last executing test programs: 26.445562804s ago: executing program 0 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000280)={0x8, "64f5bdc89fbba00f5a15f0d3e0f8aee5e3f50f3251f721385b88158d3a44fb69"}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 23.906596312s ago: executing program 0 (id=965): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500"}) 23.725042806s ago: executing program 0 (id=966): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r0, 0x1, 0x0, 0x0, {{0x59}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23.529854013s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000100)=""/116, 0x74) 23.380275164s ago: executing program 0 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000900000f0100000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r3 = syz_open_dev$usbfs(0x0, 0xf5, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 22.189600772s ago: executing program 0 (id=970): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000fe00850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) sync() 9.216885765s ago: executing program 2 (id=1007): r0 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fdatasync(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x3, 0x6ed, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 7.998731775s ago: executing program 2 (id=1009): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SOUND_MIXER_INFO(r0, 0x400448c9, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad4da59bd78a248060eb7e05f7e56b446305d49c3e5d3120577c4e2b73c6db3384cc496525aa5a1e3f87e283e57448d56ced36ed336d8f77b350d227"], 0x1, 0x1ce, &(0x7f00000002c0)="$eJzs20tqU2EUB/B/0qjgEpwq6MQmrQrtsFDf78cGShtLMVWxDmwRrEtxZXYDHbgBr3iLSkOTXF/5KP39INwDJ4dz7uDk+yYJcHJ1klZaWU5SVdWHdxda2S09EzAVVeH+XyugnJnva7hXegpg+vaX6v3PXpLPX96v/vgsNzy/95fa9XN3qP560/qPrfp5rnO4/kaSmw3qq08H9ReH+t/6zf5nh+pvN64/eP9L5w/X30lyN8m9JPeTPEjyMMmjJI+P6L821P9Zw/4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Siuzk/Jjv9DO841Bvzcyf6rOz43Mn67z8xPyV0bmz9T52dVXg7VxYwJHaP/l/s9M2P/OhP0Hytna3nmxMhj03wgEAsHPoPQvE/C/dd9uvu5ube9c3thcWe+v91/OLc73ri4sLPaudeubfXf8/R44vn4d+qUnAQAAAAAAAAD+1JMkT0sPAQAATMU0/k5U+h0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOP6+BQAA///mpdN2") r6 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000940)="bf", 0xfdef}], 0x2, 0x5000000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r10 = socket(0x9, 0x6, 0x3) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r9, 0x3}, 0x5a) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x6}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xfffffffffffffeb5, 0xa, '@\x00\x00\x97j\xd3?\xee\xe1&F\x94\xf9\xce\xff\x88\xdfY\xea\x05\xce\x01\"\xcf|\x00\x00_~'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc4c85512, 0x0) 5.784205846s ago: executing program 1 (id=1028): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd2}) 5.436046955s ago: executing program 1 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x6}}) 5.017865159s ago: executing program 4 (id=1035): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}}, 0x0) 4.964739193s ago: executing program 1 (id=1036): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) 4.730453173s ago: executing program 1 (id=1037): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe}}, 0x0) getsockname$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty=0xe0000000}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x34}}, 0x0) 4.623923061s ago: executing program 2 (id=1038): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701054d09070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0, 0x0) 4.493210812s ago: executing program 4 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r1, 0xfffffffffffffffe, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000480)='./file0/../file0\x00', 0x80801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) creat(0x0, 0x0) rename(&(0x7f0000000500)='./file0/../file0/../file0\x00', &(0x7f0000000540)='./file0/../file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mount$afs(&(0x7f0000000140)=@cell={0x23, 'syz1:', 'syz0'}, &(0x7f0000000340)='./file0\x00', 0x0, 0x400, &(0x7f0000000480)={[{@flock_strict}, {@dyn}, {@flock_write}, {@flock_strict}, {}, {@flock_local}, {@flock_write}, {@dyn}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'mountinfo\x00'}}]}) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x5, 0x1510, &(0x7f00000037c0)="$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") statfs(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc080661a, &(0x7f0000002700)={@desc={0x1, 0x0, @desc1}, 0x10, 0x0, '\x00', @d}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/../file0/file0\x00'}) 4.425381037s ago: executing program 3 (id=1040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000002c0)='<', 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x20000000}, 0x20) 4.339550975s ago: executing program 1 (id=1041): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x36, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) 4.206078596s ago: executing program 3 (id=1042): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x17) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 3.972189225s ago: executing program 3 (id=1043): getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0x0]) setregid(r0, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0x0, 0x0, 0x0) 3.944033367s ago: executing program 4 (id=1044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) unshare(0x480) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x503d, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3.832150136s ago: executing program 3 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 3.791327869s ago: executing program 2 (id=1046): socketpair$unix(0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioprio_get$pid(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) 3.66574475s ago: executing program 3 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10020f58, 0x0, [{}, {}, {}, {0x0, 0x35}]}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 3.435606039s ago: executing program 2 (id=1048): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="3f8ad0271d6f0926ccda62aec9fcbb47f348139e6dd628ec90341fe8c18a7f7e04916dc6adcb293af8d746f4af1ff0701dda33534edc98be1dd522a6efd3e2541298b2b0981f5754f6f315275f7e0af5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) close_range(r2, r1, 0x2) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x4008af12, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x8, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 3.408201501s ago: executing program 4 (id=1049): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) io_setup(0xedf, &(0x7f0000001740)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.29578684s ago: executing program 3 (id=1050): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_connect(0x0, 0x57, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) 2.851814356s ago: executing program 4 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(0x0, 0x101000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x14, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = socket(0x840000000002, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f00000036c0)=[{{&(0x7f0000000380)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000180000/0x4000)=nil) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) 312.148074ms ago: executing program 1 (id=1052): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) 175.184876ms ago: executing program 4 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=1054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmsg$nl_route(r3, &(0x7f0000003e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003dc0)={&(0x7f00000003c0)=@ipv6_getnexthop={0x20, 0x6a, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003cc0)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000001700)=""/240, 0xf0}, {&(0x7f0000001800)=""/174, 0xae}], 0x6, &(0x7f0000001940)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/247, 0xf7}], 0x2, &(0x7f0000002ac0)=""/101, 0x65}, 0xffff}, {{&(0x7f0000002b40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002bc0)=""/18, 0x12}, {&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3}, 0x200}], 0x3, 0x40000002, &(0x7f0000003d80)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0xffefffff) kernel console output (not intermixed with test programs): T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.782069][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.823987][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.864416][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.873408][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.893391][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.912554][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.919723][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.956356][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.987383][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.016629][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.023820][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.031686][ T151] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.069041][ T151] usb 4-1: config 1 interface 0 has no altsetting 0 [ 149.092688][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.119916][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.153010][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.170034][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.178312][ T151] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 149.205149][ T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.223142][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.252126][ T151] usb 4-1: SerialNumber: syz [ 149.262490][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.309935][ T3567] Bluetooth: hci6: command tx timeout [ 149.314607][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.342880][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.358862][ T5580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.439672][ T5580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.482586][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.514906][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.532123][ T151] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 149.551986][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.552115][ T151] cdc_subset: probe of 4-1:1.0 failed with error -71 [ 149.582974][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.620438][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.632110][ T151] usb 4-1: USB disconnect, device number 14 [ 149.676823][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.717438][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.779064][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.809820][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.841060][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.873075][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.880676][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.899169][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.899832][ T3927] usb 1-1: USB disconnect, device number 8 [ 149.932253][ T3927] ftdi_sio 1-1:0.0: device disconnected [ 149.949838][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.988160][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.024409][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.076411][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.105410][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.135820][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.173336][ T5537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.197680][ T5537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.248741][ T5656] netlink: 'syz.3.555': attribute type 30 has an invalid length. [ 150.251908][ T5537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.305319][ T5537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.360617][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.557406][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.582168][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.678401][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.703584][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.746351][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.793111][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.913659][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.921248][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.964696][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.993007][ T5662] loop0: detected capacity change from 0 to 4096 [ 151.033921][ T5662] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 151.125643][ T5662] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 151.441235][ T5670] loop0: detected capacity change from 0 to 512 [ 151.525057][ T5670] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 151.571561][ T5670] EXT4-fs (loop0): 1 truncate cleaned up [ 151.602008][ T5670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.659422][ T5660] loop3: detected capacity change from 0 to 32768 [ 151.672220][ T5660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.556 (5660) [ 151.813456][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.853020][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.914420][ T5660] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.963725][ T5660] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 151.989820][ T5677] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 152.108331][ T5677] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 4: comm syz.0.558: lblock 0 mapped to illegal pblock 4 (length 1) [ 152.207000][ T5678] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 4: comm syz.0.558: lblock 0 mapped to illegal pblock 4 (length 1) [ 152.267294][ T5677] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 152.300208][ T5660] BTRFS info (device loop3): using free space tree [ 152.579939][ T5580] device veth0_vlan entered promiscuous mode [ 152.630408][ T5580] device veth1_vlan entered promiscuous mode [ 152.639459][ T3563] EXT4-fs (loop0): unmounting filesystem. [ 152.669426][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.686538][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.698507][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.711260][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.722584][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.902048][ T3567] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 152.910788][ T3567] Bluetooth: hci4: Injecting HCI hardware error event [ 152.920636][ T3557] Bluetooth: hci4: hardware error 0x00 [ 152.928489][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.953004][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.963290][ T5580] device veth0_macvtap entered promiscuous mode [ 153.054793][ T5580] device veth1_macvtap entered promiscuous mode [ 153.062807][ T5660] BTRFS info (device loop3): enabling ssd optimizations [ 153.160294][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.211346][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.251931][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.281919][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.331259][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.361948][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.371797][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.423314][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.452047][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.481941][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.505277][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.550476][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.574938][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.621825][ T3565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.640533][ T3565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.649509][ T3565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.661371][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.669616][ T3565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.670864][ T5162] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.694121][ T3566] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.702682][ T3566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.734528][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.752830][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.767026][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.783000][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.796568][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.806824][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.818659][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.829048][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.839982][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.850063][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.860966][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.872216][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.921615][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.941912][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.979290][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.021424][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.106145][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.125295][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.160638][ T5580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.198998][ T5580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.249501][ T5580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.270551][ T27] audit: type=1326 audit(1720765740.901:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5707 comm="syz.0.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae95375bd9 code=0x0 [ 154.299482][ T5580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.391467][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 154.794976][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 154.981976][ T3557] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 155.255328][ T5716] Bluetooth: MGMT ver 1.22 [ 155.357587][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 155.409651][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 155.663557][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.702714][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.783097][ T3557] Bluetooth: hci7: command tx timeout [ 155.823975][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.914465][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.944754][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.978859][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.092716][ T5702] chnl_net:caif_netlink_parms(): no params data found [ 156.418818][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.452042][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.460718][ T5702] device bridge_slave_0 entered promiscuous mode [ 156.544398][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.584438][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.617850][ T5702] device bridge_slave_1 entered promiscuous mode [ 156.632831][ T27] audit: type=1326 audit(1720765743.271:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5741 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f51f75bd9 code=0x7ffc0000 [ 156.705861][ T27] audit: type=1326 audit(1720765743.311:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5741 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f6f51f75bd9 code=0x7ffc0000 [ 156.776117][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.804802][ T27] audit: type=1326 audit(1720765743.311:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5741 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f51f75bd9 code=0x7ffc0000 [ 156.829144][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.922261][ T27] audit: type=1326 audit(1720765743.311:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5741 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f51f75bd9 code=0x7ffc0000 [ 156.996845][ T5702] team0: Port device team_slave_0 added [ 157.017587][ T5719] loop3: detected capacity change from 0 to 40427 [ 157.037211][ T5702] team0: Port device team_slave_1 added [ 157.076318][ T5719] F2FS-fs (loop3): invalid crc value [ 157.127511][ T5719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.203677][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.227738][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.862157][ T3557] Bluetooth: hci7: command tx timeout [ 157.868409][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.881223][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.888231][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.915205][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.915307][ T5719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 158.056747][ T5702] device hsr_slave_0 entered promiscuous mode [ 158.074839][ T5702] device hsr_slave_1 entered promiscuous mode [ 158.109913][ T5702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.132104][ T5702] Cannot create hsr debugfs directory [ 158.193028][ T5162] syz-executor: attempt to access beyond end of device [ 158.193028][ T5162] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.238004][ T5732] loop0: detected capacity change from 0 to 32768 [ 158.499990][ T5732] XFS (loop0): Mounting V5 Filesystem [ 159.124452][ T5732] XFS (loop0): AIL initialisation failed: error -12 [ 159.249640][ T5732] XFS (loop0): log mount failed [ 159.445725][ T5702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.646268][ T5702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.852697][ T5702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.942442][ T3566] Bluetooth: hci7: command tx timeout [ 159.949808][ T27] audit: type=1326 audit(1720765746.581:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae95375bd9 code=0x7ffc0000 [ 160.074969][ T27] audit: type=1326 audit(1720765746.631:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fae95375bd9 code=0x7ffc0000 [ 160.084004][ T5702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.185306][ T27] audit: type=1326 audit(1720765746.631:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae95375bd9 code=0x7ffc0000 [ 160.352032][ T27] audit: type=1326 audit(1720765746.631:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae95375bd9 code=0x7ffc0000 [ 160.402445][ T5788] loop3: detected capacity change from 0 to 32768 [ 160.430553][ T5788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.586 (5788) [ 161.086222][ T5788] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.096482][ T5788] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 161.105251][ T5788] BTRFS info (device loop3): turning off barriers [ 161.111973][ T5788] BTRFS info (device loop3): enabling auto defrag [ 161.118428][ T5788] BTRFS info (device loop3): force clearing of disk cache [ 161.125677][ T5788] BTRFS info (device loop3): max_inline at 4096 [ 161.132223][ T5788] BTRFS info (device loop3): turning on sync discard [ 161.138917][ C1] sched: RT throttling activated [ 161.144357][ T5788] BTRFS info (device loop3): use no compression [ 161.150635][ T5788] BTRFS info (device loop3): using free space tree [ 161.258617][ T5702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.270826][ T5702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.298205][ T5702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.424404][ T5702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.534503][ T5788] BTRFS info (device loop3): enabling ssd optimizations [ 161.544913][ T5788] BTRFS info (device loop3): rebuilding free space tree [ 161.836652][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.866526][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.876191][ T5162] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.904438][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.933165][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.988627][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.011486][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.022095][ T3566] Bluetooth: hci7: command tx timeout [ 162.037144][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.044327][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.068771][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.078071][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.087325][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.097228][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.104412][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.127666][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.193281][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.210118][ T27] audit: type=1326 audit(1720765748.841:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 162.234238][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.263596][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.284556][ T27] audit: type=1326 audit(1720765748.881:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 162.324610][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.373510][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.420433][ T5702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.452366][ T27] audit: type=1326 audit(1720765748.881:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 162.474858][ T5702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.525790][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.544768][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.551949][ T27] audit: type=1326 audit(1720765748.881:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 162.575531][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.615904][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.652684][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.692197][ T5835] netlink: 108 bytes leftover after parsing attributes in process `syz.3.595'. [ 162.740469][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.885018][ T5811] loop0: detected capacity change from 0 to 32768 [ 163.049779][ T5811] XFS (loop0): Mounting V5 Filesystem [ 163.094806][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 163.168278][ T5811] XFS (loop0): Ending clean mount [ 163.184333][ T5811] XFS (loop0): Quotacheck needed: Please wait. [ 163.206783][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 163.221151][ T5811] XFS (loop0): Quotacheck: Done. [ 163.283552][ T5856] netlink: 'syz.4.604': attribute type 8 has an invalid length. [ 163.322509][ T5856] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 163.368505][ T3563] XFS (loop0): Unmounting Filesystem [ 163.432182][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 163.544173][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 163.640393][ T27] audit: type=1326 audit(1720765750.271:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5862 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 163.738947][ T27] audit: type=1326 audit(1720765750.281:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5862 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb7c3b75bd9 code=0x7ffc0000 [ 163.789574][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.813429][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.834179][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 163.876927][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.961770][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.987251][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.077787][ T5702] device veth0_vlan entered promiscuous mode [ 164.100857][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.138941][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.184394][ T5702] device veth1_vlan entered promiscuous mode [ 164.206150][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.220831][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.238261][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.309607][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.334745][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.362625][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.393202][ T5702] device veth0_macvtap entered promiscuous mode [ 164.423480][ T5702] device veth1_macvtap entered promiscuous mode [ 164.475522][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.510941][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.562391][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.591996][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.621950][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.671942][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.685893][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.744783][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.769111][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.811513][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.853585][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.897858][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.938573][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.982322][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.017890][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 165.031019][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.051490][ T5886] netlink: 'syz.2.615': attribute type 7 has an invalid length. [ 165.099975][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.125968][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.155806][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.177258][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.209902][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.262049][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.310654][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.351789][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.392232][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.419542][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.447099][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.498887][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.499317][ T5890] loop0: detected capacity change from 0 to 32768 [ 165.524627][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.571697][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.597233][ T5890] XFS (loop0): Mounting V5 Filesystem [ 165.612142][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.641313][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.658971][ T5890] XFS (loop0): Ending clean mount [ 165.710750][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.724783][ T5890] XFS (loop0): Quotacheck needed: Please wait. [ 165.777537][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.804034][ T5890] XFS (loop0): Quotacheck: Done. [ 165.844449][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.868242][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.892996][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.971298][ T5702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.995987][ T5702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.043902][ T5702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.074247][ T5702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.116520][ T3563] XFS (loop0): Unmounting Filesystem [ 166.166818][ T5922] loop3: detected capacity change from 0 to 1024 [ 166.195310][ T5922] EXT4-fs: Ignoring removed orlov option [ 166.217431][ T5922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.307515][ T5922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.347789][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.362273][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.457630][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.466729][ T5922] loop3: detected capacity change from 1024 to 1016 [ 166.486970][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.503794][ T5926] i2c i2c-0: Invalid block write size 129 [ 166.507236][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.531088][ T5929] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.628: corrupted in-inode xattr [ 166.556399][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.606460][ T5922] syz.3.628 (5922) used greatest stack depth: 18704 bytes left [ 166.659932][ T5162] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /39/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 166.887233][ T5162] EXT4-fs (loop3): unmounting filesystem. [ 167.004367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 167.021493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 167.029871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 167.038179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 167.046470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 167.399914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18!!! [ 167.779170][ T5944] loop0: detected capacity change from 0 to 32768 [ 167.789505][ T5944] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.636 (5944) [ 167.807788][ T5944] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.818159][ T5944] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 167.827257][ T5944] BTRFS info (device loop0): turning off barriers [ 167.833809][ T5944] BTRFS info (device loop0): enabling auto defrag [ 167.840329][ T5944] BTRFS info (device loop0): force clearing of disk cache [ 167.847723][ T5944] BTRFS info (device loop0): max_inline at 4096 [ 167.854037][ T5944] BTRFS info (device loop0): turning on sync discard [ 167.860856][ T5944] BTRFS info (device loop0): use no compression [ 167.867460][ T5944] BTRFS info (device loop0): using free space tree [ 167.922148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 168.198843][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.358110][ T5944] BTRFS info (device loop0): enabling ssd optimizations [ 168.366931][ T5944] BTRFS info (device loop0): rebuilding free space tree [ 168.514178][ T3563] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.546163][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.783469][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.944729][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.112901][ T5973] loop4: detected capacity change from 256 to 248 [ 169.173264][ T5984] i2c i2c-0: Invalid block write size 129 [ 169.184798][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 169.254563][ T5986] netlink: 'syz.2.645': attribute type 15 has an invalid length. [ 169.286619][ T3557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.299822][ T3557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.308705][ T3557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.318129][ T3557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.326505][ T3557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.334459][ T3557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.418606][ T5986] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 169.427641][ T5986] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 169.436631][ T5986] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 169.445497][ T5986] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 169.582302][ T5986] device vxlan0 entered promiscuous mode [ 169.650781][ T5991] netlink: 108 bytes leftover after parsing attributes in process `syz.0.647'. [ 169.810659][ T5996] loop0: detected capacity change from 0 to 256 [ 169.867937][ T5996] FAT-fs (loop0): bogus logical sector size 0 [ 169.912196][ T5996] FAT-fs (loop0): Can't find a valid FAT filesystem [ 170.315703][ T6010] fuse: Bad value for 'fd' [ 170.389388][ T6006] loop0: detected capacity change from 0 to 512 [ 170.501226][ T6006] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.744100][ T6006] __quota_error: 2 callbacks suppressed [ 170.744119][ T6006] Quota error (device loop0): do_check_range: Getting block 4 out of range 1-0 [ 170.851944][ T6006] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 170.861366][ T6006] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.653: Failed to acquire dquot type 0 [ 170.943369][ T6006] EXT4-fs (loop0): Remounting filesystem read-only [ 170.950013][ T6006] EXT4-fs (loop0): 1 orphan inode deleted [ 170.961997][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 171.283569][ T3563] EXT4-fs (loop0): unmounting filesystem. [ 171.382324][ T3557] Bluetooth: hci0: command tx timeout [ 171.495767][ T6032] netlink: 'syz.0.657': attribute type 27 has an invalid length. [ 171.546936][ T6032] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 171.590430][ T5988] chnl_net:caif_netlink_parms(): no params data found [ 172.044401][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 172.101976][ T6051] netlink: 'syz.0.661': attribute type 15 has an invalid length. [ 172.137806][ T6051] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 65023 - 0 [ 172.146937][ T6051] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 65023 - 0 [ 172.156305][ T6051] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 65023 - 0 [ 172.165141][ T6051] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 65023 - 0 [ 172.228535][ T6051] device vxlan1 entered promiscuous mode [ 172.301869][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.327264][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.358270][ T5988] device bridge_slave_0 entered promiscuous mode [ 172.541085][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.552981][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.573592][ T5988] device bridge_slave_1 entered promiscuous mode [ 172.830581][ T6064] loop0: detected capacity change from 0 to 512 [ 172.872664][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.917271][ T6064] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.927839][ T4241] device hsr_slave_0 left promiscuous mode [ 172.962964][ T4241] device hsr_slave_1 left promiscuous mode [ 172.981449][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.993981][ T6064] Quota error (device loop0): do_check_range: Getting block 4 out of range 1-0 [ 173.021966][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.029269][ T6064] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 173.045932][ T6064] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.667: Failed to acquire dquot type 0 [ 173.059293][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.077930][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.092418][ T6064] EXT4-fs (loop0): Remounting filesystem read-only [ 173.099791][ T4241] device bridge_slave_1 left promiscuous mode [ 173.106451][ T6064] EXT4-fs (loop0): 1 orphan inode deleted [ 173.116451][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.125969][ T6064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.191595][ T4241] device bridge_slave_0 left promiscuous mode [ 173.201654][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.321248][ T4241] device veth1_macvtap left promiscuous mode [ 173.339754][ T4241] device veth0_macvtap left promiscuous mode [ 173.362148][ T4241] device veth1_vlan left promiscuous mode [ 173.385059][ T4241] device veth0_vlan left promiscuous mode [ 173.464208][ T3557] Bluetooth: hci0: command tx timeout [ 175.202326][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 175.285844][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 175.422883][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.551966][ T3557] Bluetooth: hci0: command tx timeout [ 175.565971][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.687347][ T4241] bond0 (unregistering): Released all slaves [ 176.862259][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.932045][ T6087] netlink: 'syz.4.670': attribute type 27 has an invalid length. [ 176.951530][ T6087] netlink: 'syz.4.670': attribute type 4 has an invalid length. [ 177.024975][ T3563] EXT4-fs (loop0): unmounting filesystem. [ 177.102625][ T5988] team0: Port device team_slave_0 added [ 177.135079][ T5988] team0: Port device team_slave_1 added [ 177.275580][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.291931][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.559168][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.621952][ T3557] Bluetooth: hci0: command tx timeout [ 177.631030][ T6115] device ipvlan2 entered promiscuous mode [ 177.631573][ T6113] loop0: detected capacity change from 0 to 2048 [ 177.735464][ T6113] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.893265][ T6121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.894482][ T6113] syz.0.679: attempt to access beyond end of device [ 177.894482][ T6113] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 177.937610][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.951950][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.052756][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.243273][ T5988] device hsr_slave_0 entered promiscuous mode [ 178.379760][ T5988] device hsr_slave_1 entered promiscuous mode [ 178.432084][ T5988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.439687][ T5988] Cannot create hsr debugfs directory [ 178.488246][ T6137] loop0: detected capacity change from 0 to 512 [ 178.604954][ T6137] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.784454][ T6137] Quota error (device loop0): do_check_range: Getting block 4 out of range 1-0 [ 178.793699][ T6137] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 178.835097][ T6137] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.685: Failed to acquire dquot type 0 [ 178.840464][ T6144] netlink: 'syz.2.687': attribute type 27 has an invalid length. [ 178.855285][ T6137] EXT4-fs (loop0): Remounting filesystem read-only [ 178.893026][ T6137] EXT4-fs (loop0): 1 orphan inode deleted [ 178.898820][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.925469][ T6144] netlink: 'syz.2.687': attribute type 4 has an invalid length. [ 179.286362][ T3563] EXT4-fs (loop0): unmounting filesystem. [ 179.329958][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 179.409860][ T6153] netlink: 'syz.4.688': attribute type 15 has an invalid length. [ 179.490624][ T6153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 179.500091][ T6153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 179.509168][ T6153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 179.518002][ T6153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 179.724882][ T6155] loop0: detected capacity change from 0 to 32768 [ 179.732652][ T6155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.689 (6155) [ 179.759525][ T6153] device vxlan0 entered promiscuous mode [ 179.765308][ T6155] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.775621][ T6155] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.784378][ T6155] BTRFS info (device loop0): using free space tree [ 179.982186][ T6155] BTRFS info (device loop0): enabling ssd optimizations [ 180.161430][ T3563] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.902305][ T3566] Bluetooth: hci3: command 0x0406 tx timeout [ 180.946730][ T6184] device ipvlan2 entered promiscuous mode [ 181.124135][ T5988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.177802][ T5988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.227945][ T5988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.272296][ T5988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.103151][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.562622][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.582835][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.593586][ T5988] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.682826][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.691817][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.732527][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.739679][ T3926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.787418][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.803327][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.842659][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.851220][ T3928] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.858375][ T3928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.908176][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.954993][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.974219][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.044182][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.071155][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.135021][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.189114][ T5988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.241714][ T5988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.293953][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.303359][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.332243][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.361450][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.378451][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.432799][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 183.441621][ T6219] netlink: 'syz.0.701': attribute type 15 has an invalid length. [ 183.452376][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.132623][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.140190][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.185161][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.286217][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.297704][ T6235] loop0: detected capacity change from 0 to 256 [ 184.332697][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.437267][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.463235][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.513200][ T5988] device veth0_vlan entered promiscuous mode [ 184.535679][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.553085][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.588217][ T5988] device veth1_vlan entered promiscuous mode [ 184.693698][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.709662][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.743003][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.778540][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.824818][ T5988] device veth0_macvtap entered promiscuous mode [ 184.859351][ T5988] device veth1_macvtap entered promiscuous mode [ 184.933734][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.980028][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.031574][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.064361][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.115549][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.150842][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.176814][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.232007][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.282135][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.325341][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.361488][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.412034][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.442036][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.463970][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.513592][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.578291][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.597312][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.619544][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.647318][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.672654][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.722139][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.770343][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.801301][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.832070][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.858021][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.913133][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.954384][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.984888][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.016010][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.060572][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.102020][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.117462][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.154739][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.183823][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.205613][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.233170][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.233753][ T27] audit: type=1326 audit(1720765772.877:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.1.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bcaf75bd9 code=0x0 [ 186.275715][ T6266] device ipvlan2 entered promiscuous mode [ 186.386018][ T5988] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.415505][ T5988] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.445340][ T5988] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.501766][ T5988] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.686256][ T6283] mmap: syz.2.713 (6283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.412112][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.420255][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.490314][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.533400][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.576210][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.636927][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.810402][ T6297] loop0: detected capacity change from 0 to 4096 [ 188.019880][ T6305] device vlan2 entered promiscuous mode [ 188.081809][ T6297] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 188.088915][ T6305] device gretap0 entered promiscuous mode [ 188.209601][ T6305] device gretap0 left promiscuous mode [ 189.518715][ T6348] loop0: detected capacity change from 0 to 256 [ 189.746688][ T6312] loop3: detected capacity change from 0 to 40427 [ 189.806666][ T6312] F2FS-fs (loop3): invalid crc value [ 189.842647][ T6312] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.091295][ T6312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.345696][ T6312] overlayfs: failed to resolve './file0': -2 [ 190.552768][ T5988] syz-executor: attempt to access beyond end of device [ 190.552768][ T5988] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 191.141975][ T3566] Bluetooth: hci2: command 0x0406 tx timeout [ 193.666341][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 193.862934][ T6424] device vlan2 entered promiscuous mode [ 194.593182][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599488][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665480][ T6432] loop3: detected capacity change from 0 to 256 [ 194.685419][ T6424] device virt_wifi0 entered promiscuous mode [ 194.702356][ T6434] xt_HMARK: spi-set and port-set can't be combined [ 194.774843][ T6424] device virt_wifi0 left promiscuous mode [ 196.485975][ T6461] xt_HMARK: spi-set and port-set can't be combined [ 197.554567][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 197.611982][ T3609] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.852026][ T3609] usb 1-1: Using ep0 maxpacket: 16 [ 198.041952][ T3923] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.132158][ T3609] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 198.162788][ T3609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.170816][ T3609] usb 1-1: Product: syz [ 198.211990][ T3609] usb 1-1: Manufacturer: syz [ 198.230593][ T3609] usb 1-1: SerialNumber: syz [ 198.254994][ T3609] usb 1-1: config 0 descriptor?? [ 198.301993][ T3923] usb 4-1: Using ep0 maxpacket: 16 [ 198.433750][ T3923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.463630][ T3923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.469003][ T3659] udevd[3659]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.527247][ T3923] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.567732][ T3923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.618108][ T3923] usb 4-1: config 0 descriptor?? [ 199.116834][ T3923] HID 045e:07da: Invalid code 65791 type 1 [ 199.194053][ T3923] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input14 [ 199.360382][ T3923] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 199.517330][ T6473] device dummy0 entered promiscuous mode [ 199.587884][ T6473] device dummy0 left promiscuous mode [ 199.723949][ T3928] usb 1-1: USB disconnect, device number 9 [ 199.927302][ T6488] loop3: detected capacity change from 0 to 512 [ 199.951295][ T6488] EXT4-fs: Ignoring removed bh option [ 199.989532][ T6488] EXT4-fs (loop3): invalid inodes per group: 0 [ 199.989532][ T6488] [ 200.174296][ T3928] usb 4-1: USB disconnect, device number 15 [ 200.962731][ T6562] 9pnet_fd: Insufficient options for proto=fd [ 201.801229][ T6583] loop3: detected capacity change from 0 to 256 [ 202.580317][ T6553] loop0: detected capacity change from 0 to 32768 [ 202.617839][ T6553] XFS: noikeep mount option is deprecated. [ 202.700002][ T6553] XFS (loop0): Mounting V5 Filesystem [ 202.802419][ T6553] XFS (loop0): Ending clean mount [ 202.831963][ T3733] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.869177][ T6553] XFS (loop0): Quotacheck needed: Please wait. [ 202.947557][ T6553] XFS (loop0): Quotacheck: Done. [ 203.066797][ T3563] XFS (loop0): Unmounting Filesystem [ 203.102058][ T3733] usb 4-1: Using ep0 maxpacket: 16 [ 203.199134][ T3295] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.222308][ T3733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.243546][ T3733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.317785][ T3733] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.351539][ T3733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.398266][ T3733] usb 4-1: config 0 descriptor?? [ 203.602259][ T3295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.647246][ T3295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.681317][ T3295] usb 5-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 203.707075][ T3295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.761517][ T3295] usb 5-1: config 0 descriptor?? [ 203.895353][ T3733] HID 045e:07da: Invalid code 65791 type 1 [ 203.927161][ T3733] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input15 [ 203.982792][ T3733] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 205.108154][ T3295] logitech 0003:046D:C219.000C: invalid report_size 213086753 [ 205.121904][ T3295] logitech 0003:046D:C219.000C: item 0 4 1 7 parsing failed [ 205.129689][ T3295] logitech 0003:046D:C219.000C: parse failed [ 205.151989][ T3295] logitech: probe of 0003:046D:C219.000C failed with error -22 [ 205.322385][ T3927] usb 5-1: USB disconnect, device number 9 [ 205.471496][ T6587] loop3: detected capacity change from 0 to 512 [ 205.492597][ T6587] EXT4-fs: Ignoring removed bh option [ 205.539441][ T6587] EXT4-fs (loop3): invalid inodes per group: 0 [ 205.539441][ T6587] [ 206.371370][ T3295] usb 4-1: USB disconnect, device number 16 [ 207.678814][ T6632] loop0: detected capacity change from 0 to 32768 [ 207.706975][ T6632] XFS: noikeep mount option is deprecated. [ 207.791043][ T6632] XFS (loop0): Mounting V5 Filesystem [ 207.914445][ T6632] XFS (loop0): Ending clean mount [ 207.926211][ T6632] XFS (loop0): Quotacheck needed: Please wait. [ 207.942030][ T3599] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.018910][ T6632] XFS (loop0): Quotacheck: Done. [ 208.140349][ T3563] XFS (loop0): Unmounting Filesystem [ 208.272204][ T3609] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 208.332209][ T3599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.361959][ T3599] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 10 [ 208.395786][ T3599] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 208.440495][ T3599] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 208.642196][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.662232][ T3599] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.671318][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.673853][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.721402][ T3609] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 208.732060][ T3599] usb 5-1: Product: syz [ 208.736249][ T3599] usb 5-1: Manufacturer: syz [ 208.740846][ T3599] usb 5-1: SerialNumber: syz [ 208.745938][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.784667][ T3609] usb 4-1: config 0 descriptor?? [ 209.065928][ T6651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.072243][ T3605] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 209.332036][ T3605] usb 3-1: Using ep0 maxpacket: 16 [ 209.452066][ T3605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.483827][ T3605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.524238][ T3609] logitech 0003:046D:C219.000D: invalid report_size 213086753 [ 209.532276][ T3605] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.541427][ T3605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.567070][ T3609] logitech 0003:046D:C219.000D: item 0 4 1 7 parsing failed [ 209.582375][ T3609] logitech 0003:046D:C219.000D: parse failed [ 209.593413][ T3609] logitech: probe of 0003:046D:C219.000D failed with error -22 [ 209.614542][ T3605] usb 3-1: config 0 descriptor?? [ 209.815919][ T3927] usb 4-1: USB disconnect, device number 17 [ 209.842674][ T6651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.132153][ T3599] cdc_ncm 5-1:1.0: bind() failure [ 210.146729][ T3605] HID 045e:07da: Invalid code 65791 type 1 [ 210.162228][ T3599] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 210.184367][ T3605] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input16 [ 210.202367][ T3599] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 210.236005][ T3599] usbtest: probe of 5-1:1.1 failed with error -71 [ 210.241934][ T3605] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 210.272877][ T3599] usb 5-1: USB disconnect, device number 10 [ 211.323227][ T6706] syz.3.847 uses obsolete (PF_INET,SOCK_PACKET) [ 211.649753][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'. [ 212.808366][ T3733] usb 3-1: USB disconnect, device number 9 [ 213.729410][ T6777] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 216.163549][ T6817] loop3: detected capacity change from 0 to 1024 [ 217.025059][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 217.881037][ T6864] loop0: detected capacity change from 0 to 8 [ 217.941151][ T3735] kernel read not supported for file /input/event0 (pid: 3735 comm: kworker/0:12) [ 217.953079][ T6864] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 218.045570][ T6864] cramfs: Error -3 while decompressing! [ 218.051428][ T6864] cramfs: ffffffff91e21548(18)->ffff888055337000(4096) [ 218.102249][ T6864] cramfs: Error -3 while decompressing! [ 218.112699][ T6864] cramfs: ffffffff91e21548(18)->ffff888055337000(4096) [ 218.140309][ T27] audit: type=1800 audit(1720765804.777:43): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.875" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 218.180557][ T6869] loop3: detected capacity change from 0 to 128 [ 218.242648][ T6869] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.264058][ T6899] loop0: detected capacity change from 0 to 8 [ 220.312608][ T6899] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 220.355197][ T6899] cramfs: Error -3 while decompressing! [ 220.360803][ T6899] cramfs: ffffffff91e25548(18)->ffff88805bc11000(4096) [ 220.415315][ T6899] cramfs: Error -3 while decompressing! [ 220.420917][ T6899] cramfs: ffffffff91e25548(18)->ffff88805bc11000(4096) [ 220.462274][ T27] audit: type=1800 audit(1720765807.107:44): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.890" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 220.806988][ T3567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.816962][ T3567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.825964][ T3567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.834527][ T3567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.842366][ T3567] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.861064][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.955590][ T3567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.130930][ T6907] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 221.705761][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.606269][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.853588][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.021966][ T3923] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.062076][ T3567] Bluetooth: hci0: command tx timeout [ 223.273819][ T3733] kernel read not supported for file /input/event0 (pid: 3733 comm: kworker/0:11) [ 223.281950][ T3923] usb 2-1: Using ep0 maxpacket: 32 [ 223.422368][ T3923] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 223.436438][ T3923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.518144][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 223.539689][ T6943] loop0: detected capacity change from 0 to 2048 [ 223.561599][ T3923] usb 2-1: config 0 descriptor?? [ 223.673961][ T3923] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 223.702017][ T6943] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.761700][ T6946] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.816929][ T3557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.827613][ T3557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.842342][ T3557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.854267][ T3557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.861744][ T3557] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.876734][ T3557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.063891][ T6943] syz.0.907: attempt to access beyond end of device [ 224.063891][ T6943] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 224.131416][ T6943] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 224.312091][ T3923] gspca_nw80x: reg_r err -71 [ 224.316836][ T3923] nw80x: probe of 2-1:0.0 failed with error -71 [ 224.333515][ T3923] usb 2-1: USB disconnect, device number 10 [ 225.062202][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.143385][ T3567] Bluetooth: hci0: command tx timeout [ 225.687934][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.746365][ T6910] device bridge_slave_0 entered promiscuous mode [ 225.936195][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.943835][ T3557] Bluetooth: hci6: command tx timeout [ 225.992173][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.042288][ T6910] device bridge_slave_1 entered promiscuous mode [ 227.021715][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.222179][ T3557] Bluetooth: hci0: command tx timeout [ 227.233340][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.581036][ T6910] team0: Port device team_slave_0 added [ 227.853177][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 228.024024][ T3557] Bluetooth: hci6: command tx timeout [ 228.156258][ T6910] team0: Port device team_slave_1 added [ 228.756549][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.811245][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.371952][ T3557] Bluetooth: hci0: command tx timeout [ 229.565895][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.744077][ T11] device hsr_slave_0 left promiscuous mode [ 229.783269][ T11] device hsr_slave_1 left promiscuous mode [ 229.852331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.859824][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.893578][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.901226][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.972877][ T11] device bridge_slave_1 left promiscuous mode [ 229.979181][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.016235][ T7016] loop0: detected capacity change from 0 to 1024 [ 230.063406][ T11] device bridge_slave_0 left promiscuous mode [ 230.069708][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.101962][ T3557] Bluetooth: hci6: command tx timeout [ 230.134097][ T7016] hfsplus: invalid btree flag [ 230.139682][ T7016] hfsplus: failed to load attributes file [ 230.372222][ T11] device veth1_macvtap left promiscuous mode [ 230.383651][ T11] device veth0_macvtap left promiscuous mode [ 230.411478][ T11] device veth1_vlan left promiscuous mode [ 230.422333][ T11] device veth0_vlan left promiscuous mode [ 230.677010][ T3567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.722219][ T3567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.732204][ T3567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.741318][ T3567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.750672][ T3567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.758039][ T3567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.072934][ T11] team0 (unregistering): Port device team_slave_1 removed [ 232.181967][ T3557] Bluetooth: hci6: command tx timeout [ 232.254821][ T11] team0 (unregistering): Port device team_slave_0 removed [ 232.400583][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.520713][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.831990][ T3567] Bluetooth: hci1: command tx timeout [ 233.685328][ T11] bond0 (unregistering): Released all slaves [ 233.849326][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 233.902341][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.909320][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.996193][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.244507][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.251628][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.281732][ T6947] device bridge_slave_0 entered promiscuous mode [ 234.333709][ T7037] loop0: detected capacity change from 0 to 2048 [ 234.343958][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.372028][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.395285][ T7037] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.407645][ T6947] device bridge_slave_1 entered promiscuous mode [ 234.450245][ T6910] device hsr_slave_0 entered promiscuous mode [ 234.481795][ T6910] device hsr_slave_1 entered promiscuous mode [ 234.499462][ T6910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.509414][ T7040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.542189][ T6910] Cannot create hsr debugfs directory [ 234.548808][ T7037] syz.0.929: attempt to access beyond end of device [ 234.548808][ T7037] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 234.602164][ T7037] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 234.628687][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.697628][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.902174][ T3567] Bluetooth: hci1: command tx timeout [ 235.128821][ T6947] team0: Port device team_slave_0 added [ 235.178791][ T6947] team0: Port device team_slave_1 added [ 235.475210][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.482478][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.643732][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.697058][ T7025] chnl_net:caif_netlink_parms(): no params data found [ 235.756817][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.792105][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.892065][ T3733] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.912055][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.987054][ T7075] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.272125][ T3733] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.318111][ T3733] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 10 [ 236.371493][ T3733] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 236.421095][ T3733] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 236.613820][ T6947] device hsr_slave_0 entered promiscuous mode [ 236.622300][ T6947] device hsr_slave_1 entered promiscuous mode [ 236.628721][ T3733] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.651432][ T3733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.682088][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.690011][ T6947] Cannot create hsr debugfs directory [ 236.721904][ T3733] usb 1-1: Product: syz [ 236.739350][ T3733] usb 1-1: Manufacturer: syz [ 236.772196][ T3733] usb 1-1: SerialNumber: syz [ 236.962115][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.969247][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.982020][ T3567] Bluetooth: hci1: command tx timeout [ 237.034308][ T7025] device bridge_slave_0 entered promiscuous mode [ 237.058105][ T7071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.073430][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.080531][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.143122][ T7025] device bridge_slave_1 entered promiscuous mode [ 237.386250][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.435354][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.619027][ T7025] team0: Port device team_slave_0 added [ 237.697129][ T7025] team0: Port device team_slave_1 added [ 237.772653][ T7071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.843549][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.850522][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.975967][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.012036][ T3733] cdc_ncm 1-1:1.0: bind() failure [ 238.046921][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.062026][ T3733] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 238.087981][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.115713][ T3733] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 238.152128][ T3733] usbtest: probe of 1-1:1.1 failed with error -71 [ 238.164588][ T3733] usb 1-1: USB disconnect, device number 10 [ 238.185455][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.455668][ T7025] device hsr_slave_0 entered promiscuous mode [ 238.480394][ T7025] device hsr_slave_1 entered promiscuous mode [ 238.512070][ T7025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.539956][ T7025] Cannot create hsr debugfs directory [ 238.562125][ T6910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.647031][ T6947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 238.721916][ T6947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.802678][ T6910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.895724][ T6947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 238.955950][ T6947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.024250][ T6910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.062017][ T3567] Bluetooth: hci1: command tx timeout [ 239.123665][ T6910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.285490][ T6947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 239.331995][ T6947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.029268][ T6947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 240.190323][ T6947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.753115][ T7120] loop0: detected capacity change from 0 to 256 [ 241.948049][ T7025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 241.991930][ T7025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.097840][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.197336][ T7025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 242.244992][ T7025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.360013][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.525721][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.536112][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.629422][ T7025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 242.674264][ T7025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.772114][ T3735] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 242.792175][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.824220][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.853585][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.860714][ T3926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.922367][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.931165][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.982400][ T3926] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.989641][ T3926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.022177][ T3735] usb 2-1: Using ep0 maxpacket: 8 [ 243.044786][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.072942][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.142272][ T3735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.334804][ T3735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.345113][ T3735] usb 2-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 243.354293][ T3735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.374405][ T3735] usb 2-1: config 0 descriptor?? [ 243.395270][ T7025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 243.412250][ T7025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.945054][ T3735] wacom 0003:056A:4135.000F: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 244.228914][ T3295] usb 2-1: USB disconnect, device number 11 [ 244.235890][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.305681][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.325914][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.383034][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.414019][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.454596][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.495024][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.532863][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.572420][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.685770][ T6910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.706024][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.486799][ T7175] loop0: detected capacity change from 0 to 1764 [ 245.515740][ T7175] ISOFS: Logical zone size(2) < hardware blocksize(1024) [ 245.874878][ T7177] loop0: detected capacity change from 0 to 2048 [ 246.039889][ T7177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.048556][ T7177] ext4 filesystem being mounted at /269/bus supports timestamps until 2038 (0x7fffffff) [ 246.171681][ T6947] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.407389][ T3563] EXT4-fs (loop0): unmounting filesystem. [ 246.536558][ T7186] loop0: detected capacity change from 0 to 16 [ 246.581612][ T7186] erofs: (device loop0): mounted with root inode @ nid 36. [ 246.624543][ T6947] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.694059][ T6947] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.754621][ T6947] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.814362][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.823248][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.345333][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.775545][ T4388] device hsr_slave_0 left promiscuous mode [ 247.820482][ T4388] device hsr_slave_1 left promiscuous mode [ 247.848015][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.874662][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.912864][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.920618][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.977248][ T4388] device bridge_slave_1 left promiscuous mode [ 248.003298][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.052202][ T4388] device bridge_slave_0 left promiscuous mode [ 248.058474][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.162232][ T3926] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.191691][ T4388] device veth1_macvtap left promiscuous mode [ 248.198055][ T7206] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 248.216560][ T4388] device veth0_macvtap left promiscuous mode [ 248.242155][ T4388] device veth1_vlan left promiscuous mode [ 248.258233][ T4388] device veth0_vlan left promiscuous mode [ 248.367364][ T7206] kvm: pic: level sensitive irq not supported [ 248.375444][ T7206] kvm: pic: non byte read [ 248.427238][ T3926] usb 1-1: Using ep0 maxpacket: 8 [ 248.481701][ T7206] kvm: pic: level sensitive irq not supported [ 248.481775][ T7206] kvm: pic: non byte read [ 248.573508][ T7206] kvm: pic: level sensitive irq not supported [ 248.573586][ T7206] kvm: pic: non byte read [ 248.592068][ T3926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.611444][ T3926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.640260][ T3926] usb 1-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 248.675446][ T3926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.722760][ T3926] usb 1-1: config 0 descriptor?? [ 248.738093][ T7206] kvm: pic: level sensitive irq not supported [ 248.738163][ T7206] kvm: pic: non byte read [ 249.227418][ T3926] wacom 0003:056A:4135.0010: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 249.450964][ T3923] usb 1-1: USB disconnect, device number 11 [ 250.216128][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 250.356043][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 250.512910][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.630635][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.053829][ T4388] bond0 (unregistering): Released all slaves [ 252.392387][ T7234] team0: Device ipvlan2 failed to register rx_handler [ 252.622110][ T7236] netlink: 'syz.0.964': attribute type 7 has an invalid length. [ 252.640317][ T7236] netlink: 'syz.0.964': attribute type 39 has an invalid length. [ 252.675555][ T7237] netlink: 'syz.0.964': attribute type 7 has an invalid length. [ 252.692494][ T7237] netlink: 'syz.0.964': attribute type 39 has an invalid length. [ 252.705168][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.722998][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.763303][ T7025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.831064][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.841771][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.857713][ T7025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.893797][ T6910] device veth0_vlan entered promiscuous mode [ 252.905711][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.918591][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.945053][ T7025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.974472][ T7025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.030511][ T6910] device veth1_vlan entered promiscuous mode [ 253.051371][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.164120][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.183856][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.203772][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.222583][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.262374][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.281263][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.314511][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.376965][ T6910] device veth0_macvtap entered promiscuous mode [ 253.432768][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.603879][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.613203][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.623298][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.630407][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.638980][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.647852][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.657770][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.664923][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.402834][ T6910] device veth1_macvtap entered promiscuous mode [ 254.421052][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.433425][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.443485][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.454693][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.464726][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.475632][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.485792][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.514503][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.524728][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.535661][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.577572][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.619111][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.659869][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.726510][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.763225][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.793883][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.835154][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.029494][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.039520][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.049711][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.058461][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.073288][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.093590][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.111617][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.369952][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.594517][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.627235][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754826][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.862975][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.953944][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.011896][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.021737][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.092065][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.134663][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.191908][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.221881][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.253016][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.301923][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.351876][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.391895][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.434027][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.469819][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.523207][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.551608][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.575159][ T6910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.604334][ T6910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.652593][ T6910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.694517][ T6910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.882517][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.042194][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.050017][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.115983][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.158334][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.182217][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.361599][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.380839][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.440374][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.501090][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.508275][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.558099][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.593577][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.625358][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.632536][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.702441][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.711303][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.773350][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.804178][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.843947][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.862476][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.918911][ T7025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.922477][ T6767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.957563][ T6767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.991959][ T7025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.069263][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.078778][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.113482][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.140733][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.171585][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.182890][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.191389][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.245609][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.302110][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.309631][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.347826][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.004133][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.011734][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.054057][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.134326][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.152947][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.233840][ T7025] device veth0_vlan entered promiscuous mode [ 259.291432][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.322805][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.366959][ T7025] device veth1_vlan entered promiscuous mode [ 259.395173][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.412948][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.420818][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.485120][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.494357][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.530844][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.616081][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.657412][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.684454][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.712956][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.738227][ T7025] device veth0_macvtap entered promiscuous mode [ 259.776208][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.822538][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.851491][ T6947] device veth0_vlan entered promiscuous mode [ 259.906688][ T6947] device veth1_vlan entered promiscuous mode [ 259.954538][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.011313][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.042557][ T7025] device veth1_macvtap entered promiscuous mode [ 260.091349][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.112790][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.152866][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.182829][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.217283][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.250857][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.301918][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.342317][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.382122][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.410886][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.442086][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.481113][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.511937][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.541167][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.581047][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.611975][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.652184][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.682104][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.718282][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.747286][ T6947] device veth0_macvtap entered promiscuous mode [ 260.772474][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.780797][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.822787][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.834611][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.868582][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.909322][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.951491][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.986325][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.005130][ T7305] loop3: detected capacity change from 0 to 32768 [ 261.021275][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.101977][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.119278][ T7305] XFS (loop3): Mounting V5 Filesystem [ 261.152893][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.230338][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.282079][ T7305] XFS (loop3): Ending clean mount [ 261.302707][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.333280][ T7305] XFS (loop3): Quotacheck needed: Please wait. [ 261.368909][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.425163][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.442321][ T7305] XFS (loop3): Quotacheck: Done. [ 261.481449][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.492002][ T27] audit: type=1800 audit(1854983576.128:45): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.983" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 261.522705][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.563069][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.586917][ T6947] device veth1_macvtap entered promiscuous mode [ 261.595351][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.608762][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.630783][ T7025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.652838][ T7025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.661563][ T7025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.702088][ T7025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.724641][ T6910] XFS (loop3): Unmounting Filesystem [ 261.767126][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.841958][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.882369][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.902095][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.942356][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.972025][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.011578][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.041902][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.061906][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.091885][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.101723][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.131982][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.182706][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.201883][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.211739][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.231911][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.264980][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.311574][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.330561][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.380437][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.411276][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.439948][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.482016][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.521899][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.548285][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.582208][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.611877][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.621717][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.662379][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.681885][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.721913][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.742434][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.764937][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.791886][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.822163][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.862005][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.877884][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.892611][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.949392][ T6947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.967579][ T6947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.001977][ T6947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.010703][ T6947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.137941][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.169280][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.256385][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.289221][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.311965][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.356737][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.407488][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.435241][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.524799][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.691799][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.779476][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.080929][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.350759][ T7329] qrtr: Invalid version 0 [ 265.104577][ T3567] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 265.152570][ T3567] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 265.163461][ T3567] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 265.172851][ T3567] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 265.180392][ T3567] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 265.198795][ T3567] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 265.677029][ T7357] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.686381][ T7357] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.695186][ T7357] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.704360][ T7357] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.901589][ T7357] device vxlan0 entered promiscuous mode [ 266.833644][ T7364] device batadv_slave_1 entered promiscuous mode [ 266.840179][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 266.897306][ T7363] device batadv_slave_1 left promiscuous mode [ 267.146208][ T7374] qrtr: Invalid version 0 [ 267.203766][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.216122][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.232259][ T3557] Bluetooth: hci8: command tx timeout [ 267.255933][ T7349] device bridge_slave_0 entered promiscuous mode [ 267.332666][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 267.372059][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.406046][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.454620][ T7349] device bridge_slave_1 entered promiscuous mode [ 267.582586][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.614924][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.806674][ T7349] team0: Port device team_slave_0 added [ 267.859634][ T7349] team0: Port device team_slave_1 added [ 268.621825][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.628966][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.786722][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.886669][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.901883][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.938377][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.055257][ T7400] loop3: detected capacity change from 0 to 164 [ 269.145765][ T7349] device hsr_slave_0 entered promiscuous mode [ 269.182156][ T7349] device hsr_slave_1 entered promiscuous mode [ 269.193035][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.217283][ T7349] Cannot create hsr debugfs directory [ 269.305065][ T3557] Bluetooth: hci8: command tx timeout [ 269.560473][ T7406] netlink: 'syz.4.1014': attribute type 3 has an invalid length. [ 269.969202][ T7349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.011611][ T7349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 270.047486][ T7349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.103762][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1017'. [ 270.205350][ T7349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.241145][ T7349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 270.268923][ T7349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.405770][ T7349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.427460][ T7349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 270.497065][ T7349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.678972][ T7349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.700358][ T7349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 270.751806][ T7349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.174525][ T7349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.205355][ T7349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.274866][ T7349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.319223][ T7349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.341749][ T7447] capability: warning: `syz.3.1032' uses deprecated v2 capabilities in a way that may be insecure [ 271.383428][ T3557] Bluetooth: hci8: command tx timeout [ 271.461058][ T7450] hub 9-0:1.0: USB hub found [ 271.482834][ T7450] hub 9-0:1.0: 8 ports detected [ 271.631474][ T7447] loop3: detected capacity change from 0 to 2048 [ 271.652173][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.716292][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.725180][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.770988][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.808478][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.826889][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.842526][ T3733] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.849710][ T3733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.918914][ T7447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 272.097439][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.132909][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.153049][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.192869][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.200007][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.255867][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.278439][ T6910] EXT4-fs (loop3): unmounting filesystem. [ 272.330047][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.352965][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.382275][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.426321][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.443367][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.470379][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.512997][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.521559][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.560886][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.607711][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.631093][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.048126][ T27] audit: type=1326 audit(1854983587.688:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e09f75bd9 code=0x7ffc0000 [ 273.131948][ T27] audit: type=1326 audit(1854983587.738:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e09f75bd9 code=0x7ffc0000 [ 273.229499][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.242260][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.277250][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.346780][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.362826][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.440460][ T7349] device veth0_vlan entered promiscuous mode [ 273.471134][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.471948][ T3557] Bluetooth: hci8: command tx timeout [ 273.480104][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.549142][ T7349] device veth1_vlan entered promiscuous mode [ 273.569319][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.589714][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.621174][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.661427][ T7349] device veth0_macvtap entered promiscuous mode [ 273.754437][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.766868][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.822746][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.834526][ T7349] device veth1_macvtap entered promiscuous mode [ 273.861638][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.911541][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.947831][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.991994][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.909723][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.951389][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.995586][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.041102][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.066253][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.076652][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.104153][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.152879][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.202971][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.254769][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.292746][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.328227][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.374180][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.417166][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.472183][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.503507][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.522734][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.531524][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.562882][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.586099][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.608784][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.631548][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.723000][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.810047][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.908048][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.990720][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.112111][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.162349][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.224703][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.288003][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.314166][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.341646][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.382027][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.409221][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.427923][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.449898][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.556693][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.602231][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.611022][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.666715][ T7349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.692557][ T7349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.725759][ T7349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.743114][ T28] INFO: task kworker/u4:0:9 blocked for more than 143 seconds. [ 276.762757][ T7349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.772013][ T28] Not tainted 6.1.98-syzkaller #0 [ 276.810023][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.846466][ T28] task:kworker/u4:0 state:D stack:21024 pid:9 ppid:2 flags:0x00004000 [ 276.898137][ T28] Workqueue: writeback wb_workfn (flush-7:2) [ 276.944553][ T28] Call Trace: [ 276.956969][ T28] [ 276.967952][ T28] __schedule+0x142d/0x4550 [ 276.988144][ T28] ? __sched_text_start+0x8/0x8 [ 277.003821][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 277.024135][ T28] ? blk_check_plugged+0x250/0x250 [ 277.045682][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 277.062118][ T28] schedule+0xbf/0x180 [ 277.081490][ T28] schedule_preempt_disabled+0xf/0x20 [ 277.112281][ T28] __mutex_lock+0x6b9/0xd80 [ 277.129042][ T28] ? __mutex_lock+0x53c/0xd80 [ 277.146844][ T28] ? exfat_write_inode+0x65/0x110 [ 277.165914][ T28] ? mutex_lock_nested+0x10/0x10 [ 277.187367][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 277.210386][ T28] exfat_write_inode+0x65/0x110 [ 277.226376][ T28] __writeback_single_inode+0x67d/0x11e0 [ 277.254175][ T28] writeback_sb_inodes+0xc2b/0x1b20 [ 277.271815][ T28] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 277.289516][ T28] ? queue_io+0x630/0x630 [ 277.310993][ T28] ? __writeback_inodes_wb+0x400/0x400 [ 277.332348][ T28] __writeback_inodes_wb+0x114/0x400 [ 277.347757][ T28] wb_writeback+0x4b1/0xe10 [ 277.360178][ T28] ? percpu_ref_tryget+0x260/0x260 [ 277.372143][ T28] ? _find_next_bit+0x11b/0x120 [ 277.384843][ T28] wb_workfn+0xc9e/0x1020 [ 277.399471][ T28] ? inode_wait_for_writeback+0x280/0x280 [ 277.414206][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.433609][ T28] ? print_irqtrace_events+0x210/0x210 [ 277.449151][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 277.465048][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 277.480385][ T28] ? process_one_work+0x7a9/0x11d0 [ 277.495809][ T28] process_one_work+0x8a9/0x11d0 [ 277.508766][ T28] ? worker_detach_from_pool+0x260/0x260 [ 277.524811][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 277.543561][ T28] ? kthread_data+0x4e/0xc0 [ 277.556079][ T28] ? wq_worker_running+0x97/0x190 [ 277.570042][ T28] worker_thread+0xa47/0x1200 [ 277.582659][ T28] kthread+0x28d/0x320 [ 277.594574][ T28] ? worker_clr_flags+0x190/0x190 [ 277.610441][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.623100][ T28] ret_from_fork+0x1f/0x30 [ 277.637578][ T28] [ 277.644202][ T28] [ 277.644202][ T28] Showing all locks held in the system: [ 277.672605][ T28] 4 locks held by kworker/u4:0/9: [ 277.691261][ T28] #0: ffff888017255938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.726547][ T28] #1: ffffc900000e7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.758504][ T28] #2: ffff88805d8340e0 (&type->s_umount_key#50){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 277.808815][ T28] #3: ffff88805d8320e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 277.859764][ T28] 1 lock held by rcu_tasks_kthre/12: [ 277.869088][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 277.902457][ T28] 1 lock held by rcu_tasks_trace/13: [ 277.908164][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 277.949685][ T28] 1 lock held by khungtaskd/28: [ 277.959792][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 277.983847][ T28] 4 locks held by kworker/u4:4/56: [ 277.988997][ T28] #0: ffff888017255938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.030158][ T28] #1: ffffc90001577d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.063932][ T28] #2: ffff888061dc40e0 (&type->s_umount_key#50){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 278.092603][ T28] #3: ffff88807c9ce0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 278.112709][ T28] 2 locks held by getty/3313: [ 278.117437][ T28] #0: ffff888029553098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 278.158051][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 278.178812][ T28] 3 locks held by kworker/u5:2/3557: [ 278.184481][ T3566] Bluetooth: hci7: command 0x0406 tx timeout [ 278.204436][ T28] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 278.253820][ T28] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 278.309335][ T28] #2: ffff888075ffc920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x2c7/0x400 [ 278.352361][ T28] 3 locks held by syz-executor/3558: [ 278.373569][ T28] 2 locks held by kworker/1:6/3598: [ 278.392156][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.425046][ T28] #1: ffffc9000441fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.463174][ T28] 3 locks held by kworker/0:7/3605: [ 278.479513][ T28] #0: ffff88814afb1d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.514266][ T28] #1: ffffc9000444fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.561905][ T28] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 278.571486][ T28] 3 locks held by syz-executor/3738: [ 278.601889][ T28] 3 locks held by kworker/1:8/3922: [ 278.607142][ T28] #0: ffff88814afb1d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.651943][ T28] #1: ffffc900030dfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.701891][ T28] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 278.711421][ T28] 3 locks held by kworker/u4:12/4388: [ 278.735013][ T28] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 278.761966][ T28] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 278.791938][ T28] #2: ffff8880597ecd40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa0/0x1480 [ 278.801597][ T28] 3 locks held by syz-executor/5026: [ 278.857472][ T28] 4 locks held by kworker/u4:15/5794: [ 278.863328][ T28] #0: ffff888017255938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.891945][ T28] #1: ffffc9000a15fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.911947][ T28] #2: ffff888077b880e0 (&type->s_umount_key#50){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 278.941875][ T28] #3: ffff888061dce0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 278.961995][ T28] 3 locks held by kworker/u4:25/6767: [ 278.967417][ T28] 2 locks held by syz.0.970/7254: [ 278.982147][ T28] #0: ffff88805d8340e0 (&type->s_umount_key#50){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 279.001941][ T28] #1: ffff88801f5587d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10 [ 279.028254][ T28] 3 locks held by syz-executor/7349: [ 279.047342][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 279.081925][ T28] #1: ffff88805e4493e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 279.091661][ T28] #2: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 279.140569][ T7349] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 279.154470][ T28] [ 279.159099][ T28] ============================================= [ 279.159099][ T28] [ 279.182174][ T28] NMI backtrace for cpu 1 [ 279.186537][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 279.194346][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 279.204487][ T28] Call Trace: [ 279.207763][ T28] [ 279.210694][ T28] dump_stack_lvl+0x1e3/0x2cb [ 279.215388][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 279.220860][ T28] ? panic+0x764/0x764 [ 279.224934][ T28] ? vprintk_emit+0x622/0x740 [ 279.229621][ T28] ? printk_sprint+0x490/0x490 [ 279.234404][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 279.239539][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 279.244490][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 279.250637][ T28] ? _printk+0xd1/0x111 [ 279.254781][ T28] ? panic+0x764/0x764 [ 279.258839][ T28] ? __wake_up_klogd+0xcc/0x100 [ 279.263678][ T28] ? panic+0x764/0x764 [ 279.267733][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 279.273801][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 279.279861][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 279.285837][ T28] watchdog+0xf88/0xfd0 [ 279.289985][ T28] ? watchdog+0x1f8/0xfd0 [ 279.294311][ T28] kthread+0x28d/0x320 [ 279.298364][ T28] ? hungtask_pm_notify+0x50/0x50 [ 279.303375][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.307956][ T28] ret_from_fork+0x1f/0x30 [ 279.312376][ T28] [ 279.316548][ T28] Sending NMI from CPU 1 to CPUs 0: [ 279.321797][ C0] NMI backtrace for cpu 0 [ 279.321807][ C0] CPU: 0 PID: 7349 Comm: syz-executor Not tainted 6.1.98-syzkaller #0 [ 279.321822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 279.321831][ C0] RIP: 0010:lock_is_held_type+0x9/0x180 [ 279.321853][ C0] Code: 8a 48 c7 c6 20 01 ec 8a e8 14 55 c7 f6 0f 0b eb bf e8 ab fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 bd ff ff [ 279.321864][ C0] RSP: 0018:ffffc9000448ed58 EFLAGS: 00000202 [ 279.321876][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888027999dc0 [ 279.321885][ C0] RDX: ffff888027999dc0 RSI: 00000000ffffffff RDI: ffff88806219f828 [ 279.321894][ C0] RBP: dffffc0000000000 R08: ffffffff81f7bdb3 R09: ffffed100ba9fc59 [ 279.321904][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806219f780 [ 279.321913][ C0] R13: ffff88806219f810 R14: ffff88806219f780 R15: dffffc0000000000 [ 279.321923][ C0] FS: 00005555572ef500(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 279.321936][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.321948][ C0] CR2: 0000001b2d61aff8 CR3: 00000000500d9000 CR4: 00000000003506f0 [ 279.321961][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.321969][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.321979][ C0] Call Trace: [ 279.321984][ C0] [ 279.321989][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 279.322009][ C0] ? read_lock_is_recursive+0x10/0x10 [ 279.322030][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 279.322050][ C0] ? nmi_handle+0x25/0x440 [ 279.322076][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 279.322094][ C0] ? nmi_handle+0x12e/0x440 [ 279.322112][ C0] ? nmi_handle+0x25/0x440 [ 279.322130][ C0] ? lock_is_held_type+0x9/0x180 [ 279.322144][ C0] ? default_do_nmi+0x62/0x150 [ 279.322158][ C0] ? exc_nmi+0xa8/0x100 [ 279.322171][ C0] ? end_repeat_nmi+0x16/0x31 [ 279.322192][ C0] ? __d_lookup_unhash+0x43/0x330 [ 279.322209][ C0] ? lock_is_held_type+0x9/0x180 [ 279.322224][ C0] ? lock_is_held_type+0x9/0x180 [ 279.322240][ C0] ? lock_is_held_type+0x9/0x180 [ 279.322254][ C0] [ 279.322258][ C0] [ 279.322265][ C0] __d_lookup_unhash+0x59/0x330 [ 279.322282][ C0] __d_add+0x46e/0x800 [ 279.322301][ C0] simple_lookup+0xbd/0xf0 [ 279.322316][ C0] __lookup_slow+0x27e/0x3d0 [ 279.322332][ C0] ? lookup_one_len+0x2d0/0x2d0 [ 279.322356][ C0] lookup_one_len+0x187/0x2d0 [ 279.322372][ C0] ? lookup_one_common+0x460/0x460 [ 279.322392][ C0] start_creating+0x17f/0x310 [ 279.322410][ C0] __debugfs_create_file+0x74/0x500 [ 279.322428][ C0] ieee80211_debugfs_add_netdev+0x222/0xec0 [ 279.322447][ C0] ? sta_aql_write+0x4d0/0x4d0 [ 279.322462][ C0] ? ieee80211_setup_sdata+0x9c3/0xc30 [ 279.322483][ C0] ieee80211_if_add+0xa3d/0x1890 [ 279.322504][ C0] ieee80211_register_hw+0x32ff/0x3f10 [ 279.322525][ C0] ? ieee80211_register_hw+0x1131/0x3f10 [ 279.322539][ C0] ? ieee80211_register_hw+0x1131/0x3f10 [ 279.322556][ C0] ? ieee80211_tasklet_handler+0x1b0/0x1b0 [ 279.322573][ C0] ? __debug_object_init+0xe9/0x450 [ 279.322594][ C0] ? memset+0x1f/0x40 [ 279.322609][ C0] ? __hrtimer_init+0x181/0x260 [ 279.322625][ C0] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 279.322654][ C0] hwsim_new_radio_nl+0xc54/0x1190 [ 279.322675][ C0] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 279.322698][ C0] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 279.322718][ C0] genl_rcv_msg+0xc1a/0xf70 [ 279.322736][ C0] ? genl_bind+0x400/0x400 [ 279.322764][ C0] ? read_lock_is_recursive+0x10/0x10 [ 279.322786][ C0] ? ref_tracker_free+0x638/0x7d0 [ 279.322800][ C0] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 279.322819][ C0] ? refcount_inc+0x80/0x80 [ 279.322832][ C0] ? __copy_skb_header+0x47b/0x600 [ 279.322851][ C0] netlink_rcv_skb+0x1cd/0x410 [ 279.322870][ C0] ? genl_bind+0x400/0x400 [ 279.322884][ C0] ? netlink_ack+0x1290/0x1290 [ 279.322910][ C0] genl_rcv+0x24/0x40 [ 279.322922][ C0] netlink_unicast+0x7d8/0x970 [ 279.322944][ C0] ? netlink_detachskb+0x90/0x90 [ 279.322960][ C0] ? __virt_addr_valid+0x44a/0x520 [ 279.322978][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 279.322993][ C0] ? __check_object_size+0x4dd/0xa30 [ 279.323008][ C0] ? bpf_lsm_netlink_send+0x5/0x10 [ 279.323026][ C0] netlink_sendmsg+0xa26/0xd60 [ 279.323045][ C0] ? netlink_getsockopt+0x580/0x580 [ 279.323057][ C0] ? __might_fault+0xa1/0x110 [ 279.323074][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 279.323093][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 279.323109][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 279.323126][ C0] ? netlink_getsockopt+0x580/0x580 [ 279.323138][ C0] __sys_sendto+0x480/0x600 [ 279.323161][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 279.323185][ C0] ? alloc_fd+0x59c/0x640 [ 279.323205][ C0] ? print_irqtrace_events+0x210/0x210 [ 279.323226][ C0] __x64_sys_sendto+0xda/0xf0 [ 279.323246][ C0] do_syscall_64+0x3b/0xb0 [ 279.323264][ C0] ? clear_bhb_loop+0x45/0xa0 [ 279.323282][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.323299][ C0] RIP: 0033:0x7fdc1a37796c [ 279.323317][ C0] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 279.323328][ C0] RSP: 002b:00007ffe0fba2100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 279.323343][ C0] RAX: ffffffffffffffda RBX: 00007fdc1b034620 RCX: 00007fdc1a37796c [ 279.323353][ C0] RDX: 0000000000000024 RSI: 00007fdc1b034670 RDI: 0000000000000003 [ 279.323363][ C0] RBP: 0000000000000000 R08: 00007ffe0fba2154 R09: 000000000000000c [ 279.323372][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 279.323381][ C0] R13: 0000000000000000 R14: 00007fdc1b034670 R15: 0000000000000000 [ 279.323397][ C0] [ 279.691371][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 279.691385][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 279.691402][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 279.691412][ T28] Call Trace: [ 279.691418][ T28] [ 279.691424][ T28] dump_stack_lvl+0x1e3/0x2cb [ 279.691454][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 279.691476][ T28] ? panic+0x764/0x764 [ 279.691493][ T28] ? llist_add_batch+0x160/0x1d0 [ 279.691516][ T28] ? vscnprintf+0x59/0x80 [ 279.691536][ T28] panic+0x318/0x764 [ 279.691554][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 279.691578][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 279.691599][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 279.691621][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 279.691644][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 279.691670][ T28] watchdog+0xfc7/0xfd0 [ 279.691694][ T28] ? watchdog+0x1f8/0xfd0 [ 279.691717][ T28] kthread+0x28d/0x320 [ 279.691730][ T28] ? hungtask_pm_notify+0x50/0x50 [ 279.691748][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.691764][ T28] ret_from_fork+0x1f/0x30 [ 279.691795][ T28] [ 279.695666][ T28] Kernel Offset: disabled [ 280.019611][ T28] Rebooting in 86400 seconds..