last executing test programs: 6.570455929s ago: executing program 1 (id=452): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x11, 0xff, 0xf}, 0x2c) 6.57003455s ago: executing program 0 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140) 6.287825272s ago: executing program 0 (id=455): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[], 0xfd, 0x6028, &(0x7f000000c6c0)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43) 6.222414807s ago: executing program 1 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) 6.05746737s ago: executing program 2 (id=458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) 4.913371173s ago: executing program 2 (id=459): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCMSET(r0, 0x5418, 0xfffffffffffffffc) 4.681832522s ago: executing program 1 (id=460): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4092, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x54}, 0x28) 4.252626086s ago: executing program 1 (id=461): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r0) tkill(r1, 0xb) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6ffffffa, 0x0, 0x0, 0x201, 0x12, 0x0, 0x7}) 3.853216769s ago: executing program 3 (id=464): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}, {&(0x7f0000004480)="d2", 0x1}], 0x2) 3.71716551s ago: executing program 2 (id=465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140) 3.522450755s ago: executing program 0 (id=466): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0xa, 0xcc9, 0xf, 0x7, 0x5, 0x0, 0xefd, 0x1, 0x6, 0x1, 0x6, 0x101, 0x9, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe6a, 0x3c, 0x8, 0x5, 0x0, 0xfffff7f8]}) 3.508781217s ago: executing program 3 (id=467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) 3.507992547s ago: executing program 2 (id=468): rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') 3.481432518s ago: executing program 0 (id=469): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4092, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x54}, 0x28) 3.373003067s ago: executing program 2 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) 3.062236182s ago: executing program 0 (id=471): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.813008593s ago: executing program 3 (id=472): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x20102, 0x0) 2.735492159s ago: executing program 1 (id=473): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCMSET(r0, 0x5418, 0xfffffffffffffffc) 2.734468549s ago: executing program 0 (id=474): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[], 0xfd, 0x6028, &(0x7f000000c6c0)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43) 2.626342357s ago: executing program 3 (id=475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}, {&(0x7f0000004480)="d2", 0x1}], 0x2) 2.284764585s ago: executing program 3 (id=476): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) listen(0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 2.045305074s ago: executing program 2 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140) 110.638621ms ago: executing program 1 (id=478): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 0s ago: executing program 3 (id=479): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4092, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x54}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 79.538441][ T5773] cgroup: Unknown subsys name 'net' [ 79.703153][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.373673][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.297340][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.305505][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.313795][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.313800][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.328956][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.329214][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.337869][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.350367][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.352358][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.359081][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.366497][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.372773][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.379583][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.386647][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.401402][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.408713][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.411816][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.426098][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.444564][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.452242][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.464619][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.468315][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.480432][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.492420][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.930365][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 83.958776][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.138245][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 84.160101][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.167715][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.175858][ T5783] bridge_slave_0: entered allmulticast mode [ 84.183102][ T5783] bridge_slave_0: entered promiscuous mode [ 84.228349][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.235802][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.243204][ T5783] bridge_slave_1: entered allmulticast mode [ 84.250249][ T5783] bridge_slave_1: entered promiscuous mode [ 84.258732][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.266062][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.273270][ T5782] bridge_slave_0: entered allmulticast mode [ 84.280570][ T5782] bridge_slave_0: entered promiscuous mode [ 84.293978][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.301262][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.308611][ T5782] bridge_slave_1: entered allmulticast mode [ 84.315894][ T5782] bridge_slave_1: entered promiscuous mode [ 84.414797][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.443930][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.468460][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.509900][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.550374][ T5783] team0: Port device team_slave_0 added [ 84.560338][ T5783] team0: Port device team_slave_1 added [ 84.601100][ T5782] team0: Port device team_slave_0 added [ 84.608196][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.615928][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.623149][ T5789] bridge_slave_0: entered allmulticast mode [ 84.630995][ T5789] bridge_slave_0: entered promiscuous mode [ 84.659068][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.666245][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.692345][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.708457][ T5782] team0: Port device team_slave_1 added [ 84.714822][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.722020][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.729416][ T5789] bridge_slave_1: entered allmulticast mode [ 84.736510][ T5789] bridge_slave_1: entered promiscuous mode [ 84.743375][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.762462][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.769541][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.796181][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.861953][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.919236][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.941394][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.949128][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.975228][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.988242][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.995293][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.021897][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.088828][ T5783] hsr_slave_0: entered promiscuous mode [ 85.096669][ T5783] hsr_slave_1: entered promiscuous mode [ 85.122022][ T5789] team0: Port device team_slave_0 added [ 85.130911][ T5789] team0: Port device team_slave_1 added [ 85.189261][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.196629][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.204036][ T5784] bridge_slave_0: entered allmulticast mode [ 85.211292][ T5784] bridge_slave_0: entered promiscuous mode [ 85.231254][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.239142][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.266214][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.279386][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.286463][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.312456][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.341045][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.348614][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.355962][ T5784] bridge_slave_1: entered allmulticast mode [ 85.363017][ T5784] bridge_slave_1: entered promiscuous mode [ 85.373889][ T5782] hsr_slave_0: entered promiscuous mode [ 85.381072][ T5782] hsr_slave_1: entered promiscuous mode [ 85.388004][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.396065][ T5782] Cannot create hsr debugfs directory [ 85.485406][ T5795] Bluetooth: hci0: command tx timeout [ 85.523562][ T5789] hsr_slave_0: entered promiscuous mode [ 85.531088][ T5789] hsr_slave_1: entered promiscuous mode [ 85.537426][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.545983][ T5789] Cannot create hsr debugfs directory [ 85.554051][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.568924][ T5795] Bluetooth: hci3: command tx timeout [ 85.569666][ T50] Bluetooth: hci2: command tx timeout [ 85.580943][ T5101] Bluetooth: hci1: command tx timeout [ 85.601076][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.706089][ T5784] team0: Port device team_slave_0 added [ 85.755432][ T5784] team0: Port device team_slave_1 added [ 85.874189][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.881197][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.908350][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.920989][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.928067][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.954912][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.066301][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.079090][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.090588][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.120143][ T5784] hsr_slave_0: entered promiscuous mode [ 86.130323][ T5784] hsr_slave_1: entered promiscuous mode [ 86.136766][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.144716][ T5784] Cannot create hsr debugfs directory [ 86.164261][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.281623][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.316951][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.327571][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.338633][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.441173][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.453610][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.489516][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.500881][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.581467][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.607378][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.619410][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.630558][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.742646][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.800384][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.849023][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.860065][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.867668][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.880055][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.887279][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.928900][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.959933][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.000806][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.010669][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.018004][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.028967][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.036225][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.055512][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.133074][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.140305][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.160834][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.168092][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.207656][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.270920][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.278161][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.290340][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.297572][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.502904][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.565516][ T5101] Bluetooth: hci0: command tx timeout [ 87.644670][ T5101] Bluetooth: hci2: command tx timeout [ 87.645059][ T50] Bluetooth: hci3: command tx timeout [ 87.650131][ T5101] Bluetooth: hci1: command tx timeout [ 87.922018][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.162318][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.189677][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.198096][ T5783] veth0_vlan: entered promiscuous mode [ 88.225973][ T5783] veth1_vlan: entered promiscuous mode [ 88.307267][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.398320][ T5783] veth0_macvtap: entered promiscuous mode [ 88.446296][ T5783] veth1_macvtap: entered promiscuous mode [ 88.459377][ T5789] veth0_vlan: entered promiscuous mode [ 88.492417][ T5782] veth0_vlan: entered promiscuous mode [ 88.506146][ T5784] veth0_vlan: entered promiscuous mode [ 88.515653][ T5789] veth1_vlan: entered promiscuous mode [ 88.542894][ T5784] veth1_vlan: entered promiscuous mode [ 88.559779][ T5782] veth1_vlan: entered promiscuous mode [ 88.622751][ T5784] veth0_macvtap: entered promiscuous mode [ 88.647396][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.660477][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.670750][ T5784] veth1_macvtap: entered promiscuous mode [ 88.698173][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.707885][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.716728][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.726690][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.741716][ T5789] veth0_macvtap: entered promiscuous mode [ 88.761907][ T5789] veth1_macvtap: entered promiscuous mode [ 88.783702][ T5782] veth0_macvtap: entered promiscuous mode [ 88.800574][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.811936][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.825623][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.841263][ T5782] veth1_macvtap: entered promiscuous mode [ 88.871935][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.882587][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.896615][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.912578][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.923536][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.935969][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.946836][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.960289][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.968924][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.979736][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.989734][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.000508][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.010668][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.021906][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.033594][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.051300][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.062462][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.072984][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.083831][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.098956][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.113559][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.124695][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.135886][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.146684][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.156607][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.167774][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.179997][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.190780][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.201064][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.211101][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219942][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233271][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243009][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.252597][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261577][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.291211][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301795][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.310905][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.319942][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.460101][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.475781][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.528035][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553439][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.583519][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.607267][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.630464][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.638776][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.646392][ T5101] Bluetooth: hci0: command tx timeout [ 89.724671][ T5101] Bluetooth: hci1: command tx timeout [ 89.725187][ T5795] Bluetooth: hci3: command tx timeout [ 89.730121][ T5101] Bluetooth: hci2: command tx timeout [ 89.747011][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.768920][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.831521][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.881832][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.889536][ T5877] syz.0.1[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.899711][ T5877] loop0: detected capacity change from 0 to 512 [ 89.920313][ T5877] ======================================================= [ 89.920313][ T5877] WARNING: The mand mount option has been deprecated and [ 89.920313][ T5877] and is ignored by this kernel. Remove the mand [ 89.920313][ T5877] option from the mount to silence this warning. [ 89.920313][ T5877] ======================================================= [ 89.963550][ T5877] EXT4-fs: Ignoring removed bh option [ 89.999916][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.020146][ T5877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.020955][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.048211][ T5877] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 90.074819][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.089959][ T5877] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.126888][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.130535][ T5877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.141914][ T5877] EXT4-fs error (device loop0): ext4_quota_enable:7125: comm syz.0.1: Bad quota inum: 4294967291, type: 0 [ 90.165947][ T5877] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 90.185824][ T5877] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 90.194825][ T5877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.438397][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.603383][ T5883] loop3: detected capacity change from 0 to 4096 [ 90.678739][ T5883] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 90.751504][ T5887] loop0: detected capacity change from 0 to 64 [ 91.050447][ T5890] syz.1.2: attempt to access beyond end of device [ 91.050447][ T5890] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 91.064447][ T5890] efs: cannot read volume header [ 91.367080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.376052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.664479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.674520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.760169][ T5795] Bluetooth: hci0: command tx timeout [ 91.804788][ T5795] Bluetooth: hci3: command tx timeout [ 91.810296][ T5795] Bluetooth: hci2: command tx timeout [ 91.813148][ T50] Bluetooth: hci1: command tx timeout [ 91.964490][ T5883] ntfs3: loop3: ino=5, "/" directory corrupted [ 91.971223][ T5883] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.001888][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.059439][ T5883] ntfs3: loop3: ino=5, "/" directory corrupted [ 92.928209][ T5881] loop2: detected capacity change from 0 to 32768 [ 92.969760][ T5881] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (5881) [ 93.000013][ T8] cfg80211: failed to load regulatory.db [ 93.013202][ T5783] hfs: walked past end of dir [ 93.041002][ T5881] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.071902][ T5881] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 93.085926][ T5881] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 93.098035][ T5881] BTRFS info (device loop2): use lzo compression, level 0 [ 93.106053][ T5881] BTRFS info (device loop2): using free space tree [ 93.232736][ T5912] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 93.283093][ T5915] loop0: detected capacity change from 0 to 2048 [ 93.336925][ T5915] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.373645][ T5881] BTRFS error (device loop2): open_ctree failed: -4 [ 93.413688][ T5915] NILFS (loop0): mounting unchecked fs [ 93.423446][ T5786] udevd[5786]: incorrect nilfs2 checksum on /dev/loop0 [ 93.477619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.506899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 93.519934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 93.884890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.914533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.964707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.035013][ T5915] NILFS (loop0): recovery complete [ 94.347285][ T5924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.587874][ T5933] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.840045][ T5953] loop3: detected capacity change from 0 to 64 [ 98.188669][ T5956] loop2: detected capacity change from 0 to 4096 [ 98.215499][ T5956] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 99.039320][ T5956] ntfs3: loop2: ino=5, "/" directory corrupted [ 99.074889][ T5956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 99.149878][ T5956] ntfs3: loop2: ino=5, "/" directory corrupted [ 99.179514][ T5784] hfs: walked past end of dir [ 100.913961][ T5975] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 102.662306][ T5986] overlayfs: failed to resolve './file0': -2 [ 103.744968][ T5987] loop1: detected capacity change from 0 to 32768 [ 103.954969][ T5987] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.219760][ T6002] overlay: ./file1 is not a directory [ 104.772034][ T5996] loop3: detected capacity change from 0 to 40427 [ 104.856172][ T5996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.996349][ T5996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.073144][ T28] audit: type=1800 audit(1756145237.272:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 105.205939][ T5784] syz-executor: attempt to access beyond end of device [ 105.205939][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.264188][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.680340][ T6013] loop0: detected capacity change from 0 to 32768 [ 105.729186][ T6013] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (6013) [ 105.821698][ T6013] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 105.869531][ T6013] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 105.933058][ T6013] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 105.963547][ T6013] BTRFS info (device loop0): use lzo compression, level 0 [ 105.998192][ T6013] BTRFS info (device loop0): using free space tree [ 107.084501][ T6013] BTRFS info (device loop0): enabling ssd optimizations [ 107.100450][ T6013] BTRFS info (device loop0): auto enabling async discard [ 107.243597][ T6035] loop1: detected capacity change from 0 to 4096 [ 107.425778][ T28] audit: type=1800 audit(1756145239.632:3): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.34" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 107.446119][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.466498][ T6042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.581346][ T28] audit: type=1800 audit(1756145239.782:4): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.34" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 108.600487][ T28] audit: type=1326 audit(1756145240.782:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.083013][ T28] audit: type=1326 audit(1756145240.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.182077][ T28] audit: type=1326 audit(1756145240.782:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.251466][ T28] audit: type=1326 audit(1756145240.782:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.306736][ T28] audit: type=1326 audit(1756145240.782:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.328695][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.338496][ T28] audit: type=1326 audit(1756145240.782:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.360542][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.373562][ T28] audit: type=1326 audit(1756145240.782:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7db8ebe9 code=0x7ffc0000 [ 109.395654][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.433874][ T5783] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 110.111364][ T6071] loop1: detected capacity change from 0 to 512 [ 110.144327][ T6071] EXT4-fs: Mount option(s) incompatible with ext3 [ 110.765317][ T6066] loop2: detected capacity change from 0 to 32768 [ 110.841416][ T6066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.884869][ T54] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.968334][ T6080] overlay: ./file1 is not a directory [ 111.109928][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.154694][ T54] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.180951][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.218105][ T54] usb 1-1: config 0 descriptor?? [ 111.241249][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 111.267629][ T6077] loop1: detected capacity change from 0 to 32768 [ 111.358785][ T6077] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.648833][ T54] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.665331][ T54] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.937246][ T6079] loop0: detected capacity change from 0 to 128 [ 111.951017][ T6079] ufs: You didn't specify the type of your ufs filesystem [ 111.951017][ T6079] [ 111.951017][ T6079] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 111.951017][ T6079] [ 111.951017][ T6079] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 111.988679][ T6079] ufs: ufstype=old is supported read-only [ 112.014458][ T6079] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 112.053154][ T54] pwc: recv_control_msg error -71 req 04 val 1000 [ 112.078139][ T54] pwc: recv_control_msg error -71 req 04 val 1300 [ 112.124858][ T54] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.154574][ T54] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.163388][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 112.191161][ T54] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.201412][ T54] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.238265][ T54] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.258662][ T54] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.274202][ T54] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.301155][ T54] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.324688][ T54] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.342490][ T54] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.360115][ T54] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.391919][ T54] pwc: Registered as video103. [ 112.424172][ T54] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 112.444549][ T6091] loop2: detected capacity change from 0 to 4096 [ 112.485589][ T6091] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 112.511985][ T54] usb 1-1: USB disconnect, device number 2 [ 112.619778][ T6091] ntfs3: loop2: ino=5, "/" directory corrupted [ 112.655583][ T6091] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 112.677074][ T6091] ntfs3: loop2: ino=5, "/" directory corrupted [ 113.059138][ T6098] loop0: detected capacity change from 0 to 1024 [ 113.065393][ T6089] loop3: detected capacity change from 0 to 32768 [ 113.206041][ T6089] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.53 (6089) [ 113.557210][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.837229][ T6089] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.876015][ T6089] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 113.894696][ T6089] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.912229][ T6089] BTRFS info (device loop3): use lzo compression, level 0 [ 113.922358][ T6089] BTRFS info (device loop3): using free space tree [ 113.977031][ T6098] loop0: detected capacity change from 1024 to 127 [ 114.042400][ T6110] loop1: detected capacity change from 0 to 2048 [ 114.053308][ T6089] BTRFS info (device loop3): enabling ssd optimizations [ 114.067222][ T6089] BTRFS info (device loop3): auto enabling async discard [ 114.085860][ T6110] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.095837][ T6110] NILFS (loop1): mounting unchecked fs [ 114.149435][ T6110] NILFS (loop1): recovery complete [ 114.183676][ T6129] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.368931][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 114.368948][ T28] audit: type=1800 audit(1756145246.562:50): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 114.482619][ T28] audit: type=1800 audit(1756145246.682:51): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 114.851853][ T5784] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.012899][ T6098] syz.0.55: attempt to access beyond end of device [ 115.012899][ T6098] loop0: rw=2051, sector=224, nr_sectors = 800 limit=127 [ 115.160518][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.216434][ T6104] kmmpd-loop0: attempt to access beyond end of device [ 115.216434][ T6104] loop0: rw=14337, sector=128, nr_sectors = 2 limit=127 [ 115.290234][ T6104] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 115.563398][ T6143] loop1: detected capacity change from 0 to 4096 [ 115.583125][ T6143] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 115.709625][ T6143] ntfs3: loop1: ino=5, "/" directory corrupted [ 115.730409][ T6143] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 115.757994][ T6143] ntfs3: loop1: ino=5, "/" directory corrupted [ 116.308282][ T6141] loop3: detected capacity change from 0 to 32768 [ 116.428650][ T6141] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.433516][ T6149] befs: (nullb0): invalid magic header [ 116.540041][ T6149] loop1: detected capacity change from 0 to 128 [ 116.551009][ T6149] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.703834][ T6145] loop0: detected capacity change from 0 to 32768 [ 116.739997][ T6141] XFS (loop3): Ending clean mount [ 116.828865][ T6149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.892431][ T6141] XFS (loop3): Quotacheck needed: Please wait. [ 116.903621][ T6145] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.974751][ T6149] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.043172][ T6161] overlay: ./file1 is not a directory [ 117.130503][ T6141] XFS (loop3): Quotacheck: Done. [ 117.562664][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.992459][ T6149] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 119.452500][ T6174] loop2: detected capacity change from 0 to 32768 [ 119.537847][ T6174] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.892621][ T6199] loop0: detected capacity change from 0 to 1024 [ 119.950433][ T6179] loop3: detected capacity change from 0 to 32768 [ 120.004230][ T6174] XFS (loop2): Ending clean mount [ 120.053335][ T6179] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.084417][ T6174] XFS (loop2): Quotacheck needed: Please wait. [ 120.111827][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.230179][ T6174] XFS (loop2): Quotacheck: Done. [ 120.908368][ T6212] loop1: detected capacity change from 0 to 22 [ 120.938860][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.952735][ T6212] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 120.995904][ T6212] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 121.196831][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 121.582516][ T42] hfsplus: b-tree write err: -5, ino 4 [ 121.754182][ T28] audit: type=1326 audit(1756145253.952:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82b78ebe9 code=0x7ffc0000 [ 121.864350][ T28] audit: type=1326 audit(1756145253.952:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82b78ebe9 code=0x7ffc0000 [ 121.964365][ T28] audit: type=1326 audit(1756145254.052:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff82b78ebe9 code=0x7ffc0000 [ 121.988114][ T28] audit: type=1326 audit(1756145254.052:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82b78ebe9 code=0x7ffc0000 [ 122.016781][ T28] audit: type=1326 audit(1756145254.052:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82b78ebe9 code=0x7ffc0000 [ 122.046049][ T6229] loop3: detected capacity change from 0 to 2048 [ 122.288315][ T6229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.968335][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 124.427897][ T6237] loop1: detected capacity change from 0 to 32768 [ 124.653256][ T6237] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.373820][ T6237] XFS (loop1): Ending clean mount [ 125.504921][ T6237] XFS (loop1): Quotacheck needed: Please wait. [ 125.657830][ T6237] XFS (loop1): Quotacheck: Done. [ 126.246644][ T6263] loop3: detected capacity change from 0 to 128 [ 126.312047][ T6263] qnx6: wrong signature (magic) in superblock #1. [ 126.361882][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.161385][ T6260] loop2: detected capacity change from 0 to 32768 [ 127.226425][ T6260] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.523985][ T6260] XFS (loop2): Ending clean mount [ 127.604842][ T6260] XFS (loop2): Quotacheck needed: Please wait. [ 127.889909][ T6260] XFS (loop2): Quotacheck: Done. [ 128.261749][ T6283] loop3: detected capacity change from 0 to 22 [ 128.279199][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.315096][ T6283] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 128.354993][ T6283] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 128.741888][ T6289] loop3: detected capacity change from 0 to 512 [ 128.814955][ T6289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.881546][ T6289] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.454488][ T5101] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 130.465021][ T5101] Bluetooth: hci1: Injecting HCI hardware error event [ 130.508549][ T5101] Bluetooth: hci1: hardware error 0x00 [ 131.708244][ T6311] loop2: detected capacity change from 0 to 128 [ 131.717864][ T6311] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 131.731517][ T6311] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 131.797892][ T5793] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.632816][ T5101] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 133.019891][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.172475][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183296][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.492882][ T6368] loop3: detected capacity change from 0 to 512 [ 138.525454][ T6368] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 138.885114][ T6368] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.622179][ T6382] loop3: detected capacity change from 0 to 32768 [ 142.691534][ T6382] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.009799][ T6382] XFS (loop3): Ending clean mount [ 143.050989][ T6382] XFS (loop3): Quotacheck needed: Please wait. [ 143.140217][ T6382] XFS (loop3): Quotacheck: Done. [ 143.202987][ T6408] comedi comedi4: bad chanlist[1]=0x74656e2f chan=28207 range length=2 [ 143.349873][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.768277][ T6412] warning: `syz.0.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.806059][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 145.410958][ T6431] tap0: tun_chr_ioctl cmd 1074025675 [ 145.416473][ T6431] tap0: persist enabled [ 147.242805][ T6440] process 'syz.0.141' launched './file0' with NULL argv: empty string added [ 148.496380][ T6448] loop2: detected capacity change from 0 to 1024 [ 148.618426][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.928455][ T6448] loop2: detected capacity change from 1024 to 0 [ 149.964215][ T6456] syz.2.143: attempt to access beyond end of device [ 149.964215][ T6456] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 149.984469][ T6456] syz.2.143: attempt to access beyond end of device [ 149.984469][ T6456] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 150.004237][ T6456] syz.2.143: attempt to access beyond end of device [ 150.004237][ T6456] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 150.018771][ T6456] syz.2.143: attempt to access beyond end of device [ 150.018771][ T6456] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 150.044985][ T6456] syz.2.143: attempt to access beyond end of device [ 150.044985][ T6456] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 150.059796][ T6456] syz.2.143: attempt to access beyond end of device [ 150.059796][ T6456] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 150.073279][ T6456] syz.2.143: attempt to access beyond end of device [ 150.073279][ T6456] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 150.134285][ T6456] syz.2.143: attempt to access beyond end of device [ 150.134285][ T6456] loop2: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 150.358137][ T6456] EXT4-fs error (device loop2): ext4_get_inode_loc:4621: inode #15: block 8: comm syz.2.143: unable to read itable block [ 150.434696][ T6463] netlink: 'syz.1.146': attribute type 29 has an invalid length. [ 150.442486][ T6463] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 150.452721][ T6463] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'. [ 151.854063][ C0] sched: RT throttling activated [ 151.855272][ T6456] syz.2.143: attempt to access beyond end of device [ 151.855272][ T6456] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 152.309015][ T6456] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 152.351270][ T6456] EXT4-fs (loop2): I/O error while writing superblock [ 152.461503][ T6456] syz.2.143: attempt to access beyond end of device [ 152.461503][ T6456] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 152.560537][ T6456] EXT4-fs error (device loop2): ext4_get_inode_loc:4621: inode #15: block 8: comm syz.2.143: unable to read itable block [ 152.575285][ T6456] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 152.583960][ T6456] EXT4-fs (loop2): I/O error while writing superblock [ 152.591066][ T6456] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: IO failure [ 152.645586][ T6456] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 152.662663][ T6456] EXT4-fs (loop2): I/O error while writing superblock [ 152.682848][ T6456] EXT4-fs error (device loop2): ext4_setattr:5584: inode #15: comm syz.2.143: mark_inode_dirty error [ 152.712460][ T6456] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 152.734947][ T6456] EXT4-fs (loop2): I/O error while writing superblock [ 152.751917][ T6456] EXT4-fs error (device loop2) in ext4_setattr:5645: IO failure [ 152.780017][ T6456] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 152.803250][ T6456] EXT4-fs (loop2): I/O error while writing superblock [ 153.112155][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 153.689739][ T6449] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 153.702055][ T6471] nvme_fabrics: missing parameter 'transport=%s' [ 153.708889][ T6471] nvme_fabrics: missing parameter 'nqn=%s' [ 153.735146][ T6449] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 153.754860][ T6449] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 153.763287][ T6449] EXT4-fs (loop2): I/O error while writing superblock [ 153.775533][ T6470] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.872737][ T5782] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 153.887636][ T5782] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 153.914535][ T5782] EXT4-fs (loop2): I/O error while writing superblock [ 153.944798][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.971291][ T5782] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 153.992393][ T5782] EXT4-fs (loop2): I/O error while writing superblock [ 154.002706][ T6476] loop3: detected capacity change from 0 to 512 [ 154.018591][ T6449] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 154.024518][ T6476] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.074285][ T6476] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 154.082664][ T6476] EXT4-fs (loop3): DAX unsupported by block device. [ 154.533209][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.755324][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.892547][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.312845][ T6480] tap0: tun_chr_ioctl cmd 1074025675 [ 155.318303][ T6480] tap0: persist enabled [ 156.218708][ T11] wlan1: Trigger new scan to find an IBSS to join [ 156.233511][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.112343][ T6487] loop3: detected capacity change from 0 to 764 [ 157.222656][ T5793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.474811][ T6507] netlink: 'syz.0.156': attribute type 29 has an invalid length. [ 158.482677][ T6507] netlink: 'syz.0.156': attribute type 3 has an invalid length. [ 158.490439][ T6507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.156'. [ 160.308224][ T11] wlan1: Trigger new scan to find an IBSS to join [ 160.408894][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.607580][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.615851][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.623680][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.333618][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.343431][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.285631][ T3442] wlan1: Creating new IBSS network, BSSID ea:af:74:ad:43:cd [ 162.389596][ T6528] netlink: 7 bytes leftover after parsing attributes in process `syz.0.161'. [ 163.418282][ T50] Bluetooth: hci0: command tx timeout [ 165.492702][ T50] Bluetooth: hci0: command tx timeout [ 167.284439][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 167.397373][ T6572] netlink: 7 bytes leftover after parsing attributes in process `syz.3.170'. [ 167.445822][ T6572] netlink: 7 bytes leftover after parsing attributes in process `syz.3.170'. [ 167.576709][ T50] Bluetooth: hci0: command tx timeout [ 168.043687][ T48] hsr_slave_0: left promiscuous mode [ 168.069118][ T48] hsr_slave_1: left promiscuous mode [ 168.095793][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.103427][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.367338][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.375844][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.383899][ T48] bridge_slave_1: left allmulticast mode [ 168.390235][ T48] bridge_slave_1: left promiscuous mode [ 168.398240][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.066570][ T48] bridge_slave_0: left allmulticast mode [ 169.072304][ T48] bridge_slave_0: left promiscuous mode [ 169.078739][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.101778][ T6585] loop3: detected capacity change from 0 to 32768 [ 169.141185][ T48] veth1_macvtap: left promiscuous mode [ 169.147435][ T48] veth0_macvtap: left promiscuous mode [ 169.153804][ T48] veth1_vlan: left promiscuous mode [ 169.175576][ T48] veth0_vlan: left promiscuous mode [ 169.187918][ T6585] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.322441][ T6585] XFS (loop3): Ending clean mount [ 169.347693][ T6585] XFS (loop3): Quotacheck needed: Please wait. [ 169.438760][ T6585] XFS (loop3): Quotacheck: Done. [ 169.553317][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.649681][ T50] Bluetooth: hci0: command tx timeout [ 170.237884][ T48] team0 (unregistering): Port device team_slave_1 removed [ 170.722378][ T48] team0 (unregistering): Port device team_slave_0 removed [ 170.794472][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.953140][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.754312][ T48] bond0 (unregistering): Released all slaves [ 171.851597][ T6639] loop3: detected capacity change from 0 to 32768 [ 171.908006][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.916117][ T6639] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.933407][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.960849][ T6508] bridge_slave_0: entered allmulticast mode [ 171.976633][ T6508] bridge_slave_0: entered promiscuous mode [ 171.986202][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.993496][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.007518][ T6508] bridge_slave_1: entered allmulticast mode [ 172.018699][ T6508] bridge_slave_1: entered promiscuous mode [ 172.150125][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.205944][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.759880][ T6508] team0: Port device team_slave_0 added [ 172.798561][ T6508] team0: Port device team_slave_1 added [ 172.867021][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 172.964405][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.971416][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.068722][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.303986][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.411319][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.795615][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.065782][ T6508] hsr_slave_0: entered promiscuous mode [ 174.153952][ T6508] hsr_slave_1: entered promiscuous mode [ 174.834204][ T6508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.869263][ T6508] Cannot create hsr debugfs directory [ 181.363491][ T6508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.432998][ T6508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.477993][ T6508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.515077][ T6508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.760101][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.820184][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.989843][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.997112][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.415983][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.423236][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.867224][ T6508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.099857][ T6717] loop3: detected capacity change from 0 to 32768 [ 183.277369][ T6717] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.246405][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.590568][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 184.742636][ T6508] veth0_vlan: entered promiscuous mode [ 184.922387][ T6508] veth1_vlan: entered promiscuous mode [ 185.692610][ T6508] veth0_macvtap: entered promiscuous mode [ 185.708953][ T6508] veth1_macvtap: entered promiscuous mode [ 185.737035][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.747716][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.764302][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.783554][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.905426][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.968465][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.000425][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.026831][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.054110][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.234370][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.435820][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.584254][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.641047][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.673212][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.800559][ T6508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.842126][ T6508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.872937][ T6508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.895503][ T6508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.142382][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.177415][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.294286][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.302197][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.688607][ T6833] loop2: detected capacity change from 0 to 2048 [ 190.724374][ T6833] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.804813][ T6844] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.834746][ T5793] udevd[5793]: incorrect nilfs2 checksum on /dev/loop2 [ 192.207164][ T5868] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.933899][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.940358][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.061715][ T6862] netlink: 'syz.0.237': attribute type 3 has an invalid length. [ 197.286212][ T6884] loop3: detected capacity change from 0 to 32768 [ 197.360782][ T6884] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.919045][ T6884] XFS (loop3): Ending clean mount [ 199.978581][ T6884] XFS (loop3): Quotacheck needed: Please wait. [ 200.182845][ T6944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.235126][ T6884] XFS (loop3): Quotacheck: Done. [ 200.480506][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.876733][ T6981] loop3: detected capacity change from 0 to 512 [ 203.931378][ T6981] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.081723][ T6981] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.232940][ T6981] EXT4-fs (loop3): DAX unsupported by block device. [ 207.240472][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 207.247049][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 210.650955][ T7041] loop2: detected capacity change from 0 to 512 [ 210.681956][ T7041] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.712718][ T7041] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 210.721932][ T7041] EXT4-fs (loop2): DAX unsupported by block device. [ 214.572000][ T7089] loop2: detected capacity change from 0 to 512 [ 214.579983][ T7089] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.603857][ T7089] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 214.613269][ T7089] EXT4-fs (loop2): DAX unsupported by block device. [ 218.443509][ T7130] loop3: detected capacity change from 0 to 4096 [ 218.464312][ T7130] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 218.753662][ T7135] loop2: detected capacity change from 0 to 16 [ 218.808840][ T7135] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.833313][ T788] IPVS: starting estimator thread 0... [ 219.187680][ T7137] IPVS: using max 15 ests per chain, 36000 per kthread [ 219.831327][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 219.842838][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 219.852344][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 219.863090][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 219.872794][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 219.884942][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 219.895725][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 219.904984][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 219.915731][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 219.925092][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 219.935742][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 219.945010][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 219.955675][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 219.964984][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 219.974276][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 219.984480][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 219.994534][ T7135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 220.005260][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 220.015292][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 220.024621][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 220.034558][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 220.046373][ T7135] bio_check_eod: 17 callbacks suppressed [ 220.046428][ T7135] syz.2.308: attempt to access beyond end of device [ 220.046428][ T7135] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 220.066408][ T7135] syz.2.308: attempt to access beyond end of device [ 220.066408][ T7135] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 220.081224][ T7135] syz.2.308: attempt to access beyond end of device [ 220.081224][ T7135] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 220.098087][ T7135] syz.2.308: attempt to access beyond end of device [ 220.098087][ T7135] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 223.363265][ T7143] loop3: detected capacity change from 0 to 32768 [ 223.383267][ T7143] XFS: noikeep mount option is deprecated. [ 223.429459][ T7143] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.637588][ T7143] XFS (loop3): Ending clean mount [ 223.647232][ T7158] loop2: detected capacity change from 0 to 32768 [ 223.670482][ T7143] XFS (loop3): Quotacheck needed: Please wait. [ 223.754234][ T7158] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.803262][ T7143] XFS (loop3): Quotacheck: Done. [ 223.902925][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.983667][ T7158] XFS (loop2): Ending clean mount [ 224.012878][ T7181] netlink: zone id is out of range [ 224.050238][ T7181] netlink: set zone limit has 4 unknown bytes [ 224.329326][ T6508] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.747963][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 224.988886][ T7189] loop3: detected capacity change from 0 to 1024 [ 225.129370][ T7189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.199358][ T7194] loop2: detected capacity change from 0 to 512 [ 225.409179][ T6741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.460585][ T7194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.522600][ T7194] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.886233][ T7197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.947593][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.231701][ T7202] Bluetooth: MGMT ver 1.22 [ 226.904505][ T7197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.487285][ T7197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.813576][ T7197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.020263][ T7197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.028408][ T7229] loop3: detected capacity change from 0 to 512 [ 231.035890][ T7229] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.234357][ T7229] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 231.242560][ T7229] EXT4-fs (loop3): DAX unsupported by block device. [ 232.810378][ T7197] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.839068][ T7197] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.898077][ T7197] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.943984][ T7197] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.147920][ T6508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.544665][ T7251] netlink: 7 bytes leftover after parsing attributes in process `syz.0.336'. [ 233.564379][ T7251] netlink: 7 bytes leftover after parsing attributes in process `syz.0.336'. [ 235.568779][ T7260] netlink: 7 bytes leftover after parsing attributes in process `syz.1.348'. [ 235.589187][ T7260] netlink: 7 bytes leftover after parsing attributes in process `syz.1.348'. [ 236.758182][ T7279] loop3: detected capacity change from 0 to 1024 [ 236.820874][ T7279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.365103][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.988139][ T7278] loop2: detected capacity change from 0 to 32768 [ 238.163484][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.373854][ T7278] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 238.851060][ T6508] ocfs2: Unmounting device (7,2) on (node local) [ 239.388364][ T7298] loop3: detected capacity change from 0 to 128 [ 239.795910][ T7298] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.004633][ T7298] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.301907][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.386746][ T7306] loop2: detected capacity change from 0 to 4096 [ 240.407373][ T7306] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 240.430763][ T7308] loop3: detected capacity change from 0 to 1024 [ 240.490285][ T7308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.172069][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.241530][ T7332] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 247.038053][ T7339] loop3: detected capacity change from 0 to 32768 [ 247.116416][ T7339] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 247.336246][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 248.788534][ T7346] loop2: detected capacity change from 0 to 32768 [ 248.852948][ T7346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.363 (7346) [ 248.940333][ T7346] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.115496][ T7346] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 249.136627][ T7346] BTRFS info (device loop2): metadata ratio 2 [ 249.193036][ T7346] BTRFS info (device loop2): allowing degraded mounts [ 249.261575][ T7346] BTRFS info (device loop2): force zlib compression, level 3 [ 249.926750][ T7346] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.936292][ T7346] BTRFS info (device loop2): use zstd compression, level 3 [ 249.943556][ T7346] BTRFS info (device loop2): force clearing of disk cache [ 249.954244][ T7346] BTRFS info (device loop2): using free space tree [ 249.961606][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 249.973109][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 249.983427][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 249.994793][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 250.016033][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 250.026209][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 250.047289][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 250.057495][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 250.077893][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 250.089288][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 250.101289][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 250.115512][ T7346] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 250.133115][ T7346] BTRFS error (device loop2): open_ctree failed: -12 [ 251.346936][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 251.394361][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 251.414482][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 251.421620][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 251.454624][ T7391] ceph: No mds server is up or the cluster is laggy [ 253.203416][ T7420] netlink: 7 bytes leftover after parsing attributes in process `syz.3.384'. [ 253.219123][ T7420] netlink: 7 bytes leftover after parsing attributes in process `syz.3.384'. [ 254.678985][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 254.705425][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 255.730059][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 255.755975][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 255.762623][ T7437] ceph: No mds server is up or the cluster is laggy [ 256.065615][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072211][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.161694][ T5853] IPVS: starting estimator thread 0... [ 256.264328][ T7456] IPVS: using max 16 ests per chain, 38400 per kthread [ 256.443787][ T7140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.678607][ T7458] loop3: detected capacity change from 0 to 32768 [ 257.836984][ T7458] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.048342][ T8] libceph: connect (1)[c::]:6789 error -101 [ 259.094618][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 259.117375][ T7458] XFS (loop3): Ending clean mount [ 259.295863][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.375966][ T8] libceph: connect (1)[c::]:6789 error -101 [ 259.382089][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 259.630737][ T7476] loop2: detected capacity change from 0 to 32768 [ 259.722658][ T7488] ceph: No mds server is up or the cluster is laggy [ 259.747355][ T7476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.988997][ T6508] ocfs2: Unmounting device (7,2) on (node local) [ 262.578630][ T970] libceph: connect (1)[c::]:6789 error -101 [ 262.601970][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 263.085836][ T9] libceph: connect (1)[c::]:6789 error -101 [ 263.256036][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 263.386079][ T7532] ceph: No mds server is up or the cluster is laggy [ 263.514704][ T5868] Bluetooth: (null): Invalid header checksum [ 263.537682][ T5868] Bluetooth: (null): Invalid header checksum [ 263.579428][ T5868] Bluetooth: (null): Invalid header checksum [ 263.621581][ T5868] Bluetooth: (null): Invalid header checksum [ 263.993035][ T7546] loop3: detected capacity change from 0 to 512 [ 267.285143][ T7560] loop3: detected capacity change from 0 to 40427 [ 267.309457][ T7560] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 267.318122][ T7560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.338098][ T7560] F2FS-fs (loop3): invalid crc value [ 267.362900][ T7560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.461051][ T7560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 267.476767][ T7560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.459661][ T7610] netlink: 7 bytes leftover after parsing attributes in process `syz.2.440'. [ 270.483527][ T7610] netlink: 7 bytes leftover after parsing attributes in process `syz.2.440'. [ 270.850018][ T23] libceph: connect (1)[c::]:6789 error -101 [ 270.885407][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 271.144719][ T23] libceph: connect (1)[c::]:6789 error -101 [ 271.154277][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 271.549088][ T7618] ceph: No mds server is up or the cluster is laggy [ 272.379529][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 272.427877][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 272.476514][ T7624] loop3: detected capacity change from 0 to 32768 [ 272.622725][ T7624] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.872966][ T7624] XFS (loop3): Ending clean mount [ 273.045594][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.417540][ T7656] netlink: 7 bytes leftover after parsing attributes in process `syz.1.456'. [ 274.243236][ T7656] netlink: 7 bytes leftover after parsing attributes in process `syz.1.456'. [ 275.122913][ T23] libceph: connect (1)[c::]:6789 error -101 [ 275.150408][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 275.195222][ T7678] loop3: detected capacity change from 0 to 2048 [ 275.221345][ T7680] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.453580][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 275.460898][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 275.852690][ T7674] ceph: No mds server is up or the cluster is laggy [ 276.098121][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 276.106259][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 276.477280][ T7703] netlink: 7 bytes leftover after parsing attributes in process `syz.2.470'. [ 276.495910][ T7703] netlink: 7 bytes leftover after parsing attributes in process `syz.2.470'. [ 279.235530][ T7720] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 279.247326][ T7720] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 279.255799][ T7720] CPU: 1 PID: 7720 Comm: syz.1.478 Not tainted 6.6.102-syzkaller #0 [ 279.263819][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.273920][ T7720] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 279.279524][ T7720] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3 [ 279.299177][ T7720] RSP: 0018:ffffc900037e7a78 EFLAGS: 00010206 [ 279.305290][ T7720] RAX: 0000000000000005 RBX: ffff88814d42ed00 RCX: 0000000000080000 [ 279.313298][ T7720] RDX: ffffc9000d1ac000 RSI: 00000000000007de RDI: 00000000000007df [ 279.321472][ T7720] RBP: 0000000000000001 R08: ffff88802c58112f R09: 1ffff110058b0225 [ 279.329482][ T7720] R10: dffffc0000000000 R11: ffffed10058b0226 R12: 0000000000000028 [ 279.337490][ T7720] R13: dffffc0000000000 R14: ffff88802c581000 R15: dffffc0000000000 [ 279.345496][ T7720] FS: 00007faf7eac86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 279.354456][ T7720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.361204][ T7720] CR2: 0000001b2e323ffc CR3: 00000000761a8000 CR4: 00000000003506e0 [ 279.369212][ T7720] Call Trace: [ 279.372517][ T7720] [ 279.375474][ T7720] pcl818_detach+0x66/0xd0 [ 279.379928][ T7720] comedi_device_detach+0x131/0x6f0 [ 279.385176][ T7720] comedi_unlocked_ioctl+0xbd0/0xf90 [ 279.390497][ T7720] ? comedi_poll+0x8c0/0x8c0 [ 279.395138][ T7720] ? __fget_files+0x28/0x4d0 [ 279.399754][ T7720] ? bpf_lsm_file_ioctl+0x9/0x10 [ 279.404700][ T7720] ? security_file_ioctl+0x80/0xa0 [ 279.409852][ T7720] ? comedi_poll+0x8c0/0x8c0 [ 279.414464][ T7720] __se_sys_ioctl+0xfd/0x170 [ 279.419076][ T7720] do_syscall_64+0x55/0xb0 [ 279.423504][ T7720] ? clear_bhb_loop+0x40/0x90 [ 279.428195][ T7720] ? clear_bhb_loop+0x40/0x90 [ 279.432910][ T7720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.438825][ T7720] RIP: 0033:0x7faf7db8ebe9 [ 279.443264][ T7720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.462890][ T7720] RSP: 002b:00007faf7eac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.471343][ T7720] RAX: ffffffffffffffda RBX: 00007faf7ddb5fa0 RCX: 00007faf7db8ebe9 [ 279.479332][ T7720] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 279.487316][ T7720] RBP: 00007faf7dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 279.495304][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.503290][ T7720] R13: 00007faf7ddb6038 R14: 00007faf7ddb5fa0 R15: 00007ffc3c322a38 [ 279.511284][ T7720] [ 279.514323][ T7720] Modules linked in: [ 279.546286][ T7720] ---[ end trace 0000000000000000 ]--- [ 279.551943][ T7720] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 279.567513][ T7720] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3 [ 279.589945][ T7720] RSP: 0018:ffffc900037e7a78 EFLAGS: 00010206 [ 279.596391][ T7720] RAX: 0000000000000005 RBX: ffff88814d42ed00 RCX: 0000000000080000 [ 279.604833][ T7720] RDX: ffffc9000d1ac000 RSI: 00000000000007de RDI: 00000000000007df [ 279.612920][ T7720] RBP: 0000000000000001 R08: ffff88802c58112f R09: 1ffff110058b0225 [ 279.626686][ T7720] R10: dffffc0000000000 R11: ffffed10058b0226 R12: 0000000000000028 [ 279.636404][ T7720] R13: dffffc0000000000 R14: ffff88802c581000 R15: dffffc0000000000 [ 279.644884][ T7720] FS: 00007faf7eac86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 279.653848][ T7720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.662044][ T7720] CR2: 00007f1a883812f8 CR3: 00000000761a8000 CR4: 00000000003506e0 [ 279.671465][ T7720] Kernel panic - not syncing: Fatal exception [ 279.677897][ T7720] Kernel Offset: disabled [ 279.682257][ T7720] Rebooting in 86400 seconds..