last executing test programs: 36.443704535s ago: executing program 4 (id=338): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 32.95141052s ago: executing program 4 (id=360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x201, 0x0, 0x0, {@in=@multicast1, 0x0, 0x2, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 32.780940797s ago: executing program 4 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000000), 0x4) 32.539387337s ago: executing program 4 (id=366): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c 0:'], 0xa) 32.324114471s ago: executing program 4 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x40085500, 0x4000000) 5.212739902s ago: executing program 2 (id=543): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.905392262s ago: executing program 2 (id=545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 4.379790486s ago: executing program 2 (id=546): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@fat=@tz_utc}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}, {@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp949'}}]}, 0x1, 0x217, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 3.987035293s ago: executing program 2 (id=551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000), 0x4) 3.748943592s ago: executing program 1 (id=554): bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0), 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)) 3.562877493s ago: executing program 2 (id=555): syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8613e4a75c32287bc41420cd2bfcef68a08c9ec0d45ecf1d933aaf70ce8f7b009"], 0x1, 0x5dcc, &(0x7f0000005ec0)="$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") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32], 0xd) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x36e}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000db04cf6b76968d7839b2ec000000000700000000000000000000000d03000000000000000000000a0100000000300000006100"], 0x0, 0x43}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x22000, 0x30) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x83a4) write$binfmt_script(r3, 0x0, 0xb) fcntl$setpipe(r2, 0x407, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/124, 0x7c) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40001) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r5, r4, 0x0, 0x1af00) 2.86930199s ago: executing program 1 (id=558): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) 2.858548522s ago: executing program 3 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x7, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 2.79522809s ago: executing program 5 (id=560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14, 0x0, 0x0, 0xd1b8}, {}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000900)=""/144, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}]) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 2.713679287s ago: executing program 0 (id=561): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 2.611233498s ago: executing program 1 (id=562): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.504489457s ago: executing program 3 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 2.316618677s ago: executing program 0 (id=564): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) 1.681006053s ago: executing program 1 (id=565): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1cf, &(0x7f00000024c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x64, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) 1.557788042s ago: executing program 3 (id=566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf3, 0x0, &(0x7f00000000c0)) 1.4175926s ago: executing program 5 (id=567): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xfe82, 0x22, 0x0, 0x0) 1.241669872s ago: executing program 5 (id=568): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x1013}) 1.205796986s ago: executing program 1 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 1.20017434s ago: executing program 0 (id=570): bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0), 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)) 1.125541311s ago: executing program 3 (id=571): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r1, 0x8923, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000f80)=@ethtool_drvinfo={0x3, "3b3a6e12d52d00eb82cc42f1f00d1b61ab88669e42bdfb3cec88f302de9e1d73", "9e3fe5d75f463d0322b78f5a3995fa1e7546d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1545ebd0c5b39be0c71d5eb6dab774c0a8f4394f9dfb56b0ccf9f6f1fdfdc1", "78a85ce08babb5877c9ab4909cd318f3ce181dd78515a854b784f51f55030e7f", "510f13cf44b740cd7cd65251"}}) 1.125300343s ago: executing program 4 (id=369): write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r2}, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r5, 0x8004550f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045519, 0x0) 1.058502254s ago: executing program 5 (id=572): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 755.503315ms ago: executing program 0 (id=573): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) 416.035206ms ago: executing program 5 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x7, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 402.595119ms ago: executing program 3 (id=575): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 381.814775ms ago: executing program 2 (id=576): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0xf}], 0x10}}], 0x2, 0x0) 335.856797ms ago: executing program 0 (id=577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x10}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff6a}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 244.108452ms ago: executing program 5 (id=578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14, 0x0, 0x0, 0xd1b8}, {}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000900)=""/144, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}]) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 243.198157ms ago: executing program 1 (id=579): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0xd8e) 200.308203ms ago: executing program 3 (id=580): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1cf, &(0x7f00000024c0)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wMDIyMEDYTkvo7M0u1p9q6ztl0e+mRPL7aXejmgbT8/48mgAewMDAwHHBkZiiB8v//R9HNoAKlQxiY4OxQBiYGTSg7nIGRQQ/KTmBgYgiDslMZGBkioewsJHY+SL2eXlpmTqpecn5OCohhACIMQYQRiDBGd9/bRkaGFCT3IXupuLIqOzEnJ7UIicEClcMiRRaDUPi9dWRisEVyHyi+IjqaG0F8WNgYIIWfIQMTgyHUE8YMjAzBUHELBnZY2ECCBMn/UiwI85kx/E+RbzmoEUZYGYK65GnXoGLkVVYxMNDMg8QyWKjoHUyGHyi/EaO4b0ADgUiG2NtdpzGlng68w4YYA1E+/V/IyKCOVD6xIJUf+iW5BfrFlVW6mbmJ6anpqXlGRsZmBowMBqZG+uCCCELiKf84weUTF5L5rDjUsjGxMVQklpQUGUJINkYo3whCIpW4wdvy34D1MDEwlDB4MDAwKEPMABWbbHjKY0Y2iBomsFoQS4MZj/JRMApGwSgYBaNgFIyCUTAKRsEoGAWjYBSMglEwCkbBKCAByDMwgkdBCQCjALBqQAAAAP//K/hxXQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x64, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) 0s ago: executing program 0 (id=581): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 69.858003][ T5079] cgroup: Unknown subsys name 'net' [ 70.036312][ T5079] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.039487][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.046498][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.687274][ T5079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.631198][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.648856][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.660089][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.669002][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.677489][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.678317][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.685689][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.693355][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.701951][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.714497][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.722973][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.726569][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.730659][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.738759][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.746110][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.752969][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.761074][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.765962][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.773420][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.779847][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.786541][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.800971][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.801749][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.811763][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.816128][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.825072][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.829487][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.844930][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.853112][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.856368][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.860631][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.872997][ T4485] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.883971][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.885296][ T5106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.898549][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.921477][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.784695][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 73.859630][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 73.941023][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 73.966724][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 73.992081][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 74.203120][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 74.243247][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.250436][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.259296][ T5093] bridge_slave_0: entered allmulticast mode [ 74.267077][ T5093] bridge_slave_0: entered promiscuous mode [ 74.277452][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.284926][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.293313][ T5093] bridge_slave_1: entered allmulticast mode [ 74.300783][ T5093] bridge_slave_1: entered promiscuous mode [ 74.446589][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.454792][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.462023][ T5090] bridge_slave_0: entered allmulticast mode [ 74.469563][ T5090] bridge_slave_0: entered promiscuous mode [ 74.479967][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.487467][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.494970][ T5090] bridge_slave_1: entered allmulticast mode [ 74.502252][ T5090] bridge_slave_1: entered promiscuous mode [ 74.628685][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.637290][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.645066][ T5089] bridge_slave_0: entered allmulticast mode [ 74.652439][ T5089] bridge_slave_0: entered promiscuous mode [ 74.666415][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.675784][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.684307][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.691523][ T5089] bridge_slave_1: entered allmulticast mode [ 74.699191][ T5089] bridge_slave_1: entered promiscuous mode [ 74.713435][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.720631][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.728266][ T5091] bridge_slave_0: entered allmulticast mode [ 74.736039][ T5091] bridge_slave_0: entered promiscuous mode [ 74.762104][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.776082][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.788774][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.843272][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.850531][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.858163][ T5091] bridge_slave_1: entered allmulticast mode [ 74.866400][ T5091] bridge_slave_1: entered promiscuous mode [ 74.875867][ T5098] Bluetooth: hci3: command tx timeout [ 74.895734][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.903456][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.910735][ T5094] bridge_slave_0: entered allmulticast mode [ 74.918645][ T5094] bridge_slave_0: entered promiscuous mode [ 74.961183][ T5100] Bluetooth: hci4: command tx timeout [ 74.961223][ T5098] Bluetooth: hci1: command tx timeout [ 74.961427][ T5098] Bluetooth: hci5: command tx timeout [ 74.967208][ T5100] Bluetooth: hci2: command tx timeout [ 75.006025][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.013815][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.021068][ T5092] bridge_slave_0: entered allmulticast mode [ 75.029796][ T5092] bridge_slave_0: entered promiscuous mode [ 75.043619][ T5100] Bluetooth: hci0: command tx timeout [ 75.060155][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.072730][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.080296][ T5094] bridge_slave_1: entered allmulticast mode [ 75.089364][ T5094] bridge_slave_1: entered promiscuous mode [ 75.116415][ T5093] team0: Port device team_slave_0 added [ 75.126773][ T5093] team0: Port device team_slave_1 added [ 75.136686][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.146239][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.154397][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.161659][ T5092] bridge_slave_1: entered allmulticast mode [ 75.169162][ T5092] bridge_slave_1: entered promiscuous mode [ 75.179036][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.193238][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.221232][ T5090] team0: Port device team_slave_0 added [ 75.231709][ T5090] team0: Port device team_slave_1 added [ 75.257084][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.414539][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.425976][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.433558][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.459687][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.474940][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.481952][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.508413][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.541393][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.557571][ T5091] team0: Port device team_slave_0 added [ 75.566737][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.597925][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.605123][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.631704][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.645566][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.652603][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.678767][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.695248][ T5089] team0: Port device team_slave_0 added [ 75.704305][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.730903][ T5091] team0: Port device team_slave_1 added [ 75.791844][ T5089] team0: Port device team_slave_1 added [ 75.817516][ T5092] team0: Port device team_slave_0 added [ 75.843772][ T5094] team0: Port device team_slave_0 added [ 75.871769][ T5092] team0: Port device team_slave_1 added [ 75.897435][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.905033][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.931249][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.946881][ T5094] team0: Port device team_slave_1 added [ 76.007165][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.015464][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.043226][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.098770][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.106504][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.133508][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.195280][ T5090] hsr_slave_0: entered promiscuous mode [ 76.202168][ T5090] hsr_slave_1: entered promiscuous mode [ 76.214594][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.221579][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.249391][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.280810][ T5093] hsr_slave_0: entered promiscuous mode [ 76.288678][ T5093] hsr_slave_1: entered promiscuous mode [ 76.295286][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.303460][ T5093] Cannot create hsr debugfs directory [ 76.334648][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.341633][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.367648][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.391189][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.398296][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.424550][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.438082][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.445490][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.472199][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.488525][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.495716][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.523007][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.629580][ T5089] hsr_slave_0: entered promiscuous mode [ 76.637166][ T5089] hsr_slave_1: entered promiscuous mode [ 76.648584][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.656234][ T5089] Cannot create hsr debugfs directory [ 76.751543][ T5091] hsr_slave_0: entered promiscuous mode [ 76.758598][ T5091] hsr_slave_1: entered promiscuous mode [ 76.765658][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.773600][ T5091] Cannot create hsr debugfs directory [ 76.910206][ T5092] hsr_slave_0: entered promiscuous mode [ 76.920840][ T5092] hsr_slave_1: entered promiscuous mode [ 76.927698][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.936179][ T5092] Cannot create hsr debugfs directory [ 76.952627][ T5100] Bluetooth: hci3: command tx timeout [ 76.992115][ T5094] hsr_slave_0: entered promiscuous mode [ 76.999733][ T5094] hsr_slave_1: entered promiscuous mode [ 77.006624][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.014396][ T5094] Cannot create hsr debugfs directory [ 77.032620][ T5100] Bluetooth: hci2: command tx timeout [ 77.038091][ T5100] Bluetooth: hci5: command tx timeout [ 77.041122][ T5098] Bluetooth: hci4: command tx timeout [ 77.043644][ T5100] Bluetooth: hci1: command tx timeout [ 77.121211][ T5100] Bluetooth: hci0: command tx timeout [ 77.665977][ T5093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.697678][ T5093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.718275][ T5093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.739518][ T5093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.804378][ T5090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.817154][ T5090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.831985][ T5090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.859877][ T5090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.953984][ T5089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.991108][ T5089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.048044][ T5089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.061184][ T5089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.137399][ T5092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.158989][ T5092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.188859][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.202923][ T5092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.245611][ T5092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.384377][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.392306][ T5091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.428884][ T5091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.441938][ T5091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.455493][ T5091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.509346][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.516804][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.580295][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.587531][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.615162][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.699884][ T5094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.737326][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.747668][ T5094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.768454][ T5094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.784935][ T5094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.806733][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.829734][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.836942][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.904422][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.911599][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.986021][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.034178][ T5100] Bluetooth: hci3: command tx timeout [ 79.056389][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.092252][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.099495][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.113023][ T5098] Bluetooth: hci2: command tx timeout [ 79.118459][ T5098] Bluetooth: hci5: command tx timeout [ 79.122927][ T5112] Bluetooth: hci1: command tx timeout [ 79.133329][ T5100] Bluetooth: hci4: command tx timeout [ 79.148329][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.193090][ T5100] Bluetooth: hci0: command tx timeout [ 79.215555][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.222806][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.238946][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.246196][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.408816][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.420605][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.427803][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.545408][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.641119][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.698491][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.705775][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.781391][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.788656][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.811540][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.851942][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.947426][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.033395][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.161228][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.201901][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.264563][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.271754][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.325569][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.332788][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.692139][ T5089] veth0_vlan: entered promiscuous mode [ 80.756851][ T5089] veth1_vlan: entered promiscuous mode [ 80.871325][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.941287][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.950129][ T5090] veth0_vlan: entered promiscuous mode [ 80.980206][ T5093] veth0_vlan: entered promiscuous mode [ 81.005126][ T5090] veth1_vlan: entered promiscuous mode [ 81.035843][ T5093] veth1_vlan: entered promiscuous mode [ 81.047229][ T5089] veth0_macvtap: entered promiscuous mode [ 81.083794][ T5089] veth1_macvtap: entered promiscuous mode [ 81.112966][ T5100] Bluetooth: hci3: command tx timeout [ 81.128124][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.192946][ T5100] Bluetooth: hci5: command tx timeout [ 81.198412][ T5100] Bluetooth: hci2: command tx timeout [ 81.203962][ T5112] Bluetooth: hci4: command tx timeout [ 81.209385][ T5112] Bluetooth: hci1: command tx timeout [ 81.232391][ T5093] veth0_macvtap: entered promiscuous mode [ 81.260770][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.273552][ T5112] Bluetooth: hci0: command tx timeout [ 81.330690][ T5093] veth1_macvtap: entered promiscuous mode [ 81.350705][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.378008][ T5091] veth0_vlan: entered promiscuous mode [ 81.395817][ T5092] veth0_vlan: entered promiscuous mode [ 81.426411][ T5090] veth0_macvtap: entered promiscuous mode [ 81.447502][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.459243][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.469888][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.481540][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.535339][ T5090] veth1_macvtap: entered promiscuous mode [ 81.555160][ T5091] veth1_vlan: entered promiscuous mode [ 81.565412][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.582929][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.604071][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.646350][ T5092] veth1_vlan: entered promiscuous mode [ 81.676480][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.708668][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.722227][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.734918][ T5094] veth0_vlan: entered promiscuous mode [ 81.746810][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.760423][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.771437][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.782552][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.798235][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.866934][ T5093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.879340][ T5093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.888848][ T5093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.898474][ T5093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.916342][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.928880][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.940629][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.952668][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.965805][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.975052][ T5094] veth1_vlan: entered promiscuous mode [ 81.987072][ T5090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.997791][ T5090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.007273][ T5090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.018136][ T5090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.103013][ T5091] veth0_macvtap: entered promiscuous mode [ 82.165569][ T5091] veth1_macvtap: entered promiscuous mode [ 82.338691][ T5092] veth0_macvtap: entered promiscuous mode [ 82.377273][ T5094] veth0_macvtap: entered promiscuous mode [ 82.399486][ T5092] veth1_macvtap: entered promiscuous mode [ 82.418952][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.429688][ T5094] veth1_macvtap: entered promiscuous mode [ 82.452753][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.468147][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.500969][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.514060][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.524643][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.534869][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.545777][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.559818][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.608975][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.625901][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.631069][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.646977][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.657369][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.667960][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.677899][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.688681][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.701540][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.748475][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.769412][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.780050][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.790973][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.801624][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.812238][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.823378][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.834877][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.846707][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.857097][ T5091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.866007][ T5091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.874986][ T5091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886097][ T5091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.899140][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.910230][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.920475][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.936373][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.946330][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.957506][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.967484][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.978907][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.988856][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.999790][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.014202][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.022600][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.030436][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.066384][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.077042][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.087312][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.097881][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.108366][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.119924][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.129897][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.140413][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.153541][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.179055][ T5094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191015][ T5094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.201171][ T5094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.210490][ T5094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.238401][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.252802][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.263972][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.277546][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.288017][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.298980][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.309790][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.320339][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.330242][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.340854][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.353405][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.364148][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.373358][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.420347][ T5092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432096][ T5092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.441463][ T5092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.450697][ T5092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.485308][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.502973][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.606832][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.660560][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.782868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.807648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.874719][ T5204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.986227][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.028905][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.099743][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143104][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.337170][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.353431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.437069][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.513394][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.611636][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.639246][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.680158][ T5223] loop5: detected capacity change from 0 to 256 [ 84.755597][ T5223] ======================================================= [ 84.755597][ T5223] WARNING: The mand mount option has been deprecated and [ 84.755597][ T5223] and is ignored by this kernel. Remove the mand [ 84.755597][ T5223] option from the mount to silence this warning. [ 84.755597][ T5223] ======================================================= [ 84.961017][ T5223] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.030116][ T5223] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 85.146026][ T5234] loop3: detected capacity change from 0 to 64 [ 85.162291][ T5235] loop1: detected capacity change from 0 to 128 [ 85.341915][ T5235] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.375910][ T5234] Trying to free block not in datazone [ 85.381748][ T5234] Trying to free block not in datazone [ 85.438011][ T5238] 9pnet_fd: Insufficient options for proto=fd [ 85.445939][ T5234] Trying to free block not in datazone [ 85.465852][ T5235] ext4 filesystem being mounted at /root/syzkaller.hQXfEw/0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.494580][ T5234] Trying to free block not in datazone [ 85.537365][ T5234] Trying to free block not in datazone [ 85.577023][ T5234] Trying to free block not in datazone [ 85.605654][ T5234] minix_free_block (loop3:6): bit already cleared [ 85.646510][ T5234] Trying to free block not in datazone [ 85.879368][ T5243] loop0: detected capacity change from 0 to 4096 [ 86.056050][ T5243] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 87.463175][ T5243] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 87.521573][ T5243] ntfs3: loop0: Failed to load $Extend (-22). [ 87.540944][ T5243] ntfs3: loop0: Failed to initialize $Extend. [ 87.578599][ T5092] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.075671][ T5277] capability: warning: `syz.4.32' uses 32-bit capabilities (legacy support in use) [ 89.116810][ T5277] program syz.4.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.179130][ T5290] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 90.433331][ T5296] loop4: detected capacity change from 0 to 128 [ 90.622896][ T5296] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.530336][ T782] cfg80211: failed to load regulatory.db [ 91.716516][ T5307] loop5: detected capacity change from 0 to 1024 [ 91.772757][ T5296] ext4 filesystem being mounted at /root/syzkaller.OdteOZ/8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.958721][ T5307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.959887][ T5306] loop0: detected capacity change from 0 to 2048 [ 91.984573][ T5307] EXT4-fs error (device loop5): ext4_lookup:1858: inode #2: comm syz.5.43: deleted inode referenced: 12 [ 92.039603][ T5307] EXT4-fs (loop5): Remounting filesystem read-only [ 92.308031][ T5306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.416926][ T5093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.557783][ T5306] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.42: reserved inode found cleared - inode=1 [ 92.839200][ T5090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.102972][ T5196] kernel write not supported for file [eventfd] (pid: 5196 comm: kworker/1:8) [ 93.564947][ T29] audit: type=1800 audit(1719575882.659:2): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.48" name="bus" dev="sda1" ino=1978 res=0 errno=0 [ 93.800682][ T5340] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.854081][ T5089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.874562][ T5312] loop2: detected capacity change from 0 to 32768 [ 93.892630][ T29] audit: type=1326 audit(1719575882.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.5.54" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f449e575b29 code=0x0 [ 93.915740][ T5312] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 93.915740][ T5312] downgrade (size 40): [ 93.915740][ T5312] version: 0.27: fragmentation_lru [ 93.915740][ T5312] recovery passes: [ 93.915740][ T5312] errors: [ 93.915740][ T5312] [ 94.410721][ T5354] program syz.0.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.549531][ T5358] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 94.790362][ T5358] loop4: detected capacity change from 0 to 1024 [ 94.901301][ T5332] loop3: detected capacity change from 0 to 32768 [ 95.015805][ T5332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.50 (5332) [ 95.043542][ T29] audit: type=1800 audit(1719575884.129:4): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.58" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 95.235004][ T5332] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.311171][ T5332] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 95.363659][ T5332] BTRFS info (device loop3): using free-space-tree [ 96.449637][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 96.467246][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 97.992726][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 98.162724][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 98.194080][ T5404] program syz.2.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.248884][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 98.250036][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 98.368138][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 98.428659][ T5413] sock: sock_set_timeout: `syz.5.76' (pid 5413) tries to set negative timeout [ 98.483874][ T5332] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 98.545548][ T29] audit: type=1326 audit(1719575887.639:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.0.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5a175b29 code=0x0 [ 98.587432][ T5332] BTRFS error (device loop3): open_ctree failed [ 98.920840][ T5435] loop4: detected capacity change from 0 to 256 [ 99.054212][ T5435] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 99.138378][ T5435] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 99.168687][ T5439] loop2: detected capacity change from 0 to 1024 [ 99.410474][ T5439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.766718][ T5451] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 100.597944][ T5439] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz.2.85: deleted inode referenced: 12 [ 101.508625][ T5439] EXT4-fs (loop2): Remounting filesystem read-only [ 101.509222][ T5451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 101.693483][ T5094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.703758][ T5451] netlink: 'syz.3.88': attribute type 17 has an invalid length. [ 102.371290][ T5481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.97'. [ 102.499824][ T5481] loop5: detected capacity change from 0 to 1024 [ 102.652052][ T5484] loop0: detected capacity change from 0 to 256 [ 102.695368][ T29] audit: type=1326 audit(1719575891.789:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ecb75b29 code=0x0 [ 102.741991][ T5484] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 102.760665][ T5112] Bluetooth: hci2: unknown advertising packet type: 0x68 [ 102.760781][ T5112] Bluetooth: hci2: unknown advertising packet type: 0x2d [ 102.774343][ T5112] Bluetooth: hci2: unknown advertising packet type: 0x87 [ 102.781438][ T5112] Bluetooth: hci2: unknown advertising packet type: 0x8d [ 102.795120][ T5112] Bluetooth: hci2: unknown advertising packet type: 0xe7 [ 102.802269][ T5112] Bluetooth: hci2: unknown advertising packet type: 0x68 [ 102.809390][ T5112] Bluetooth: hci2: unknown advertising packet type: 0xcf [ 103.031959][ T5093] hfsplus: bad catalog entry type [ 103.117873][ T5093] hfsplus: bad catalog entry type [ 103.207965][ T35] hfsplus: b-tree write err: -5, ino 4 [ 103.619641][ T5459] loop1: detected capacity change from 0 to 32768 [ 103.936952][ T5201] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.305595][ T5503] loop0: detected capacity change from 0 to 2048 [ 104.469353][ T5503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.507917][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.625665][ T5503] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.110: reserved inode found cleared - inode=1 [ 104.753843][ T5196] kernel write not supported for file [eventfd] (pid: 5196 comm: kworker/1:8) [ 104.813766][ T5494] loop4: detected capacity change from 0 to 32768 [ 104.843290][ T5494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.105 (5494) [ 104.870070][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.937426][ T5494] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.992782][ T5494] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 105.008982][ T5494] BTRFS info (device loop4): using free-space-tree [ 105.024509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 105.042936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.131199][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.322930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.332152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 105.376045][ T5545] loop2: detected capacity change from 0 to 256 [ 105.396756][ T5089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.412140][ T5545] FAT-fs (loop2): Unrecognized mount option "nt" or missing value [ 105.575785][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.350780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.453598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 106.472833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.643685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.722760][ T29] audit: type=1326 audit(1719575895.799:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5a175b29 code=0x0 [ 106.905727][ T5090] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.926853][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.937817][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.946777][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.960758][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.991056][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.000320][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.072188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 107.082559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.050196][ T51] bridge_slave_1: left allmulticast mode [ 108.123019][ T5571] random: crng reseeded on system resumption [ 108.762539][ T51] bridge_slave_1: left promiscuous mode [ 108.770693][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.036732][ T5100] Bluetooth: hci2: command tx timeout [ 110.243793][ T51] bridge_slave_0: left allmulticast mode [ 110.264681][ T51] bridge_slave_0: left promiscuous mode [ 110.270646][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.701983][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 110.824615][ T5597] xt_connbytes: Forcing CT accounting to be enabled [ 111.130461][ T5100] Bluetooth: hci2: command tx timeout [ 112.050576][ T29] audit: type=1800 audit(1719575901.139:8): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.141" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 112.837774][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.901205][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.008470][ T51] bond0 (unregistering): Released all slaves [ 113.202795][ T5100] Bluetooth: hci2: command tx timeout [ 113.217007][ T5612] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 114.679610][ T5657] loop2: detected capacity change from 0 to 1024 [ 114.977685][ T5100] Bluetooth: hci4: unknown advertising packet type: 0x68 [ 114.977750][ T5100] Bluetooth: hci4: unknown advertising packet type: 0x2d [ 114.985941][ T5100] Bluetooth: hci4: unknown advertising packet type: 0x87 [ 114.993286][ T5100] Bluetooth: hci4: unknown advertising packet type: 0x8d [ 115.001106][ T5100] Bluetooth: hci4: unknown advertising packet type: 0xe7 [ 115.008324][ T5100] Bluetooth: hci4: unknown advertising packet type: 0x68 [ 115.016132][ T5100] Bluetooth: hci4: unknown advertising packet type: 0xcf [ 115.153999][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 115.274782][ T5100] Bluetooth: hci2: command tx timeout [ 115.449368][ T5094] hfsplus: bad catalog entry type [ 115.521465][ T5094] hfsplus: bad catalog entry type [ 115.595892][ T1056] hfsplus: b-tree write err: -5, ino 4 [ 116.324761][ T51] hsr_slave_0: left promiscuous mode [ 116.334414][ T5691] loop1: detected capacity change from 0 to 1024 [ 116.370276][ T51] hsr_slave_1: left promiscuous mode [ 116.411140][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.429265][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.473832][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.483357][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.499711][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.510335][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.542248][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.567783][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.580098][ T51] veth1_macvtap: left promiscuous mode [ 116.587656][ T51] veth0_macvtap: left promiscuous mode [ 116.595802][ T51] veth1_vlan: left promiscuous mode [ 116.601693][ T51] veth0_vlan: left promiscuous mode [ 116.624406][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.631959][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.651860][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.680817][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.717874][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.756933][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.785868][ T5703] fuse: Bad value for 'fd' [ 117.251642][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.483234][ T5279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.744836][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.844279][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.857060][ T5279] usb 1-1: device descriptor read/64, error -71 [ 117.860446][ T5691] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.919179][ T5706] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.957973][ T5706] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.009837][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.043185][ T5709] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.123618][ T5711] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.172427][ T5711] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.172599][ T5279] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.191205][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.232396][ T5694] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.277418][ T5711] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.362896][ T5711] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.370832][ T5279] usb 1-1: device descriptor read/64, error -71 [ 118.449556][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.466360][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.475054][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.505808][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.515292][ T5279] usb usb1-port1: attempt power cycle [ 118.528291][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.539783][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.784931][ T5722] loop1: detected capacity change from 0 to 4096 [ 118.817500][ T5722] ntfs3: loop1: ino=3, Correct links count -> 2. [ 118.836216][ T5716] loop4: detected capacity change from 0 to 32768 [ 118.854313][ T5716] XFS: ikeep mount option is deprecated. [ 118.915339][ T5716] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.983936][ T5279] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.025682][ T5279] usb 1-1: device descriptor read/8, error -71 [ 119.030928][ T5722] ntfs3: loop1: failed to convert "0080" to maccyrillic [ 119.058582][ T5722] ntfs3: loop1: failed to convert name for inode 1e. [ 119.063850][ T5716] XFS (loop4): Ending clean mount [ 119.125462][ T5716] XFS (loop4): Quotacheck needed: Please wait. [ 119.212931][ T51] team0 (unregistering): Port device team_slave_1 removed [ 119.303166][ T5716] XFS (loop4): Quotacheck: Done. [ 119.352569][ T5279] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.383369][ T51] team0 (unregistering): Port device team_slave_0 removed [ 119.413678][ T5279] usb 1-1: device descriptor read/8, error -71 [ 119.515565][ T5090] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.540882][ T5279] usb usb1-port1: unable to enumerate USB device [ 119.865366][ T29] audit: type=1326 audit(1719575908.949:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 119.891449][ T29] audit: type=1326 audit(1719575908.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 119.917250][ T29] audit: type=1326 audit(1719575908.969:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 119.939895][ T29] audit: type=1326 audit(1719575908.969:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 119.962794][ T29] audit: type=1326 audit(1719575908.969:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 119.988651][ T29] audit: type=1326 audit(1719575908.969:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 120.019472][ T29] audit: type=1326 audit(1719575909.109:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x7ffc0000 [ 120.092835][ T29] audit: type=1326 audit(1719575909.109:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb096cba7 code=0x7ffc0000 [ 120.129912][ T29] audit: type=1326 audit(1719575909.109:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb0911559 code=0x7ffc0000 [ 120.161414][ T29] audit: type=1326 audit(1719575909.109:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb096cba7 code=0x7ffc0000 [ 120.486829][ T5555] chnl_net:caif_netlink_parms(): no params data found [ 120.661970][ T5112] Bluetooth: hci4: command tx timeout [ 120.781761][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 120.832614][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 120.883172][ T5756] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 120.931310][ T5756] batadv_slave_0: entered promiscuous mode [ 121.077396][ T5764] loop1: detected capacity change from 0 to 1024 [ 121.237960][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.245554][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.268078][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.290052][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.333154][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.390286][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.431306][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.470152][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.503169][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.551470][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.561906][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.591164][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.615665][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.625561][ T5555] bridge_slave_0: entered allmulticast mode [ 121.660195][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.668287][ T5555] bridge_slave_0: entered promiscuous mode [ 121.790349][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.802798][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.810177][ T5555] bridge_slave_1: entered allmulticast mode [ 121.814292][ T5782] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.864527][ T5555] bridge_slave_1: entered promiscuous mode [ 121.926090][ T5782] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.976877][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.050914][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.115604][ T5785] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.142119][ T5785] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.164800][ T5555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.244125][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.251997][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.272690][ T5555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.422089][ T5782] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.444905][ T4541] udevd[4541]: worker [5201] terminated by signal 33 (Unknown signal 33) [ 122.460684][ T4541] udevd[4541]: worker [5201] failed while handling '/devices/virtual/block/loop3' [ 122.481821][ T5555] team0: Port device team_slave_0 added [ 122.491065][ T5782] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.540438][ T5555] team0: Port device team_slave_1 added [ 122.546146][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.546168][ T5764] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.571016][ T5790] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.634038][ T5790] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.686956][ T5785] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.717225][ T5112] Bluetooth: hci4: command tx timeout [ 122.762539][ T5785] hfsplus: request for non-existent node 33423360 in B*Tree [ 122.804585][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.815339][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.846685][ T5555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.848386][ T5776] loop0: detected capacity change from 0 to 32768 [ 122.885560][ T5776] XFS: ikeep mount option is deprecated. [ 123.106999][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.172554][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.366998][ T5776] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.381274][ T5776] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 124.390243][ T5776] XFS (loop0): log mount failed [ 124.432424][ T5555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.792517][ T5112] Bluetooth: hci4: command tx timeout [ 124.919891][ T5197] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.984777][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.182523][ T5197] usb 2-1: device descriptor read/64, error -71 [ 125.448560][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.765316][ T5822] ptrace attach of "./syz-executor exec"[5090] was attempted by "./syz-executor exec"[5822] [ 125.962988][ T5197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.872719][ T5112] Bluetooth: hci4: command tx timeout [ 127.000070][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.178164][ T5835] fuse: Bad value for 'fd' [ 127.215030][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.298975][ T5838] loop4: detected capacity change from 0 to 256 [ 127.334561][ T5555] hsr_slave_0: entered promiscuous mode [ 127.360181][ T5555] hsr_slave_1: entered promiscuous mode [ 127.375030][ T5555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.400086][ T5555] Cannot create hsr debugfs directory [ 127.534977][ T5719] chnl_net:caif_netlink_parms(): no params data found [ 127.717081][ T5851] loop3: detected capacity change from 0 to 64 [ 127.756579][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 127.756602][ T29] audit: type=1326 audit(1719575916.849:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.1.203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81bff75b29 code=0x0 [ 128.316547][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.358847][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.384002][ T5719] bridge_slave_0: entered allmulticast mode [ 128.414048][ T5719] bridge_slave_0: entered promiscuous mode [ 128.532665][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.539906][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.590670][ T5719] bridge_slave_1: entered allmulticast mode [ 128.636574][ T5719] bridge_slave_1: entered promiscuous mode [ 128.809399][ T5880] fuse: Bad value for 'fd' [ 129.012539][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.027798][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.036855][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.057769][ T5100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.066551][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.084776][ T5100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 129.093108][ T5100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.162924][ T61] bridge_slave_1: left allmulticast mode [ 129.168657][ T61] bridge_slave_1: left promiscuous mode [ 129.185830][ T5855] loop4: detected capacity change from 0 to 32768 [ 129.188200][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.205663][ T61] bridge_slave_0: left allmulticast mode [ 129.206203][ T5855] XFS: ikeep mount option is deprecated. [ 129.211439][ T61] bridge_slave_0: left promiscuous mode [ 129.211704][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.288903][ T5855] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.338515][ T5855] XFS (loop4): Ending clean mount [ 129.346801][ T5855] XFS (loop4): Quotacheck needed: Please wait. [ 129.416074][ T5855] XFS (loop4): Quotacheck: Done. [ 129.586069][ T5090] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.898832][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.916091][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.928632][ T61] bond0 (unregistering): Released all slaves [ 129.995790][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.197369][ T5719] team0: Port device team_slave_0 added [ 130.253230][ T5719] team0: Port device team_slave_1 added [ 130.410319][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.419314][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.446026][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.461911][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.469626][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.497937][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.765935][ T61] hsr_slave_0: left promiscuous mode [ 130.778936][ T61] hsr_slave_1: left promiscuous mode [ 130.789497][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.802916][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.843615][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.853842][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.906976][ T61] veth1_macvtap: left promiscuous mode [ 130.919581][ T61] veth0_macvtap: left promiscuous mode [ 130.927526][ T61] veth1_vlan: left promiscuous mode [ 130.935647][ T61] veth0_vlan: left promiscuous mode [ 131.193654][ T5112] Bluetooth: hci6: command tx timeout [ 131.844970][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.525985][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.542613][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.586097][ T61] team0 (unregistering): Port device team_slave_1 removed [ 132.626693][ T61] team0 (unregistering): Port device team_slave_0 removed [ 133.283727][ T5112] Bluetooth: hci6: command tx timeout [ 133.435560][ T5719] hsr_slave_0: entered promiscuous mode [ 133.467898][ T5719] hsr_slave_1: entered promiscuous mode [ 133.487476][ T5719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.503024][ T5719] Cannot create hsr debugfs directory [ 133.510954][ T5926] loop4: detected capacity change from 0 to 256 [ 135.118839][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 135.201726][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 135.285954][ T5947] ptrace attach of "./syz-executor exec"[5090] was attempted by "./syz-executor exec"[5947] [ 135.482883][ T5112] Bluetooth: hci6: command tx timeout [ 136.268710][ T5555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.269116][ T5959] fuse: Bad value for 'user_id' [ 136.300802][ T5959] Bluetooth: MGMT ver 1.22 [ 136.319476][ T5555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.777178][ T5400] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.185760][ T5400] usb 2-1: device descriptor read/64, error -71 [ 137.358795][ T5968] loop4: detected capacity change from 0 to 512 [ 137.414730][ T5555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.475964][ T5555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.514914][ T5112] Bluetooth: hci6: command tx timeout [ 137.606907][ T5400] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.778237][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.789159][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.797006][ T5882] bridge_slave_0: entered allmulticast mode [ 137.812021][ T5400] usb 2-1: device descriptor read/64, error -71 [ 137.813724][ T5882] bridge_slave_0: entered promiscuous mode [ 137.864972][ T5976] loop0: detected capacity change from 0 to 4096 [ 137.873787][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.897454][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.905690][ T5882] bridge_slave_1: entered allmulticast mode [ 137.913649][ T5882] bridge_slave_1: entered promiscuous mode [ 137.944762][ T5400] usb usb2-port1: attempt power cycle [ 138.030796][ T5976] ntfs3: loop0: try to read out of volume at offset 0x3fffffc7000 [ 138.060612][ T5978] loop4: detected capacity change from 0 to 4096 [ 138.163817][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.203429][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.214148][ T5978] ntfs3: loop4: failed to convert "0000" to iso8859-9 [ 138.233492][ T5978] ntfs3: loop4: failed to convert "0000" to iso8859-9 [ 138.340128][ T1056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.362575][ T5400] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.425172][ T5400] usb 2-1: device descriptor read/8, error -71 [ 138.694997][ T5986] ptrace attach of "./syz-executor exec"[5089] was attempted by "./syz-executor exec"[5986] [ 138.782036][ T1056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.402537][ T5400] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.459683][ T5985] loop4: detected capacity change from 0 to 4096 [ 139.524573][ T5882] team0: Port device team_slave_0 added [ 139.653699][ T5400] usb 2-1: device not accepting address 7, error -71 [ 139.654993][ T29] audit: type=1804 audit(1719575928.739:131): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.246" name=2F726F6F742F73797A6B616C6C65722E4F6474654F5A2F34392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=33 res=1 errno=0 [ 139.674653][ T5400] usb usb2-port1: unable to enumerate USB device [ 139.716485][ T1056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.724537][ T29] audit: type=1800 audit(1719575928.789:132): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 139.744680][ T5993] loop0: detected capacity change from 0 to 128 [ 139.759298][ T5882] team0: Port device team_slave_1 added [ 139.913869][ T1056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.974436][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.981437][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.040598][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.053864][ T6001] Cannot find add_set index 0 as target [ 140.088783][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.116583][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.191524][ T29] audit: type=1804 audit(1719575929.279:133): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.253" name="/root/syzkaller.yuwPzQ/54/bus" dev="sda1" ino=1965 res=1 errno=0 [ 140.222494][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.234132][ T29] audit: type=1804 audit(1719575929.279:134): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.253" name="/root/syzkaller.yuwPzQ/54/bus" dev="sda1" ino=1965 res=1 errno=0 [ 140.321764][ T5719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.423807][ T5719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.603324][ T6007] loop4: detected capacity change from 0 to 4096 [ 140.666822][ T5719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.691724][ T6007] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 140.714261][ T6013] netlink: 88 bytes leftover after parsing attributes in process `syz.0.256'. [ 140.737076][ T5882] hsr_slave_0: entered promiscuous mode [ 140.782944][ T5882] hsr_slave_1: entered promiscuous mode [ 140.814014][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.847062][ T6007] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.856085][ T5882] Cannot create hsr debugfs directory [ 140.975402][ T5719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.008282][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 141.026665][ T6011] tipc: Started in network mode [ 141.031648][ T6011] tipc: Node identity 6, cluster identity 4711 [ 141.069150][ T29] audit: type=1804 audit(1719575930.159:135): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.254" name="/root/syzkaller.OdteOZ/51/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 141.091917][ T6011] tipc: Node number set to 6 [ 141.105420][ T29] audit: type=1804 audit(1719575930.199:136): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.254" name="/root/syzkaller.OdteOZ/51/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 141.258681][ T146] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 141.637447][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.733008][ T1056] bridge_slave_1: left allmulticast mode [ 141.752821][ T1056] bridge_slave_1: left promiscuous mode [ 141.758853][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.836920][ T1056] bridge_slave_0: left allmulticast mode [ 141.885422][ T1056] bridge_slave_0: left promiscuous mode [ 141.891356][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.904995][ T29] audit: type=1804 audit(1719575930.959:137): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.261" name="/root/syzkaller.yuwPzQ/58/bus" dev="sda1" ino=1970 res=1 errno=0 [ 141.960106][ T29] audit: type=1800 audit(1719575930.959:138): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.261" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 142.052468][ T6035] ptrace attach of "./syz-executor exec"[5090] was attempted by "./syz-executor exec"[6035] [ 142.669281][ T6038] netlink: 'syz.1.262': attribute type 8 has an invalid length. [ 143.382915][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.925223][ T25] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 143.940681][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.454679][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.558453][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.615220][ T1056] bond0 (unregistering): Released all slaves [ 144.961661][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 145.039038][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 145.046103][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 145.053130][ T25] usb 1-1: Product: syz [ 145.061006][ T25] usb 1-1: Manufacturer: syz [ 145.071947][ T25] usb 1-1: SerialNumber: syz [ 145.100248][ T25] usb 1-1: config 0 descriptor?? [ 145.128063][ T25] usb-storage 1-1:0.0: USB Mass Storage device detected [ 145.351330][ T25] usb 1-1: USB disconnect, device number 6 [ 145.588969][ T5555] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.936312][ T29] audit: type=1326 audit(1719575935.029:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x0 [ 146.169910][ T1056] hsr_slave_0: left promiscuous mode [ 146.247242][ T1056] hsr_slave_1: left promiscuous mode [ 146.257273][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.282854][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.317387][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.339105][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.398132][ T6075] loop1: detected capacity change from 0 to 32768 [ 146.445483][ T1056] veth1_macvtap: left promiscuous mode [ 146.475107][ T6075] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.491537][ T1056] veth0_macvtap: left promiscuous mode [ 146.509728][ T1056] veth1_vlan: left promiscuous mode [ 146.545425][ T1056] veth0_vlan: left promiscuous mode [ 146.547192][ T6075] XFS (loop1): Ending clean mount [ 146.626357][ T5092] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.101585][ T6114] Bluetooth: MGMT ver 1.22 [ 147.237338][ T6118] netlink: 'syz.1.273': attribute type 8 has an invalid length. [ 147.321479][ T6120] fscrypt (sda1, inode 1969): Mutually exclusive encryption flags (0x0c) [ 147.953215][ T6128] ptrace attach of "./syz-executor exec"[5092] was attempted by "./syz-executor exec"[6128] [ 148.601593][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 148.690997][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 149.092504][ T5197] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.230715][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.237923][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.300931][ T6094] netlink: 88 bytes leftover after parsing attributes in process `syz.0.272'. [ 149.317054][ T5197] usb 2-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 149.332001][ T5197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.364333][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.371567][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.389348][ T5197] usb 2-1: Product: syz [ 149.395404][ T5197] usb 2-1: Manufacturer: syz [ 149.400075][ T5197] usb 2-1: SerialNumber: syz [ 149.435073][ T5197] usb 2-1: config 0 descriptor?? [ 149.454757][ T5197] usb-storage 2-1:0.0: USB Mass Storage device detected [ 149.798219][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.837552][ T5197] usb 2-1: USB disconnect, device number 8 [ 151.018882][ T6141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.283'. [ 151.279847][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.406472][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.414379][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.633439][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.640727][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.923078][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.128188][ T6171] team0: Device veth0_macvtap failed to register rx_handler [ 152.186962][ T6177] tracefs: Bad value for 'gid' [ 152.324432][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.433564][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'. [ 152.481029][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.589483][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.791324][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.864956][ T6187] Zero length message leads to an empty skb [ 153.071098][ T6191] loop1: detected capacity change from 0 to 4096 [ 153.122949][ T6191] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 153.178677][ T6191] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 153.342091][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.395804][ T6206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.294'. [ 153.443098][ T29] audit: type=1804 audit(1719575942.539:140): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.293" name="/root/syzkaller.hQXfEw/76/file0/bus" dev="loop1" ino=33 res=1 errno=0 [ 153.479300][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.517901][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.538464][ T29] audit: type=1804 audit(1719575942.539:141): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.293" name="/root/syzkaller.hQXfEw/76/file0/bus" dev="loop1" ino=33 res=1 errno=0 [ 153.586102][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.586287][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.588787][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.588917][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.616083][ T11] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 153.987912][ T5719] veth0_vlan: entered promiscuous mode [ 154.110409][ T5719] veth1_vlan: entered promiscuous mode [ 154.228387][ T5555] veth0_vlan: entered promiscuous mode [ 154.297752][ T5555] veth1_vlan: entered promiscuous mode [ 154.392041][ T6229] team0: Device veth0_macvtap failed to register rx_handler [ 154.476662][ T6238] loop1: detected capacity change from 0 to 8 [ 154.531917][ T6239] loop4: detected capacity change from 0 to 512 [ 154.567618][ T6238] SQUASHFS error: zlib decompression failed, data probably corrupt [ 154.581596][ T6239] ext4: Unknown parameter 'obj_type' [ 154.618789][ T5719] veth0_macvtap: entered promiscuous mode [ 154.623172][ T6238] SQUASHFS error: Failed to read block 0x9b: -5 [ 154.652626][ T6238] SQUASHFS error: Unable to read metadata cache entry [99] [ 154.659898][ T6238] SQUASHFS error: Unable to read inode 0x127 [ 154.694638][ T5719] veth1_macvtap: entered promiscuous mode [ 154.706198][ T5198] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.732168][ T6229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.302'. [ 154.754300][ T6235] tracefs: Bad value for 'gid' [ 154.848332][ T5555] veth0_macvtap: entered promiscuous mode [ 154.868002][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.907967][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.938851][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.961033][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.019560][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.062813][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.126958][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.178803][ T5555] veth1_macvtap: entered promiscuous mode [ 155.222427][ T29] audit: type=1326 audit(1719575944.309:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.4.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb0975b29 code=0x0 [ 155.244965][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.316088][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.425028][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.444040][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.454843][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.465571][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.475690][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.499646][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.521483][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.548579][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.568685][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.605638][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.637181][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.646719][ T5155] IPVS: starting estimator thread 0... [ 155.659035][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.671382][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.690011][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.700939][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.722642][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.741163][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.307'. [ 155.753140][ T6272] IPVS: using max 17 ests per chain, 40800 per kthread [ 155.784352][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.796287][ T6277] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 155.802466][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.863884][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.888989][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.900828][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.920017][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.942912][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.962380][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.985065][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.056870][ T5719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.092513][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.098306][ T5719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.131466][ T5719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.141760][ T5719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.207522][ T5555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.244313][ T5555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.272555][ T5555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.281384][ T5555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.306489][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.343279][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.374223][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 156.412936][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.464652][ T25] usb 5-1: config 0 descriptor?? [ 156.560184][ T6303] loop1: detected capacity change from 0 to 8 [ 156.589378][ T6303] SQUASHFS error: zlib decompression failed, data probably corrupt [ 156.638400][ T6303] SQUASHFS error: Failed to read block 0x9b: -5 [ 156.649740][ T6303] SQUASHFS error: Unable to read metadata cache entry [99] [ 156.678489][ T6303] SQUASHFS error: Unable to read inode 0x127 [ 156.740388][ T5882] veth0_vlan: entered promiscuous mode [ 156.850770][ T5882] veth1_vlan: entered promiscuous mode [ 156.895332][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 156.895776][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.937594][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.013752][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.021654][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.095801][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.319'. [ 157.106688][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.129174][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 157.137483][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.152935][ T25] usb 5-1: USB disconnect, device number 2 [ 157.261937][ T6311] 9pnet_fd: Insufficient options for proto=fd [ 157.300995][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.330695][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.349811][ T5882] veth0_macvtap: entered promiscuous mode [ 157.395462][ T5882] veth1_macvtap: entered promiscuous mode [ 157.505258][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.522903][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.534970][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.546037][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.563892][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.574965][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.585457][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.626618][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.678088][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.726501][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.766168][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.779093][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.790064][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.804014][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.828891][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.873587][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.179147][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.427960][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.471895][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.516346][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.572493][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.784537][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.952702][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.961480][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.023991][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.047914][ T5882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.076205][ T6336] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 159.107787][ T6336] IPVS: nq: SCTP 172.20.20.170:0 - no destination available [ 159.274072][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.329765][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.371933][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.463791][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.471678][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.510529][ T25] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 159.542210][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.571966][ T25] usb 3-1: Product: syz [ 159.582974][ T6345] 9pnet_fd: Insufficient options for proto=fd [ 159.584969][ T25] usb 3-1: Manufacturer: syz [ 159.624619][ T25] usb 3-1: SerialNumber: syz [ 159.649253][ T25] usb 3-1: config 0 descriptor?? [ 159.649631][ T6327] loop1: detected capacity change from 0 to 32768 [ 159.687581][ T25] usb-storage 3-1:0.0: USB Mass Storage device detected [ 159.743978][ T6327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.324 (6327) [ 159.796375][ T6327] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.819068][ T6327] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 159.863269][ T6327] BTRFS info (device loop1): using free-space-tree [ 159.937274][ T5155] usb 3-1: USB disconnect, device number 2 [ 160.179041][ T6379] binder: 6353:6379 ioctl c0306201 20000380 returned -14 [ 160.439675][ T6388] syz.1.324 uses obsolete (PF_INET,SOCK_PACKET) [ 161.047358][ T5092] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.084584][ T6398] binder_alloc: 6395: binder_alloc_buf size 4376 failed, no address space [ 161.094595][ T6398] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 162.468582][ T6423] loop5: detected capacity change from 0 to 16 [ 162.594200][ T6423] erofs: (device loop5): mounted with root inode @ nid 36. [ 163.688008][ T6415] loop1: detected capacity change from 0 to 32768 [ 163.735552][ T6415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.344 (6415) [ 163.778685][ T6415] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.817765][ T6415] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 163.847008][ T6415] BTRFS info (device loop1): using free-space-tree [ 164.402803][ T5092] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.177631][ T6484] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 166.240579][ T6487] fscrypt (sda1, inode 1990): Unsupported encryption flags (0x10) [ 166.279968][ T6483] binder: 6479:6483 ioctl c0306201 20000380 returned -14 [ 166.481183][ T6487] netlink: 763 bytes leftover after parsing attributes in process `syz.3.375'. [ 166.576631][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.589412][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.603469][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.612177][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.621655][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.630941][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.705024][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.741437][ T6497] loop1: detected capacity change from 0 to 4096 [ 166.750407][ T6497] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 166.925386][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.149918][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.240927][ C1] sd 0:0:1:0: [sda] tag#3223 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 167.251593][ C1] sd 0:0:1:0: [sda] tag#3223 CDB: Read(6) 08 00 98 19 00 00 00 00 70 72 69 6e [ 167.337820][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 167.393950][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.456555][ T6508] team0: Device veth0_macvtap failed to register rx_handler [ 167.493232][ T6514] tracefs: Bad value for 'gid' [ 167.571621][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'. [ 168.256254][ T6538] Cannot find add_set index 0 as target [ 168.390073][ T12] bridge_slave_1: left allmulticast mode [ 168.492496][ T12] bridge_slave_1: left promiscuous mode [ 168.528545][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.552953][ T6547] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.631320][ T12] bridge_slave_0: left allmulticast mode [ 168.676600][ T12] bridge_slave_0: left promiscuous mode [ 168.676834][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.712660][ T5100] Bluetooth: hci3: command tx timeout [ 169.722934][ T6555] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.399' sets config #-1 [ 169.784643][ T6567] overlayfs: conflicting lowerdir path [ 169.852181][ T29] audit: type=1804 audit(1719575958.939:143): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.402" name="/root/syzkaller.MIV36l/10/file0" dev="sda1" ino=1983 res=1 errno=0 [ 170.792490][ T5100] Bluetooth: hci3: command tx timeout [ 172.092989][ T6596] loop1: detected capacity change from 0 to 4096 [ 172.102987][ T6596] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 172.202590][ T5198] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.393595][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.425575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.507247][ T12] bond0 (unregistering): Released all slaves [ 172.616347][ T29] audit: type=1800 audit(1719575961.709:144): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 172.797045][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 172.830501][ T6609] loop2: detected capacity change from 0 to 4096 [ 172.882618][ T5100] Bluetooth: hci3: command tx timeout [ 172.889959][ T6609] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 172.895279][ T29] audit: type=1800 audit(1719575961.979:145): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 172.967726][ T6586] loop5: detected capacity change from 0 to 32768 [ 173.058416][ T6609] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 173.236310][ T29] audit: type=1800 audit(1719575962.319:146): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.417" name="bus" dev="loop2" ino=0 res=0 errno=0 [ 174.414187][ T6615] loop3: detected capacity change from 0 to 32768 [ 174.474199][ T6615] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.422 (6615) [ 174.983032][ T5100] Bluetooth: hci3: command tx timeout [ 175.430137][ T6615] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.495839][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.520691][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.552878][ T6495] bridge_slave_0: entered allmulticast mode [ 175.560071][ T6615] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 175.611416][ T6495] bridge_slave_0: entered promiscuous mode [ 175.617479][ T6615] BTRFS info (device loop3): using free-space-tree [ 175.639175][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.712054][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.771986][ T6495] bridge_slave_1: entered allmulticast mode [ 175.814542][ T6615] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 175.818160][ T6495] bridge_slave_1: entered promiscuous mode [ 175.823872][ T6615] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 175.923280][ T6615] BTRFS error (device loop3): open_ctree failed [ 176.369529][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.410961][ T6681] loop1: detected capacity change from 0 to 4096 [ 176.426973][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.497480][ T6681] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 176.594817][ T6681] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 176.657754][ T12] batadv_slave_0: left promiscuous mode [ 176.709594][ T29] audit: type=1800 audit(1719575965.802:147): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.436" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 176.755358][ T12] hsr_slave_0: left promiscuous mode [ 176.791178][ T12] hsr_slave_1: left promiscuous mode [ 176.861577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.881097][ T6697] binder: 6691:6697 ioctl c0306201 20000380 returned -14 [ 176.893752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.943476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.994231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.002589][ T29] audit: type=1800 audit(1719575966.092:148): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.446" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 177.145849][ T12] veth1_macvtap: left promiscuous mode [ 177.151910][ T12] veth0_macvtap: left promiscuous mode [ 177.159062][ T12] veth1_vlan: left promiscuous mode [ 177.172046][ T12] veth0_vlan: left promiscuous mode [ 177.463425][ T29] audit: type=1804 audit(1719575966.548:149): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.446" name="/root/syzkaller.WOFkAx/19/file0" dev="sda1" ino=1964 res=1 errno=0 [ 177.568264][ T29] audit: type=1800 audit(1719575966.588:150): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.446" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 177.921452][ T6708] Falling back ldisc for ttyS3. [ 178.208077][ T6736] loop5: detected capacity change from 0 to 764 [ 178.896849][ T6748] loop1: detected capacity change from 0 to 512 [ 178.925860][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 178.950834][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 178.980896][ T6748] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.463: corrupted in-inode xattr: invalid ea_ino [ 179.010896][ T6748] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.463: couldn't read orphan inode 12 (err -117) [ 179.032313][ T6748] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.994193][ T12] team0 (unregistering): Port device team_slave_1 removed [ 180.021691][ T5092] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 180.154689][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.173525][ T6762] Falling back ldisc for ttyS3. [ 180.861402][ T6780] input: syz0 as /devices/virtual/input/input7 [ 181.068251][ T6786] loop5: detected capacity change from 0 to 2048 [ 181.080312][ T29] audit: type=1800 audit(1719575970.178:151): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.473" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 181.207147][ T6786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.788880][ T6495] team0: Port device team_slave_0 added [ 181.804645][ T6495] team0: Port device team_slave_1 added [ 181.924976][ T6798] loop1: detected capacity change from 0 to 16 [ 181.962004][ T6798] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.169910][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.176921][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.252936][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.267378][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.284623][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.517625][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.276162][ T6820] loop3: detected capacity change from 0 to 8 [ 183.399071][ T6825] loop2: detected capacity change from 0 to 512 [ 183.460959][ T6828] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 183.485102][ T6495] hsr_slave_0: entered promiscuous mode [ 183.524171][ T6825] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.489: corrupted in-inode xattr: invalid ea_ino [ 183.538475][ T6825] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.489: couldn't read orphan inode 12 (err -117) [ 183.559727][ T6495] hsr_slave_1: entered promiscuous mode [ 183.610455][ T6825] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.031850][ T6845] usb usb1: usbfs: process 6845 (syz.0.496) did not claim interface 0 before use [ 184.067820][ T12] IPVS: stop unused estimator thread 0... [ 184.086509][ T5719] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 184.370911][ T29] audit: type=1800 audit(1719575973.472:152): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="bus" dev="sda1" ino=1974 res=0 errno=0 [ 184.467562][ T29] audit: type=1800 audit(1719575973.512:153): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="bus" dev="sda1" ino=1974 res=0 errno=0 [ 184.504083][ T6857] loop1: detected capacity change from 0 to 16 [ 184.574858][ T6857] erofs: (device loop1): mounted with root inode @ nid 36. [ 186.103916][ T6879] loop1: detected capacity change from 0 to 512 [ 186.277668][ T6879] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.506: corrupted in-inode xattr: invalid ea_ino [ 186.333123][ T6879] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.506: couldn't read orphan inode 12 (err -117) [ 186.447330][ T6879] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.659209][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 186.676789][ T6889] input: syz0 as /devices/virtual/input/input8 [ 186.724635][ T29] audit: type=1800 audit(1719575975.842:154): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.510" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 186.768166][ T5555] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.780446][ T6495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.864932][ T6495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.911610][ T45] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 186.956385][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.957537][ T6495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.984377][ T5092] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 187.027642][ T6495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.038490][ T45] usb 3-1: config 0 descriptor?? [ 187.113476][ T45] pwc: Philips SPC 900NC USB webcam detected. [ 187.142974][ T29] audit: type=1800 audit(1719575976.262:155): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 187.313129][ T45] pwc: Failed to set LED on/off time (-71) [ 187.322684][ T29] audit: type=1800 audit(1719575976.292:156): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 187.367258][ T45] pwc: send_video_command error -71 [ 187.381884][ T45] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 187.412742][ T45] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 187.470717][ T6910] tun0: tun_chr_ioctl cmd 2147767511 [ 187.512727][ T45] usb 3-1: USB disconnect, device number 3 [ 187.672830][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.778197][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.843051][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.850275][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.036009][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.043239][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.203670][ T6939] loop1: detected capacity change from 0 to 764 [ 188.448533][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 188.518754][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 189.034921][ T6961] loop1: detected capacity change from 0 to 2048 [ 189.137794][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.160612][ T6961] NILFS (loop1): invalid segment: Sequence number mismatch [ 189.192277][ T6961] NILFS (loop1): trying rollback from an earlier position [ 189.250025][ T5197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 189.295297][ T6961] NILFS (loop1): recovery complete [ 189.327234][ T6981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.489405][ T5197] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 189.543825][ T5197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.343322][ T5197] usb 4-1: config 0 descriptor?? [ 190.353345][ T5197] pwc: Philips SPC 900NC USB webcam detected. [ 190.567564][ T5197] pwc: Failed to set LED on/off time (-71) [ 190.603730][ T5197] pwc: send_video_command error -71 [ 190.620079][ T5197] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 190.638179][ T5197] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 190.660574][ T5197] usb 4-1: USB disconnect, device number 2 [ 191.911065][ T7021] loop2: detected capacity change from 0 to 256 [ 191.921875][ T6495] veth0_vlan: entered promiscuous mode [ 192.032751][ T6495] veth1_vlan: entered promiscuous mode [ 192.176069][ T7028] loop5: detected capacity change from 0 to 16 [ 192.217529][ T6495] veth0_macvtap: entered promiscuous mode [ 192.238608][ T7028] erofs: (device loop5): mounted with root inode @ nid 36. [ 192.282131][ T6495] veth1_macvtap: entered promiscuous mode [ 192.387842][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.436150][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.475956][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.497853][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.515242][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.536060][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.567280][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.596293][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.626409][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.655873][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.681353][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.735218][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.786429][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.814731][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.825799][ T29] audit: type=1804 audit(1719575981.922:157): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.550" name="/root/syzkaller.yuwPzQ/135/file0/bus" dev="hugetlbfs" ino=14949 res=1 errno=0 [ 192.837523][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.863217][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.877525][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.888132][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.916586][ T29] audit: type=1804 audit(1719575981.982:158): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.550" name="/root/syzkaller.yuwPzQ/135/file0/bus" dev="hugetlbfs" ino=14949 res=1 errno=0 [ 192.949217][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.961180][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.979758][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.004944][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.038160][ T6495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.134072][ T6495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.144650][ T6495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.193049][ T6495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.227076][ T7049] netdevsim netdevsim5 €: renamed from netdevsim0 (while UP) [ 194.024425][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049798][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.570423][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.589047][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.700721][ T7084] loop1: detected capacity change from 0 to 16 [ 194.773772][ T7084] erofs: (device loop1): mounted with root inode @ nid 36. [ 194.875255][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.919364][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.013167][ T7047] loop2: detected capacity change from 0 to 32768 [ 195.390004][ T7097] netdevsim netdevsim3 €: renamed from netdevsim0 (while UP) [ 195.815966][ T7109] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.139637][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 196.188262][ T7104] ================================================================== [ 196.196384][ T7104] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 196.204692][ T7104] Read of size 8 at addr ffff888019e80858 by task syz.4.369/7104 [ 196.212421][ T7104] [ 196.214751][ T7104] CPU: 1 PID: 7104 Comm: syz.4.369 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 196.224832][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.234907][ T7104] Call Trace: [ 196.238374][ T7104] [ 196.241322][ T7104] dump_stack_lvl+0x241/0x360 [ 196.246044][ T7104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.251273][ T7104] ? __pfx__printk+0x10/0x10 [ 196.256008][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.261834][ T7104] ? _printk+0xd5/0x120 [ 196.266032][ T7104] ? __virt_addr_valid+0x183/0x520 [ 196.271172][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.276829][ T7104] print_report+0x169/0x550 [ 196.281360][ T7104] ? __virt_addr_valid+0x183/0x520 [ 196.286501][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.292153][ T7104] ? __virt_addr_valid+0x44e/0x520 [ 196.297291][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.302942][ T7104] ? __phys_addr+0xba/0x170 [ 196.307475][ T7104] ? skb_queue_purge_reason+0xb9/0x500 [ 196.312971][ T7104] kasan_report+0x143/0x180 [ 196.317548][ T7104] ? skb_queue_purge_reason+0xb9/0x500 [ 196.323051][ T7104] skb_queue_purge_reason+0xb9/0x500 [ 196.328457][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.334105][ T7104] ? trace_contention_end+0x3c/0x120 [ 196.339422][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.345073][ T7104] ? __mutex_lock+0x2ef/0xd70 [ 196.349776][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.355427][ T7104] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 196.361366][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.367015][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.372657][ T7104] ? drain_workqueue+0x2d3/0x3a0 [ 196.377607][ T7104] ? hci_conn_hash_flush+0x1da/0x240 [ 196.382899][ T7104] vhci_flush+0x44/0x50 [ 196.387072][ T7104] ? __pfx_vhci_flush+0x10/0x10 [ 196.391924][ T7104] hci_dev_reset+0x42c/0x5d0 [ 196.396526][ T7104] sock_do_ioctl+0x15a/0x460 [ 196.401138][ T7104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 196.406275][ T7104] sock_ioctl+0x629/0x8e0 [ 196.410624][ T7104] ? __pfx_sock_ioctl+0x10/0x10 [ 196.415482][ T7104] ? __fget_files+0x29/0x470 [ 196.420080][ T7104] ? __fget_files+0x3f6/0x470 [ 196.424773][ T7104] ? __fget_files+0x29/0x470 [ 196.429895][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.435529][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.441165][ T7104] ? security_file_ioctl+0x87/0xb0 [ 196.446284][ T7104] ? __pfx_sock_ioctl+0x10/0x10 [ 196.451153][ T7104] __se_sys_ioctl+0xfe/0x170 [ 196.455759][ T7104] do_syscall_64+0xf3/0x230 [ 196.460278][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.466182][ T7104] RIP: 0033:0x7f2910375b29 [ 196.470598][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.490207][ T7104] RSP: 002b:00007f29111ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.498621][ T7104] RAX: ffffffffffffffda RBX: 00007f2910503fa0 RCX: 00007f2910375b29 [ 196.506595][ T7104] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 196.514564][ T7104] RBP: 00007f29103f6756 R08: 0000000000000000 R09: 0000000000000000 [ 196.522538][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.530511][ T7104] R13: 000000000000000b R14: 00007f2910503fa0 R15: 00007ffd2c42a168 [ 196.538492][ T7104] [ 196.541509][ T7104] [ 196.543830][ T7104] Allocated by task 5092: [ 196.548149][ T7104] kasan_save_track+0x3f/0x80 [ 196.552833][ T7104] __kasan_kmalloc+0x98/0xb0 [ 196.557429][ T7104] kmalloc_trace_noprof+0x19c/0x2c0 [ 196.562638][ T7104] vhci_open+0x57/0x370 [ 196.566792][ T7104] misc_open+0x315/0x390 [ 196.571042][ T7104] chrdev_open+0x5b2/0x630 [ 196.575932][ T7104] do_dentry_open+0x95c/0x1720 [ 196.580729][ T7104] path_openat+0x289f/0x3280 [ 196.585321][ T7104] do_filp_open+0x235/0x490 [ 196.589825][ T7104] do_sys_openat2+0x13e/0x1d0 [ 196.594530][ T7104] __x64_sys_openat+0x247/0x2a0 [ 196.599413][ T7104] do_syscall_64+0xf3/0x230 [ 196.603926][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.609854][ T7104] [ 196.612170][ T7104] Freed by task 5092: [ 196.616142][ T7104] kasan_save_track+0x3f/0x80 [ 196.620823][ T7104] kasan_save_free_info+0x40/0x50 [ 196.625881][ T7104] poison_slab_object+0xe0/0x150 [ 196.630821][ T7104] __kasan_slab_free+0x37/0x60 [ 196.635590][ T7104] kfree+0x149/0x360 [ 196.639702][ T7104] vhci_release+0xbf/0xd0 [ 196.644047][ T7104] __fput+0x408/0x8b0 [ 196.648043][ T7104] task_work_run+0x251/0x310 [ 196.652672][ T7104] do_exit+0xa27/0x27e0 [ 196.656834][ T7104] do_group_exit+0x207/0x2c0 [ 196.661516][ T7104] __x64_sys_exit_group+0x3f/0x40 [ 196.666549][ T7104] do_syscall_64+0xf3/0x230 [ 196.671066][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.676970][ T7104] [ 196.679286][ T7104] The buggy address belongs to the object at ffff888019e80800 [ 196.679286][ T7104] which belongs to the cache kmalloc-1k of size 1024 [ 196.693339][ T7104] The buggy address is located 88 bytes inside of [ 196.693339][ T7104] freed 1024-byte region [ffff888019e80800, ffff888019e80c00) [ 196.707140][ T7104] [ 196.709465][ T7104] The buggy address belongs to the physical page: [ 196.715866][ T7104] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19e80 [ 196.724626][ T7104] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 196.733121][ T7104] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 196.741208][ T7104] page_type: 0xffffefff(slab) [ 196.745895][ T7104] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 196.754491][ T7104] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 196.763096][ T7104] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 196.771767][ T7104] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 196.780441][ T7104] head: 00fff00000000003 ffffea000067a001 ffffffffffffffff 0000000000000000 [ 196.789109][ T7104] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 196.797769][ T7104] page dumped because: kasan: bad access detected [ 196.804170][ T7104] page_owner tracks the page as allocated [ 196.809872][ T7104] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2189441499, free_ts 0 [ 196.829616][ T7104] post_alloc_hook+0x1f3/0x230 [ 196.834408][ T7104] get_page_from_freelist+0x2e4c/0x2f10 [ 196.839973][ T7104] __alloc_pages_noprof+0x256/0x6c0 [ 196.845195][ T7104] alloc_slab_page+0x5f/0x120 [ 196.849972][ T7104] allocate_slab+0x5a/0x2f0 [ 196.854498][ T7104] ___slab_alloc+0xcd1/0x14b0 [ 196.859181][ T7104] __slab_alloc+0x58/0xa0 [ 196.863522][ T7104] kmalloc_node_track_caller_noprof+0x281/0x440 [ 196.869782][ T7104] kmemdup_noprof+0x2a/0x60 [ 196.874299][ T7104] bpf_prepare_filter+0xe1c/0x1580 [ 196.879598][ T7104] bpf_prog_create+0x135/0x1f0 [ 196.884363][ T7104] ptp_classifier_init+0xb9/0x110 [ 196.889391][ T7104] sock_init+0xe0/0xf0 [ 196.893459][ T7104] do_one_initcall+0x24a/0x880 [ 196.898234][ T7104] do_initcall_level+0x157/0x210 [ 196.903205][ T7104] do_initcalls+0x3f/0x80 [ 196.907544][ T7104] page_owner free stack trace missing [ 196.912903][ T7104] [ 196.915221][ T7104] Memory state around the buggy address: [ 196.920847][ T7104] ffff888019e80700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.928923][ T7104] ffff888019e80780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.936982][ T7104] >ffff888019e80800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.945126][ T7104] ^ [ 196.952063][ T7104] ffff888019e80880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.960123][ T7104] ffff888019e80900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.968195][ T7104] ================================================================== [ 197.111109][ T7129] loop3: detected capacity change from 0 to 16 [ 197.270552][ T7129] erofs: (device loop3): mounted with root inode @ nid 36. [ 197.355905][ T7104] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.363158][ T7104] CPU: 1 PID: 7104 Comm: syz.4.369 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 197.373264][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.383327][ T7104] Call Trace: [ 197.386639][ T7104] [ 197.389580][ T7104] dump_stack_lvl+0x241/0x360 [ 197.394322][ T7104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.399577][ T7104] ? __pfx__printk+0x10/0x10 [ 197.404208][ T7104] ? preempt_schedule+0xe1/0xf0 [ 197.409075][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.414750][ T7104] ? vscnprintf+0x5d/0x90 [ 197.419103][ T7104] panic+0x349/0x860 [ 197.423027][ T7104] ? check_panic_on_warn+0x21/0xb0 [ 197.428169][ T7104] ? __pfx_panic+0x10/0x10 [ 197.432639][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.438295][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.443956][ T7104] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 197.449955][ T7104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.456303][ T7104] ? print_report+0x502/0x550 [ 197.461040][ T7104] check_panic_on_warn+0x86/0xb0 [ 197.466012][ T7104] ? skb_queue_purge_reason+0xb9/0x500 [ 197.471702][ T7104] end_report+0x77/0x160 [ 197.476001][ T7104] kasan_report+0x154/0x180 [ 197.480558][ T7104] ? skb_queue_purge_reason+0xb9/0x500 [ 197.486093][ T7104] skb_queue_purge_reason+0xb9/0x500 [ 197.491417][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.497100][ T7104] ? trace_contention_end+0x3c/0x120 [ 197.502445][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.508096][ T7104] ? __mutex_lock+0x2ef/0xd70 [ 197.512823][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.518515][ T7104] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 197.524484][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.530142][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.535815][ T7104] ? drain_workqueue+0x2d3/0x3a0 [ 197.540774][ T7104] ? hci_conn_hash_flush+0x1da/0x240 [ 197.546084][ T7104] vhci_flush+0x44/0x50 [ 197.550265][ T7104] ? __pfx_vhci_flush+0x10/0x10 [ 197.555138][ T7104] hci_dev_reset+0x42c/0x5d0 [ 197.560024][ T7104] sock_do_ioctl+0x15a/0x460 [ 197.564741][ T7104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 197.569909][ T7104] sock_ioctl+0x629/0x8e0 [ 197.574269][ T7104] ? __pfx_sock_ioctl+0x10/0x10 [ 197.579146][ T7104] ? __fget_files+0x29/0x470 [ 197.583758][ T7104] ? __fget_files+0x3f6/0x470 [ 197.588452][ T7104] ? __fget_files+0x29/0x470 [ 197.593242][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.598981][ T7104] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.604636][ T7104] ? security_file_ioctl+0x87/0xb0 [ 197.609771][ T7104] ? __pfx_sock_ioctl+0x10/0x10 [ 197.614997][ T7104] __se_sys_ioctl+0xfe/0x170 [ 197.619621][ T7104] do_syscall_64+0xf3/0x230 [ 197.624204][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.630263][ T7104] RIP: 0033:0x7f2910375b29 [ 197.634788][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.654506][ T7104] RSP: 002b:00007f29111ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.663023][ T7104] RAX: ffffffffffffffda RBX: 00007f2910503fa0 RCX: 00007f2910375b29 [ 197.671026][ T7104] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 197.679006][ T7104] RBP: 00007f29103f6756 R08: 0000000000000000 R09: 0000000000000000 [ 197.687022][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.695083][ T7104] R13: 000000000000000b R14: 00007f2910503fa0 R15: 00007ffd2c42a168 [ 197.703277][ T7104] [ 197.706643][ T7104] Kernel Offset: disabled [ 197.710971][ T7104] Rebooting in 86400 seconds..