ 135.016521][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.062254][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.127977][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.278132][ T4147] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 135.307410][ T4147] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 135.411003][ T4518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.572301][ T4381] device veth0_macvtap entered promiscuous mode [ 135.586615][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.600110][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.623482][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.641240][ T4381] device veth1_macvtap entered promiscuous mode [ 135.705570][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.728771][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.746971][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.758062][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.768609][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.779565][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.790023][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.800877][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.811317][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.822165][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.834617][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.845722][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.859462][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.882751][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.896418][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.923586][ T3985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.935288][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.949544][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.961776][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.973327][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.983525][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.994368][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.004707][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.015481][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.025798][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.038000][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.048349][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.066624][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.084943][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.145299][ T4518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.180425][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.199433][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.239757][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.278232][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.310933][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.333541][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.366275][ T4518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.492181][ T4518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.538806][ T4518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.726299][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.752327][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.761333][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 136.797933][ T4671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.809381][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.824936][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.826986][ T4671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.854067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.868259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.998321][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.076277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.096483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.913766][ T4518] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.001435][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.030961][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.080146][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.087260][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.628642][ T3723] Bluetooth: hci3: command 0x0409 tx timeout [ 138.801851][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.814665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.835867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.962569][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.969853][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.999980][ T4665] chnl_net:caif_netlink_parms(): no params data found [ 139.010952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.025346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.070647][ T2651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.135175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.163768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.202622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.234562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.255013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.274371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.297433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.323674][ T4518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.361485][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.366170][ T4698] loop2: detected capacity change from 0 to 8192 [ 139.425081][ T4698] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.479633][ T2651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.507708][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.530383][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.662177][ T2651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.904982][ T2651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.947088][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.958556][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.977551][ T4665] device bridge_slave_0 entered promiscuous mode [ 139.996237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.009858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.059897][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.081035][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.088143][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.118618][ T4665] device bridge_slave_1 entered promiscuous mode [ 140.382801][ T4665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.116206][ T4665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.189436][ T3617] Bluetooth: hci3: command 0x041b tx timeout [ 141.289470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.320370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.397362][ T4665] team0: Port device team_slave_0 added [ 141.463915][ T4665] team0: Port device team_slave_1 added [ 141.539857][ T4747] loop4: detected capacity change from 0 to 8 [ 141.563155][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.601238][ T4730] loop2: detected capacity change from 0 to 32768 [ 141.619473][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.640487][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.648687][ T4747] /dev/loop4: Can't open blockdev [ 141.662825][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.686963][ T4518] device veth0_vlan entered promiscuous mode [ 142.774341][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.798513][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.828063][ T4665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.898092][ T4518] device veth1_vlan entered promiscuous mode [ 142.917065][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.931077][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.996038][ T4665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.004064][ T4764] loop2: detected capacity change from 0 to 64 [ 143.128552][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.166194][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.369255][ T3731] Bluetooth: hci3: command 0x040f tx timeout [ 143.420177][ T4518] device veth0_macvtap entered promiscuous mode [ 143.715749][ T4665] device hsr_slave_0 entered promiscuous mode [ 143.918503][ T4665] device hsr_slave_1 entered promiscuous mode [ 143.939822][ T4665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.947434][ T4665] Cannot create hsr debugfs directory [ 144.139846][ T4518] device veth1_macvtap entered promiscuous mode [ 144.160554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.182982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.285548][ T4757] loop4: detected capacity change from 0 to 32768 [ 144.300285][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.311587][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.322014][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.333090][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.343163][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.356389][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.366544][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.377950][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.388328][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.399457][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.409681][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.420673][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.431233][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.444235][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.458086][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.470327][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.479470][ T4757] XFS: ikeep mount option is deprecated. [ 144.486460][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.503338][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.521495][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.531752][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.542601][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.553427][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.564284][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.574269][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.584825][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.594740][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.605294][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.615538][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.627951][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.637953][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.648623][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.661152][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.684255][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.694014][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.711848][ T4518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.719178][ T4757] /dev/loop4: Can't open blockdev [ 144.732453][ T4518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.745329][ T4518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.755108][ T4518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.983103][ T4773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.006609][ T4773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.102373][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.129133][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.218690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.227904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.280621][ T2651] device hsr_slave_0 left promiscuous mode [ 145.307035][ T2651] device hsr_slave_1 left promiscuous mode [ 145.322902][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.336806][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.355468][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.370447][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.389576][ T2651] device bridge_slave_1 left promiscuous mode [ 145.395835][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.408527][ T3582] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.450149][ T2651] device bridge_slave_0 left promiscuous mode [ 145.456526][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.468958][ T3732] Bluetooth: hci3: command 0x0419 tx timeout [ 145.507052][ T2651] device veth1_macvtap left promiscuous mode [ 145.516300][ T2651] device veth0_macvtap left promiscuous mode [ 145.528942][ T2651] device veth1_vlan left promiscuous mode [ 145.768909][ T3582] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 145.783580][ T3582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.823158][ T3582] usb 5-1: config 0 descriptor?? [ 145.901845][ T2651] team0 (unregistering): Port device team_slave_1 removed [ 145.922422][ T2651] team0 (unregistering): Port device team_slave_0 removed [ 145.940126][ T2651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.959772][ T2651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.120506][ T3582] kaweth 5-1:0.0: Firmware present in device. [ 146.160176][ T2651] bond0 (unregistering): Released all slaves [ 146.298564][ T3582] kaweth 5-1:0.0: Statistics collection: 0 [ 146.304480][ T3582] kaweth 5-1:0.0: Multicast filter limit: 0 [ 146.328660][ T3582] kaweth 5-1:0.0: MTU: 0 [ 146.332964][ T3582] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 146.508451][ T4811] loop2: detected capacity change from 0 to 512 [ 146.653437][ T4811] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 146.927591][ T4665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.066307][ T4665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.201320][ T4665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.402386][ T4665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.152939][ T4825] sched: RT throttling activated [ 150.119773][ T3582] kaweth 5-1:0.0: Error setting receive filter [ 150.126514][ T3582] kaweth: probe of 5-1:0.0 failed with error -5 [ 150.174345][ T3582] usb 5-1: USB disconnect, device number 4 [ 151.083979][ T4841] loop3: detected capacity change from 0 to 64 [ 151.263208][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.332436][ T4848] loop0: detected capacity change from 0 to 4096 [ 151.380261][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.394989][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.432615][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.470517][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.479601][ T4863] netlink: 104 bytes leftover after parsing attributes in process `syz.3.237'. [ 151.504219][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.514607][ T4848] NILFS (loop0): invalid segment: Checksum error in segment payload [ 151.547570][ T4848] NILFS (loop0): trying rollback from an earlier position [ 151.560281][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.567462][ T4773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.593936][ T4863] loop3: detected capacity change from 0 to 8 [ 151.624578][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.635179][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.644377][ T4848] NILFS (loop0): recovery complete [ 151.653072][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.715666][ T4869] mmap: syz.2.238 (4869) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 151.766087][ T4870] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.794601][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.801794][ T4773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.278028][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.477250][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.486219][ T4863] SQUASHFS error: xz decompression failed, data probably corrupt [ 152.504563][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.700616][ T4863] SQUASHFS error: Failed to read block 0x108: -5 [ 152.707021][ T4863] SQUASHFS error: Unable to read metadata cache entry [106] [ 152.752894][ T4863] SQUASHFS error: Unable to read inode 0x7ff [ 152.776237][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.917588][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 153.929695][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.010317][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.123333][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.132370][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.145168][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.154621][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.166109][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.227934][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.921427][ T4905] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.626429][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.641241][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.672519][ T4905] kvm: pic: non byte read [ 155.677273][ T4905] kvm: pic: non byte read [ 155.721266][ T4665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.744477][ T4905] kvm: pic: non byte read [ 155.802087][ T4905] kvm: pic: non byte read [ 155.922862][ T4905] kvm: pic: non byte read [ 155.944427][ T4665] device veth0_vlan entered promiscuous mode [ 155.959206][ T4905] kvm: pic: non byte read [ 155.964053][ T4905] kvm: pic: non byte read [ 156.025031][ T4929] binder: 4920:4929 ioctl c0306201 0 returned -14 [ 156.083206][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.264455][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.505187][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.609854][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.700558][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.788732][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.812739][ T4932] loop2: detected capacity change from 0 to 512 [ 156.849104][ T4665] device veth1_vlan entered promiscuous mode [ 156.922863][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.951826][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.677545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.972004][ T4665] device veth0_macvtap entered promiscuous mode [ 162.029604][ T4665] device veth1_macvtap entered promiscuous mode [ 162.358642][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.383710][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.327845][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.358482][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.403487][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.458547][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.990771][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.042903][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.083679][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.141122][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.167368][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.187796][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.209130][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.228585][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.285818][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.327905][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.338070][ T3726] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.357945][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.425432][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.435391][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.478041][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.508031][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.523368][ T4977] loop4: detected capacity change from 0 to 256 [ 165.538542][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.572117][ T4977] /dev/loop4: Can't open blockdev [ 165.588178][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.598638][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.609949][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.620323][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.631159][ T4108] Bluetooth: hci7: command 0x0409 tx timeout [ 165.637400][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.648920][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.660448][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.670944][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.681864][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.691939][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.703596][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.715735][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.727909][ T4665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.737173][ T3726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.742085][ T4665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.750681][ T3726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.758202][ T4665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.774595][ T4665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.805110][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.849845][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.868790][ T3726] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.880919][ T3726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.907040][ T3726] usb 3-1: SerialNumber: syz [ 166.120872][ T4981] loop3: detected capacity change from 0 to 256 [ 166.172876][ T4970] netlink: 'syz.2.256': attribute type 12 has an invalid length. [ 166.214219][ T4970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.256'. [ 166.240640][ T4982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 166.266081][ T4681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.284491][ T4981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 166.297248][ T4681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.356266][ T3726] usb 3-1: 0:2 : does not exist [ 166.375436][ T3726] usb 3-1: unit 56 not found! [ 166.380277][ T3726] usb 3-1: unit 52 not found! [ 166.384989][ T3726] usb 3-1: unit 54 not found! [ 166.387446][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.402075][ T3726] usb 3-1: unit 55 not found! [ 166.406831][ T3726] usb 3-1: unit 48 not found! [ 166.417798][ T3726] usb 3-1: unit 51 not found! [ 166.422703][ T3726] usb 3-1: unit 57 not found! [ 166.427419][ T3726] usb 3-1: unit 53 not found! [ 166.432288][ T3726] usb 3-1: unit 49 not found! [ 166.437083][ T3726] usb 3-1: unit 3 not found! [ 166.466541][ T3726] usb 3-1: USB disconnect, device number 3 [ 166.493163][ T4773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.529398][ T4773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.553827][ T3646] udevd[3646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.584618][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.610172][ T2651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.682717][ T4959] chnl_net:caif_netlink_parms(): no params data found [ 166.783007][ T2651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.042143][ T4996] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 168.836770][ T13] Bluetooth: hci7: command 0x041b tx timeout [ 168.976897][ T5002] loop4: detected capacity change from 0 to 256 [ 169.288534][ T2651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.351490][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.378602][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.403165][ T4959] device bridge_slave_0 entered promiscuous mode [ 169.470385][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.477543][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.528116][ T4959] device bridge_slave_1 entered promiscuous mode [ 169.651436][ T2651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.728093][ T5010] xt_TCPMSS: Only works on TCP SYN packets [ 169.940543][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.436996][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.606665][ T5016] loop4: detected capacity change from 0 to 512 [ 170.637791][ T4959] team0: Port device team_slave_0 added [ 170.704624][ T4959] team0: Port device team_slave_1 added [ 170.917380][ T13] Bluetooth: hci7: command 0x040f tx timeout [ 171.848004][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.870503][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.977363][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.030556][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.037546][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.095077][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.127733][ T5006] loop1: detected capacity change from 0 to 32768 [ 172.289130][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.399818][ T4959] device hsr_slave_0 entered promiscuous mode [ 172.421220][ T4959] device hsr_slave_1 entered promiscuous mode [ 172.469182][ T4959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.477014][ T4959] Cannot create hsr debugfs directory [ 172.574307][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 173.439747][ T4161] Bluetooth: hci7: command 0x0419 tx timeout [ 173.485565][ T5015] loop3: detected capacity change from 0 to 32768 [ 173.588858][ T13] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 173.617588][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.653530][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 175.751140][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.761505][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.771966][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.751265][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.778525][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.294270][ T13] usb 3-1: can't set config #16, error -71 [ 178.548126][ T5068] loop3: detected capacity change from 0 to 128 [ 178.807171][ T13] usb 3-1: USB disconnect, device number 4 [ 179.287283][ T5073] loop1: detected capacity change from 0 to 512 [ 179.544227][ T5068] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 179.568662][ T5073] EXT4-fs (loop1): Invalid want_extra_isize 497 [ 181.318537][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 181.324729][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 181.598745][ T3726] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.110880][ T4959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.145846][ T5105] loop3: detected capacity change from 0 to 8192 [ 182.175531][ T4959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.260521][ T4959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.288980][ T4959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.371353][ T5105] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.560214][ T3723] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.269642][ T3726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.536537][ T3726] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.998619][ T3726] usb 5-1: string descriptor 0 read error: -71 [ 185.004884][ T3726] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.014153][ T3723] usb 3-1: unable to read config index 0 descriptor/all [ 185.035933][ T3723] usb 3-1: can't read configurations, error -71 [ 185.146401][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.151411][ T5133] loop4: detected capacity change from 0 to 2048 [ 185.238607][ T3726] usb 5-1: can't set config #1, error -71 [ 185.249286][ T3726] usb 5-1: USB disconnect, device number 5 [ 185.318913][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.393600][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.426999][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.505856][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.522029][ T5144] loop1: detected capacity change from 0 to 512 [ 185.549328][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.579459][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.611864][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.619054][ T4773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.658747][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.759910][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.765400][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 185.778666][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,grpjquota=,,errors=continue. Quota mode: writeback. [ 185.799440][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.857933][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.865126][ T4773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.953456][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.007212][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.054025][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.104933][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.153504][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.183473][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.246809][ T5161] loop2: detected capacity change from 0 to 2048 [ 186.269865][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.291896][ T5165] loop1: detected capacity change from 0 to 64 [ 186.316843][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.342534][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.378621][ T5161] GPT:first_usable_lbas don't match. [ 186.394967][ T5161] GPT:34 != 290 [ 186.407055][ T5161] GPT: Use GNU Parted to correct GPT errors. [ 186.424353][ T5161] loop2: p1 p2 p3 [ 186.548036][ T4959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.607240][ T2651] device hsr_slave_0 left promiscuous mode [ 186.651882][ T2651] device hsr_slave_1 left promiscuous mode [ 187.445015][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.497985][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.609490][ T2651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.617112][ T2651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.644052][ T2651] device bridge_slave_1 left promiscuous mode [ 187.658604][ T2651] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.845299][ T5181] loop4: detected capacity change from 0 to 512 [ 187.898055][ T2651] device bridge_slave_0 left promiscuous mode [ 187.994634][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.741745][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 188.756685][ T3690] udevd[3690]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 188.771870][ T4034] udevd[4034]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 188.816154][ T2651] device veth1_macvtap left promiscuous mode [ 188.868437][ T2651] device veth0_macvtap left promiscuous mode [ 190.004291][ T5195] autofs4:pid:5195:autofs_fill_super: called with bogus options [ 190.016050][ T5195] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 190.213032][ T2651] device veth1_vlan left promiscuous mode [ 190.297816][ T5197] loop4: detected capacity change from 0 to 128 [ 190.317980][ T2651] device veth0_vlan left promiscuous mode [ 193.285027][ T2651] team0 (unregistering): Port device team_slave_1 removed [ 193.572235][ T2651] team0 (unregistering): Port device team_slave_0 removed [ 193.654571][ T2651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.702182][ T5237] loop3: detected capacity change from 0 to 4096 [ 193.721402][ T2651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.857341][ T5237] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 194.276545][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.547451][ T5237] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 195.758156][ T2651] bond0 (unregistering): Released all slaves [ 195.850193][ T5251] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 196.250357][ T4154] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 196.298783][ T4518] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 196.417960][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.428142][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.587127][ T5204] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.599658][ T5204] device syzkaller0 entered promiscuous mode [ 197.829344][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.836984][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.915095][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.970376][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.980765][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.030841][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.061439][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.082764][ T5268] loop4: detected capacity change from 0 to 2048 [ 198.102613][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.113673][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.124235][ T4959] device veth0_vlan entered promiscuous mode [ 199.668707][ T4959] device veth1_vlan entered promiscuous mode [ 200.936519][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.973683][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.038980][ T4959] device veth0_macvtap entered promiscuous mode [ 201.092086][ T4959] device veth1_macvtap entered promiscuous mode [ 201.183409][ T5307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.207773][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.256255][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.300621][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.324139][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.348757][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.368422][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.378292][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.398919][ T5299] loop2: detected capacity change from 0 to 32768 [ 201.438672][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.474823][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.487861][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.506225][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.527148][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.537628][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.558817][ T5299] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 201.631186][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.684199][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.698457][ T26] audit: type=1800 audit(1729133256.188:35): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.320" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 201.720203][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.742471][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.774035][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.800952][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.854031][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.900406][ T3768] ------------[ cut here ]------------ [ 201.924712][ T3768] WARNING: CPU: 0 PID: 3768 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2b5/0x470 [ 201.956514][ T154] ------------[ cut here ]------------ [ 201.971329][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.993873][ T3768] Modules linked in: [ 201.998182][ T154] WARNING: CPU: 0 PID: 154 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2b5/0x470 [ 202.018079][ T3768] CPU: 0 PID: 3768 Comm: kworker/u4:9 Not tainted 5.15.167-syzkaller #0 [ 202.033974][ T5299] [ 202.036342][ T5299] ====================================================== [ 202.043368][ T5299] WARNING: possible circular locking dependency detected [ 202.050483][ T5299] 5.15.167-syzkaller #0 Not tainted [ 202.055684][ T5299] ------------------------------------------------------ [ 202.062705][ T5299] syz.2.320/5299 is trying to acquire lock: [ 202.068596][ T5299] ffff88807be7d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.078402][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.079583][ T5299] [ 202.079583][ T5299] but task is already holding lock: [ 202.079591][ T5299] ffff8880747fa2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 202.098454][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.107297][ T5299] [ 202.107297][ T5299] which lock already depends on the new lock. [ 202.107297][ T5299] [ 202.107305][ T5299] [ 202.107305][ T5299] the existing dependency chain (in reverse order) is: [ 202.107312][ T5299] [ 202.107312][ T5299] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 202.107344][ T5299] lock_acquire+0x1db/0x4f0 [ 202.107366][ T5299] down_read+0x45/0x2e0 [ 202.107386][ T5299] ocfs2_read_virt_blocks+0x2b3/0xa10 [ 202.107409][ T5299] ocfs2_find_entry+0x437/0x26d0 [ 202.107426][ T5299] ocfs2_find_files_on_disk+0xea/0x310 [ 202.107445][ T5299] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 202.107465][ T5299] ocfs2_get_system_file_inode+0x314/0x7b0 [ 202.107491][ T5299] ocfs2_init_global_system_inodes+0x328/0x720 [ 202.107516][ T5299] ocfs2_fill_super+0x479e/0x58a0 [ 202.107538][ T5299] mount_bdev+0x2c9/0x3f0 [ 202.107556][ T5299] legacy_get_tree+0xeb/0x180 [ 202.107576][ T5299] vfs_get_tree+0x88/0x270 [ 202.107593][ T5299] do_new_mount+0x2ba/0xb40 [ 202.107610][ T5299] __se_sys_mount+0x2d5/0x3c0 [ 202.107628][ T5299] do_syscall_64+0x3b/0xb0 [ 202.107647][ T5299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.107672][ T5299] [ 202.107672][ T5299] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 202.107702][ T5299] validate_chain+0x1649/0x5930 [ 202.107722][ T5299] __lock_acquire+0x1295/0x1ff0 [ 202.107740][ T5299] lock_acquire+0x1db/0x4f0 [ 202.107756][ T5299] __mutex_lock_common+0x1da/0x25a0 [ 202.107774][ T5299] mutex_lock_nested+0x17/0x20 [ 202.107792][ T5299] ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.107817][ T5299] ocfs2_reserve_suballoc_bits+0x16b/0x4c70 [ 202.148906][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.151393][ T5299] ocfs2_reserve_clusters_with_limit+0x3d9/0xb50 [ 202.156069][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.161963][ T5299] ocfs2_lock_allocators+0x306/0x620 [ 202.161983][ T5299] ocfs2_write_begin_nolock+0x28e5/0x4d20 [ 202.162005][ T5299] ocfs2_write_begin+0x1fd/0x390 [ 202.162027][ T5299] generic_perform_write+0x2bf/0x5b0 [ 202.162048][ T5299] __generic_file_write_iter+0x243/0x4f0 [ 202.162068][ T5299] ocfs2_file_write_iter+0x17d5/0x1fa0 [ 202.188839][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.192645][ T5299] vfs_write+0xacd/0xe50 [ 202.198228][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.203041][ T5299] ksys_write+0x1a2/0x2c0 [ 202.203062][ T5299] do_syscall_64+0x3b/0xb0 [ 202.203080][ T5299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.203104][ T5299] [ 202.203104][ T5299] other info that might help us debug this: [ 202.203104][ T5299] [ 202.203111][ T5299] Possible unsafe locking scenario: [ 202.203111][ T5299] [ 202.203116][ T5299] CPU0 CPU1 [ 202.203121][ T5299] ---- ---- [ 202.203126][ T5299] lock(&ocfs2_file_ip_alloc_sem_key); [ 202.203142][ T5299] lock(&osb->system_file_mutex); [ 202.203157][ T5299] lock(&ocfs2_file_ip_alloc_sem_key); [ 202.203172][ T5299] lock(&osb->system_file_mutex); [ 202.203186][ T5299] [ 202.203186][ T5299] *** DEADLOCK *** [ 202.203186][ T5299] [ 202.203191][ T5299] 4 locks held by syz.2.320/5299: [ 202.203203][ T5299] #0: ffff88807816f770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 202.203258][ T5299] #1: ffff888079162460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 202.203319][ T5299] #2: ffff8880747fa648 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x446/0x1fa0 [ 202.203383][ T5299] #3: ffff8880747fa2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 202.203439][ T5299] [ 202.203439][ T5299] stack backtrace: [ 202.203446][ T5299] CPU: 0 PID: 5299 Comm: syz.2.320 Not tainted 5.15.167-syzkaller #0 [ 202.203467][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.228394][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.228991][ T5299] Call Trace: [ 202.229001][ T5299] [ 202.235407][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.244052][ T5299] dump_stack_lvl+0x1e3/0x2d0 [ 202.244081][ T5299] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 202.244108][ T5299] ? print_circular_bug+0x12b/0x1a0 [ 202.244132][ T5299] check_noncircular+0x2f8/0x3b0 [ 202.250354][ T154] Modules linked in: [ 202.254875][ T5299] ? add_chain_block+0x850/0x850 [ 202.268426][ T154] [ 202.270938][ T5299] ? lockdep_lock+0x11f/0x2a0 [ 202.270966][ T5299] ? __lock_acquire+0x1295/0x1ff0 [ 202.288403][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted 5.15.167-syzkaller #0 [ 202.293491][ T5299] validate_chain+0x1649/0x5930 [ 202.302147][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.310736][ T5299] ? check_path+0x40/0x40 [ 202.310767][ T5299] ? rcu_is_watching+0x11/0xa0 [ 202.310788][ T5299] ? reacquire_held_locks+0x660/0x660 [ 202.310809][ T5299] ? rcu_is_watching+0x11/0xa0 [ 202.310829][ T5299] ? lock_release+0xb9/0x9a0 [ 202.310846][ T5299] ? read_lock_is_recursive+0x10/0x10 [ 202.310864][ T5299] ? check_noncircular+0x1e1/0x3b0 [ 202.310887][ T5299] ? __lock_acquire+0x1ff0/0x1ff0 [ 202.310907][ T5299] ? hlock_conflict+0x53/0x1f0 [ 202.310928][ T5299] ? __bfs+0x359/0x6e0 [ 202.310948][ T5299] ? mark_lock+0x98/0x340 [ 202.310968][ T5299] __lock_acquire+0x1295/0x1ff0 [ 202.310997][ T5299] lock_acquire+0x1db/0x4f0 [ 202.311016][ T5299] ? ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.311045][ T5299] ? read_lock_is_recursive+0x10/0x10 [ 202.311068][ T5299] ? __might_sleep+0xc0/0xc0 [ 202.311089][ T5299] ? deref_stack_reg+0xbe/0x110 [ 202.311113][ T5299] ? validate_chain+0x112/0x5930 [ 202.311137][ T5299] __mutex_lock_common+0x1da/0x25a0 [ 202.311160][ T5299] ? ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.311188][ T5299] ? hlock_conflict+0x53/0x1f0 [ 202.311210][ T5299] ? __bfs+0x359/0x6e0 [ 202.311228][ T5299] ? ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.311255][ T5299] ? mutex_lock_io_nested+0x60/0x60 [ 202.311280][ T5299] ? __lock_acquire+0x1295/0x1ff0 [ 202.330043][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.334570][ T5299] mutex_lock_nested+0x17/0x20 [ 202.341113][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.346692][ T5299] ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 202.361975][ T154] Workqueue: phy22 ieee80211_csa_finalize_work [ 202.371642][ T5299] ? ocfs2_fast_symlink_readpage+0x420/0x420 [ 202.371675][ T5299] ? lockdep_unlock+0x166/0x300 [ 202.371694][ T5299] ? lockdep_lock+0x2a0/0x2a0 [ 202.371710][ T5299] ? __lock_acquire+0x1295/0x1ff0 [ 202.371732][ T5299] ? validate_chain+0x13bd/0x5930 [ 202.371755][ T5299] ocfs2_reserve_suballoc_bits+0x16b/0x4c70 [ 202.388409][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.398343][ T5299] ? reacquire_held_locks+0x660/0x660 [ 202.398376][ T5299] ? do_raw_spin_unlock+0x137/0x8b0 [ 202.398402][ T5299] ? ocfs2_block_group_search+0x490/0x490 [ 202.398427][ T5299] ? stack_trace_save+0x113/0x1c0 [ 202.409143][ T154] [ 202.411247][ T5299] ? mark_lock+0x98/0x340 [ 202.411276][ T5299] ? __lock_acquire+0x1295/0x1ff0 [ 202.411310][ T5299] ? read_lock_is_recursive+0x10/0x10 [ 202.411337][ T5299] ? ocfs2_alloc_should_use_local+0x13a/0x2e0 [ 202.411361][ T5299] ? __lock_acquire+0x1ff0/0x1ff0 [ 202.411380][ T5299] ? do_raw_spin_lock+0x14a/0x370 [ 202.428407][ T154] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 202.429959][ T5299] ? do_raw_spin_unlock+0x137/0x8b0 [ 202.438184][ T154] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 202.443284][ T5299] ? _raw_spin_unlock+0x24/0x40 [ 202.443315][ T5299] ? ocfs2_alloc_should_use_local+0x13a/0x2e0 [ 202.443339][ T5299] ocfs2_reserve_clusters_with_limit+0x3d9/0xb50 [ 202.443367][ T5299] ? mark_lock+0x98/0x340 [ 202.453854][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.456687][ T5299] ? ocfs2_reserve_clusters+0x30/0x30 [ 202.500796][ T154] RSP: 0018:ffffc90001ed7be8 EFLAGS: 00010293 [ 202.503331][ T5299] ? __lock_acquire+0x1295/0x1ff0 [ 202.513662][ T4959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.521448][ T5299] ? rcu_is_watching+0x11/0xa0 [ 202.521478][ T5299] ? ocfs2_num_free_extents+0x365/0x680 [ 202.521502][ T5299] ? ocfs2_validate_extent_block+0x580/0x580 [ 202.521529][ T5299] ocfs2_lock_allocators+0x306/0x620 [ 202.521554][ T5299] ? _ocfs2_clear_bit+0x40/0x40 [ 202.521580][ T5299] ? ocfs2_write_begin_nolock+0x1147/0x4d20 [ 202.521605][ T5299] ? rcu_is_watching+0x11/0xa0 [ 202.521623][ T5299] ? ocfs2_write_begin_nolock+0x1147/0x4d20 [ 202.521646][ T5299] ? kfree+0x4a/0x270 [ 202.548447][ T154] [ 202.552859][ T5299] ? ocfs2_write_begin_nolock+0x423/0x4d20 [ 202.568526][ T4959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.569326][ T5299] ocfs2_write_begin_nolock+0x28e5/0x4d20 [ 202.573222][ T4959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.578200][ T5299] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 202.581275][ T154] RAX: ffffffff89a8c8b5 RBX: ffff888057354c90 RCX: ffff88801dd3d940 [ 202.585236][ T5299] ? ocfs2_inode_lock_full_nested+0x177/0x1bf0 [ 202.612001][ T154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.613304][ T5299] ? ocfs2_read_inode_block+0x148/0x1d0 [ 202.613345][ T5299] ? ocfs2_allocate_extend_trans+0x620/0x620 [ 202.613379][ T5299] ? read_lock_is_recursive+0x10/0x10 [ 202.613403][ T5299] ? rwsem_write_trylock+0x166/0x210 [ 202.613429][ T5299] ? clear_nonspinnable+0x60/0x60 [ 202.613459][ T5299] ocfs2_write_begin+0x1fd/0x390 [ 202.613491][ T5299] ? ocfs2_readahead+0x1a0/0x1a0 [ 202.613514][ T5299] ? __vfs_getxattr+0x3e0/0x410 [ 202.613539][ T5299] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 202.613568][ T5299] generic_perform_write+0x2bf/0x5b0 [ 202.613600][ T5299] ? grab_cache_page_write_begin+0x90/0x90 [ 202.613625][ T5299] ? file_remove_privs+0x610/0x610 [ 202.613648][ T5299] ? do_raw_spin_unlock+0x137/0x8b0 [ 202.613673][ T5299] __generic_file_write_iter+0x243/0x4f0 [ 202.613699][ T5299] ? ocfs2_inode_unlock+0x122/0x150 [ 202.613724][ T5299] ocfs2_file_write_iter+0x17d5/0x1fa0 [ 202.613759][ T5299] ? ocfs2_file_read_iter+0xae0/0xae0 [ 202.613790][ T5299] ? read_lock_is_recursive+0x10/0x10 [ 202.620595][ T4959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.622995][ T5299] ? rcu_read_lock_any_held+0xb3/0x160 [ 202.632436][ T154] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 202.633113][ T5299] ? rcu_read_lock_bh_held+0x110/0x110 [ 202.637781][ T154] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880597e85c0 [ 202.643137][ T5299] ? end_current_label_crit_section+0x147/0x170 [ 202.643167][ T5299] ? iov_iter_init+0x4a/0x170 [ 202.643190][ T5299] vfs_write+0xacd/0xe50 [ 202.643217][ T5299] ? file_end_write+0x250/0x250 [ 202.674753][ T154] R13: dffffc0000000000 R14: ffff888057354cd8 R15: ffff8880573556c0 [ 202.675992][ T5299] ? __fget_files+0x413/0x480 [ 202.691990][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 202.696884][ T5299] ? mutex_lock_nested+0x17/0x20 [ 202.716743][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.717899][ T5299] ? __fdget_pos+0x2cb/0x380 [ 202.731965][ T154] CR2: 0000001b32ff7ff8 CR3: 00000000287c4000 CR4: 00000000003506e0 [ 202.733152][ T5299] ? ksys_write+0x77/0x2c0 [ 202.738216][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.748370][ T5299] ksys_write+0x1a2/0x2c0 [ 202.748404][ T5299] ? print_irqtrace_events+0x210/0x210 [ 202.748427][ T5299] ? __ia32_sys_read+0x80/0x80 [ 202.748449][ T5299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 202.748473][ T5299] ? lockdep_hardirqs_on+0x94/0x130 [ 202.748496][ T5299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 202.748521][ T5299] do_syscall_64+0x3b/0xb0 [ 202.748542][ T5299] ? clear_bhb_loop+0x15/0x70 [ 202.748562][ T5299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.748588][ T5299] RIP: 0033:0x7f7f3fb6cff9 [ 202.748608][ T5299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.778427][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.781694][ T5299] RSP: 002b:00007f7f3dfe5038 EFLAGS: 00000246 [ 202.786667][ T154] Call Trace: [ 202.791318][ T5299] ORIG_RAX: 0000000000000001 [ 202.791335][ T5299] RAX: ffffffffffffffda RBX: 00007f7f3fd24f80 RCX: 00007f7f3fb6cff9 [ 202.791352][ T5299] RDX: 000000000000fea7 RSI: 0000000020000200 RDI: 0000000000000007 [ 202.791364][ T5299] RBP: 00007f7f3fbdf296 R08: 0000000000000000 R09: 0000000000000000 [ 202.791377][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.791391][ T5299] R13: 0000000000000000 R14: 00007f7f3fd24f80 R15: 00007ffff3625ce8 [ 202.791413][ T5299] [ 202.893388][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.915235][ T154] [ 202.942779][ T3768] Workqueue: phy21 ieee80211_csa_finalize_work [ 202.946254][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.952946][ T3768] [ 202.967576][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.971875][ T3768] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 202.984262][ T154] ? __warn+0x15b/0x300 [ 203.012696][ T3768] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 203.019728][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.287384][ T3573] ocfs2: Unmounting device (7,2) on (node local) [ 203.325803][ T3768] RSP: 0018:ffffc9000338fbe8 EFLAGS: 00010293 [ 203.354059][ T154] ? report_bug+0x1b7/0x2e0 [ 203.369052][ T3768] [ 203.370687][ T154] ? handle_bug+0x3d/0x70 [ 203.375416][ T3768] RAX: ffffffff89a8c8b5 RBX: ffff88805db10c90 RCX: ffff88807dfa8000 [ 203.384908][ T154] ? exc_invalid_op+0x16/0x40 [ 203.490464][ T4959] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 203.515236][ T154] ? asm_exc_invalid_op+0x16/0x20 [ 203.541870][ T3768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.573895][ T3768] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 203.596716][ T3768] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888062cf05c0 [ 203.617347][ T4959] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 203.618805][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.652361][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.658460][ T3768] R13: dffffc0000000000 R14: ffff88805db10cd8 R15: ffff88805db116c0 [ 203.660978][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.668474][ T3768] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 203.677148][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.692820][ T154] ? cfg80211_ch_switch_notify+0xab/0x470 [ 203.693451][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.707527][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.716922][ T3768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.723721][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.738997][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.755236][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.772290][ T154] ieee80211_csa_finalize_work+0xf8/0x140 [ 203.782024][ T3768] CR2: 00007f50ec4ccab8 CR3: 000000006418e000 CR4: 00000000003506e0 [ 203.790557][ T154] process_one_work+0x8a1/0x10c0 [ 203.793619][ T3768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.795669][ T154] ? worker_detach_from_pool+0x260/0x260 [ 203.804125][ T3768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.813592][ T154] ? _raw_spin_lock_irqsave+0x120/0x120 [ 203.818194][ T3768] Call Trace: [ 203.824223][ T154] ? kthread_data+0x4e/0xc0 [ 203.827161][ T3768] [ 203.832557][ T154] ? wq_worker_running+0x97/0x170 [ 203.837993][ T3768] ? __warn+0x15b/0x300 [ 203.839778][ T154] worker_thread+0xaca/0x1280 [ 203.839818][ T154] kthread+0x3f6/0x4f0 [ 203.839838][ T154] ? rcu_lock_release+0x20/0x20 [ 203.839861][ T154] ? kthread_blkcg+0xd0/0xd0 [ 203.839882][ T154] ret_from_fork+0x1f/0x30 [ 203.839920][ T154] [ 203.839945][ T154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.847555][ T3768] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.848738][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted 5.15.167-syzkaller #0 [ 203.848761][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.848775][ T154] Workqueue: phy22 ieee80211_csa_finalize_work [ 203.852833][ T3768] ? report_bug+0x1b7/0x2e0 [ 203.857666][ T154] [ 203.857674][ T154] Call Trace: [ 203.862291][ T3768] ? handle_bug+0x3d/0x70 [ 203.866776][ T154] [ 203.869822][ T3768] ? exc_invalid_op+0x16/0x40 [ 203.877069][ T154] dump_stack_lvl+0x1e3/0x2d0 [ 203.882987][ T3768] ? asm_exc_invalid_op+0x16/0x20 [ 203.891388][ T154] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 203.910117][ T3768] ? cfg80211_ch_switch_notify+0xab/0x470 [ 203.912261][ T154] ? panic+0x860/0x860 [ 203.914583][ T3768] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.917859][ T154] ? panic+0x860/0x860 [ 203.922660][ T3768] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.925115][ T154] ? cfg80211_ch_switch_notify+0x200/0x470 [ 203.930085][ T3768] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.934445][ T154] ? cfg80211_ch_switch_notify+0x200/0x470 [ 203.939760][ T3768] ieee80211_csa_finalize_work+0xf8/0x140 [ 203.945088][ T154] panic+0x318/0x860 [ 203.945115][ T154] ? __warn+0x16a/0x300 [ 203.945135][ T154] ? fb_is_primary_device+0xd0/0xd0 [ 203.945162][ T154] ? ret_from_fork+0x1f/0x30 [ 203.945185][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.945206][ T154] __warn+0x2b2/0x300 [ 203.945228][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.945248][ T154] report_bug+0x1b7/0x2e0 [ 203.945276][ T154] handle_bug+0x3d/0x70 [ 203.945296][ T154] exc_invalid_op+0x16/0x40 [ 203.945317][ T154] asm_exc_invalid_op+0x16/0x20 [ 203.945341][ T154] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.945365][ T154] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 203.945383][ T154] RSP: 0018:ffffc90001ed7be8 EFLAGS: 00010293 [ 203.945401][ T154] RAX: ffffffff89a8c8b5 RBX: ffff888057354c90 RCX: ffff88801dd3d940 [ 203.945418][ T154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.945430][ T154] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 203.945445][ T154] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880597e85c0 [ 203.945460][ T154] R13: dffffc0000000000 R14: ffff888057354cd8 R15: ffff8880573556c0 [ 203.945479][ T154] ? cfg80211_ch_switch_notify+0xab/0x470 [ 203.945500][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.945524][ T154] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 203.945546][ T154] ieee80211_csa_finalize_work+0xf8/0x140 [ 203.945570][ T154] process_one_work+0x8a1/0x10c0 [ 203.945601][ T154] ? worker_detach_from_pool+0x260/0x260 [ 203.945625][ T154] ? _raw_spin_lock_irqsave+0x120/0x120 [ 203.945648][ T154] ? kthread_data+0x4e/0xc0 [ 203.945668][ T154] ? wq_worker_running+0x97/0x170 [ 203.945689][ T154] worker_thread+0xaca/0x1280 [ 203.945723][ T154] kthread+0x3f6/0x4f0 [ 203.945742][ T154] ? rcu_lock_release+0x20/0x20 [ 203.945763][ T154] ? kthread_blkcg+0xd0/0xd0 [ 203.945784][ T154] ret_from_fork+0x1f/0x30 [ 203.945811][ T154] [ 203.946063][ T154] Kernel Offset: disabled [ 204.197023][ T154] Rebooting in 86400 seconds..